381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:13 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:13 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40000, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000180)=0x9) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20}, {0x1, @random="bcb7fb3ccf2d"}, 0x10, {0x2, 0x4e21, @multicast1=0xe0000001}, 'bcsf0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x40) ioctl$KDDELIO(r3, 0x4b35, 0x800) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000d40)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000e80)}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000001c0)={0x7, 0x32, 0x1, r0}) 2018/05/11 08:07:13 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = getpid() ioprio_get$pid(0x3, r1) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r2, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r2, 0x4b36) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r4}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r2, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:13 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = getpid() ioprio_get$pid(0x3, r1) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r2, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) sendto(r2, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r4}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r2, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:13 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:13 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:13 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d3406291") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 335.947132] binder: 29859:29865 unknown command 1709728529 [ 335.947140] binder: 29859:29865 ioctl c0306201 20000040 returned -22 [ 335.947797] binder: BINDER_SET_CONTEXT_MGR already set [ 335.947806] binder: 29857:29863 ioctl 40046207 0 returned -16 [ 335.948387] binder_alloc: 29771: binder_alloc_buf, no vma 2018/05/11 08:07:13 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:13 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) getsockname$inet(r1, &(0x7f0000000080), &(0x7f0000000100)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303}], 0x315, 0x0, &(0x7f0000000080)}) 2018/05/11 08:07:13 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:13 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:13 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/206, 0xce}}], 0x1, 0x203f, 0x0) 2018/05/11 08:07:13 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) [ 335.948404] binder: 29857:29863 transaction failed 29189/-3, size 0-0 line 3133 [ 335.996636] binder: BINDER_SET_CONTEXT_MGR already set [ 335.996645] binder: 29872:29878 ioctl 40046207 0 returned -16 2018/05/11 08:07:13 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:13 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) r4 = request_key(&(0x7f00000002c0)='rxrpc\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_version\x00', 0xffffffffffffffff) keyctl$get_persistent(0x16, r3, r4) r5 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x80000600) inotify_rm_watch(r2, r5) fchmod(r0, 0x90) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000080)={0x77359400}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000d40)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000e80)}) 2018/05/11 08:07:13 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 335.996953] binder_alloc: 29771: binder_alloc_buf, no vma [ 335.996969] binder: 29872:29878 transaction failed 29189/-3, size 0-0 line 3133 [ 336.002992] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/11 08:07:13 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:13 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:13 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="046308409c5ae66f454043aac57bf61a0a8052aa9745fef93914a86fad6c1bae93dbfca630d5b6ace68a2e89c1d05f0ee26dbe7d8b0c37858b62a91628aabe01009d1d1184754ed7e06c30c6f58d1c53de39d4f50dba24bae90bf49ac9777bd94917062239a680f4b2780bc07c2221a707e7812c", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000e80)}) [ 336.003002] binder: 29880:29882 ioctl 40046207 0 returned -16 [ 336.007670] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.007691] binder: 29880:29882 transaction failed 29189/-3, size 0-0 line 3133 [ 336.022907] binder: BINDER_SET_CONTEXT_MGR already set [ 336.022918] binder: 29872:29878 ioctl 40046207 0 returned -16 [ 336.022968] binder_alloc: binder_alloc_mmap_handler: 29872 2000c000-2000e000 already mapped failed -16 [ 336.024165] binder: 29872:29884 BC_FREE_BUFFER u0000000000000000 no match [ 336.061650] binder: BINDER_SET_CONTEXT_MGR already set [ 336.061658] binder: 29892:29897 ioctl 40046207 0 returned -16 [ 336.062024] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.062042] binder: 29892:29897 transaction failed 29189/-3, size 0-0 line 3133 [ 336.081870] binder: BINDER_SET_CONTEXT_MGR already set [ 336.081880] binder: 29893:29896 ioctl 40046207 0 returned -16 [ 336.088172] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.088191] binder: 29893:29896 transaction failed 29189/-3, size 0-0 line 3133 [ 336.092544] binder_alloc: binder_alloc_mmap_handler: 29892 2000c000-2000e000 already mapped failed -16 [ 336.092577] binder: BINDER_SET_CONTEXT_MGR already set [ 336.092583] binder: 29892:29897 ioctl 40046207 0 returned -16 [ 336.166414] binder: BINDER_SET_CONTEXT_MGR already set [ 336.166422] binder: 29913:29915 ioctl 40046207 0 returned -16 [ 336.166821] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.166839] binder: 29913:29915 transaction failed 29189/-3, size 0-0 line 3133 [ 336.167788] binder: BINDER_SET_CONTEXT_MGR already set [ 336.167794] binder: 29912:29917 ioctl 40046207 0 returned -16 2018/05/11 08:07:13 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d3406291") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:13 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:13 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:13 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000100)={0x4, 0x103a, 0x7}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f00000000c0)}) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000140)={'bond0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xe}}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000d40)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000e80)}) 2018/05/11 08:07:13 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:13 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = getpid() ioprio_get$pid(0x3, r1) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r2, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) sendto(r2, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r4}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r2, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x50, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x20, &(0x7f00000002c0)=[@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x5, 0x3, 0x2a}], &(0x7f0000000300)=[0x70, 0x28, 0x38, 0x30]}, 0x2}}, @exit_looper={0x630d}], 0x34, 0x0, &(0x7f00000003c0)="a884cf9a33c6e35de4b2a907b04e91b71b85e0069488fde951beda2e4cb3136db5b737a29ef6eaa1141cd4921a378aeea3762c81"}) 2018/05/11 08:07:13 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/206, 0xce}}], 0x1, 0x203f, 0x0) [ 336.168110] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.168174] binder: 29912:29917 transaction failed 29189/-3, size 0-0 line 3133 [ 336.175680] binder: BINDER_SET_CONTEXT_MGR already set [ 336.175690] binder: 29913:29915 ioctl 40046207 0 returned -16 [ 336.175754] binder_alloc: binder_alloc_mmap_handler: 29913 2000c000-2000e000 already mapped failed -16 [ 336.176974] binder: 29913:29920 BC_FREE_BUFFER uc5f2e560024aa0ce no match [ 336.218220] binder: BINDER_SET_CONTEXT_MGR already set [ 336.218235] binder: 29925:29926 ioctl 40046207 0 returned -16 2018/05/11 08:07:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0xffff, &(0x7f0000000280)="cf295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x1, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000100)="950396b29011739e9f6ab8ce8ed00354", 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000076521f310000000000000000000000000000000000007f00a350aa639c41798cc1b57cd794c2d48f7334658282d73044d2292b725591ebe8a0683bb39aba38616ca4bec1eb816ebd63a1d30b6f9080ba897494c78b8c08a1db38d51ef13c2174b54204f8e960147447f3b60dfd01478bec38a4bbf3dda18a1ac534d54404901d97ac75b99fd19c4e60520175ead41451acffe95bf741778d153f9872", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:14 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, 0xffffffffffffffff, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d3406291") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:14 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) [ 336.218662] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.218679] binder: 29925:29926 transaction failed 29189/-3, size 0-0 line 3133 2018/05/11 08:07:14 executing program 2: socket(0xa, 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 336.468949] binder: BINDER_SET_CONTEXT_MGR already set [ 336.468959] binder: 29941:29951 ioctl 40046207 0 returned -16 [ 336.469421] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.469442] binder: 29941:29951 transaction failed 29189/-3, size 0-0 line 3133 [ 336.472409] binder: BINDER_SET_CONTEXT_MGR already set [ 336.472417] binder: 29943:29949 ioctl 40046207 0 returned -16 [ 336.483115] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.483134] binder: 29943:29949 transaction failed 29189/-3, size 0-0 line 3133 [ 336.503311] binder: BINDER_SET_CONTEXT_MGR already set [ 336.503320] binder: 29943:29956 ioctl 40046207 0 returned -16 [ 336.505746] binder_alloc: binder_alloc_mmap_handler: 29943 2000c000-2000e000 already mapped failed -16 [ 336.505794] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.505813] binder: 29943:29956 transaction failed 29189/-3, size 0-0 line 3133 [ 336.521854] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.521872] binder: 29955:29957 transaction failed 29189/-3, size 0-0 line 3133 [ 336.549490] binder: BINDER_SET_CONTEXT_MGR already set [ 336.549498] binder: 29959:29963 ioctl 40046207 0 returned -16 [ 336.550374] binder_alloc: 29771: binder_alloc_buf, no vma 2018/05/11 08:07:14 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000d40)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000e80)}) r2 = dup3(r0, r1, 0x80000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000080)={{0x2, 0x7}, 0x0, 0x40, 0x8, {0xe6, 0x400}, 0x8000, 0xfffffffffffffff9}) 2018/05/11 08:07:14 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180), 0x0, 0x10000054) 2018/05/11 08:07:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x3ff0, 0x62e2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x30, 0xf8, 0xffffffff}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={r1, 0x31b4ad86, 0x1, 0xb5, 0x9, 0xa7, 0x0, 0x4, {r2, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1, 0x2, 0x4, 0xaf, 0x9}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x1ff, 0x4) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r3}, &(0x7f0000000300)=0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='reno\x00', 0x5) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:14 executing program 2: socket(0xa, 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:14 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x203f, 0x0) 2018/05/11 08:07:14 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:14 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = getpid() ioprio_get$pid(0x3, r1) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r2, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) ioctl$KDENABIO(r2, 0x4b36) sendto(r2, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r4}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r2, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) [ 336.550393] binder: 29959:29963 transaction failed 29189/-3, size 0-0 line 3133 [ 336.563113] binder: BINDER_SET_CONTEXT_MGR already set [ 336.563124] binder: 29959:29963 ioctl 40046207 0 returned -16 [ 336.563179] binder_alloc: binder_alloc_mmap_handler: 29959 2000c000-2000e000 already mapped failed -16 [ 336.564400] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.564418] binder: 29959:29970 transaction failed 29189/-3, size 0-0 line 3133 [ 336.583174] binder_alloc: 29771: binder_alloc_buf, no vma 2018/05/11 08:07:14 executing program 2: socket(0xa, 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:14 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:14 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x8, 0x4) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x4000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) fanotify_init(0x40, 0x8000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000d40)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000e80)}) 2018/05/11 08:07:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x7ffffffffffff) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 336.583201] binder: 29965:29971 transaction failed 29189/-3, size 0-0 line 3133 [ 336.600159] binder: BINDER_SET_CONTEXT_MGR already set [ 336.600169] binder: 29976:29978 ioctl 40046207 0 returned -16 [ 336.603978] binder_alloc: 29771: binder_alloc_buf, no vma 2018/05/11 08:07:14 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180), 0x0, 0x10000054) 2018/05/11 08:07:14 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x203f, 0x0) 2018/05/11 08:07:14 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:14 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:14 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x20, 0x26, "5866c8de2bfc16d3a90951b5e933823537050992424ecc08520d6e69addfbd490591237debb1"}}) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x4, 0x20, 0x200, 0x90b}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r2, 0x100000001}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000d40)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000e80)}) [ 336.603995] binder: 29980:29981 transaction failed 29189/-3, size 0-0 line 3133 [ 336.606754] binder_alloc: 29771: binder_alloc_buf, no vma 2018/05/11 08:07:14 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x6, 0x40, 0x7, 0x7, 0x3}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x15}}}, 0x1, 0x4, 0x6, 0x7, 0x10}, &(0x7f0000000180)=0x98) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) acct(&(0x7f00000001c0)='./file0\x00') setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4) 2018/05/11 08:07:14 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x203f, 0x0) 2018/05/11 08:07:14 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x202000, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0x7, 0xe01, 0x7, 0x9}) setsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000080)="64eebc684f85bfe6636125636bb418193e0d3359c59f89f1be55233301268689621bcaae6c597fd9c755a4cdfcea13948a720e6b6b2fdda017b986300d112a39857df38f768a49fc3d77ce12d9202656d36b5ab1f0511a22a1b7dbde20a9e34c94a7ef7074388741acf38d99e091263608c738d6b87192570e930b373bff4d5ac3d4eb44881431d721cf47d802a20defa040f12baa49ec7407f39e31098d0be3fa914ac10ec2d075e1f62f85e2b96e4719367ae6ecb93d0192", 0xb9) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840c27d8664f091c35c1c142b5165e254282f247c1221430896", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000011f9d)}) getsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f00000001c0)=""/97, &(0x7f0000000240)=0x61) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0363055fc4824eec9c39d5fe30bf407eda015c949117b7088a249a4d02d064a7b1afd09889dcb7cef92d7a94f728c98d851d3c65940dc3b01f42082ed6ff814051ade96d219d7e3b38ea03dde6504661b49efb3fbc1f723f94c5191d716b62c7ff57f345b0a3c5314ec1dd05a5243eccbc99ef746acffbcc10c8a7aa827a0cc361ddf77921fcf9b73ed61423e3c470b34e898addebfec2689b3ac4ea22a61dfa09f3917ead3833a3ea2107af127871a82808a7a407cb1bc19b00539192d58290e71faf1c9ce591484d94fc513621c82af29e389ced2a4a1e4d53d90e544d74df7f32f2313b7793abfc299533dc1c", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000e80)}) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x80000, 0x0) [ 336.606774] binder: 29976:29978 transaction failed 29189/-3, size 0-0 line 3133 2018/05/11 08:07:14 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180), 0x0, 0x10000054) [ 336.626631] binder: BINDER_SET_CONTEXT_MGR already set [ 336.626641] binder: 29976:29978 ioctl 40046207 0 returned -16 [ 336.627033] binder_alloc: binder_alloc_mmap_handler: 29976 2000c000-2000e000 already mapped failed -16 [ 336.666887] binder: BINDER_SET_CONTEXT_MGR already set [ 336.666895] binder: 29994:29996 ioctl 40046207 0 returned -16 [ 336.667235] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.667253] binder: 29994:29996 transaction failed 29189/-3, size 0-0 line 3133 [ 336.681325] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/11 08:07:14 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:14 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x0, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:14 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x0, 0x0) 2018/05/11 08:07:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:14 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = getpid() ioprio_get$pid(0x3, r1) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r2, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) ioctl$KDENABIO(r2, 0x4b36) sendto(r2, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r4}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r2, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:14 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x28000, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x420000, 0x0) fanotify_mark(r2, 0x4, 0x40000001, r3, &(0x7f0000000100)='./file0\x00') ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r2, 0x89e3, &(0x7f0000000140)=0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000d90167f4d438b04cc81edebcfb5d201c228bf46c362c274c18704a5f24fe06226066ec5f7d64853e1f3412da601a237ce70e058b4b367e3531658aae2dc1ae2a1d9b63fe115596d3f5ecb53c3cc9beb2e4d1b2279184c74bda917be799b91d9bb5a288362e012489d4d70c03242c9024f356eb1bea3f551d38", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000d40)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000e80)}) 2018/05/11 08:07:14 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x0) 2018/05/11 08:07:14 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x200}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x100}, &(0x7f00000000c0)=0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:14 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="036308d9fbbe465b8d3d47eaa3f6ad917a422c6fefe325cbc1b25e50eab0f39b241862c32d3de446be", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000e80)}) [ 336.681335] binder: 29994:29996 ioctl 40046207 0 returned -16 [ 336.681383] binder_alloc: binder_alloc_mmap_handler: 29994 2000c000-2000e000 already mapped failed -16 [ 336.682591] binder: 29994:29997 unknown command 1074291460 [ 336.682599] binder: 29994:29997 ioctl c0306201 20000f80 returned -22 2018/05/11 08:07:14 executing program 2: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x8, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000010000ac5113e077c9aaa40000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:14 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x0) [ 336.885757] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.885775] binder: 30019:30021 transaction failed 29189/-3, size 56-32 line 3133 2018/05/11 08:07:14 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(0xffffffffffffffff) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:14 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000d40)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000e80)}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x410100, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x80, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000140)={r3, 0x0, r4}) [ 336.898428] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/11 08:07:14 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x4}, @register_looper={0x630b}, @increfs={0x40046304, 0x1}], 0x7f, 0x0, &(0x7f0000000200)="d9d8c5260c8fe90ef1698e1e499be442ea9cfcbe405cff502018d733fbab5b6f36ae49abed4b9fc62eba031302c426e2409a483b61cdfcb7d9ab2a5153341bc911b248062b4647d2367cc941c0a7e899d6cf5e46e2bb925d5d980bd903b445018f35af4a546c10fb15b74ad7c3e49f8e9c67f6a57b2cc6d084314553cb492d"}) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000180)={0x91, &(0x7f00000000c0)=""/145}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) fallocate(r2, 0x0, 0x5, 0x8) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x9, {0x4, 0x5, 0x6, 0xffffffff, 0x7, 0x1000}, 0x1000, 0x5}, 0xe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840000000000600000000000077510000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) renameat(r1, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000380)='./file0\x00') [ 336.898438] binder: 30017:30023 ioctl 40046207 0 returned -16 [ 336.898888] binder: 30017:30023 ioctl 540c 0 returned -22 [ 336.899271] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.899289] binder: 30017:30023 transaction failed 29189/-3, size 0-0 line 3133 [ 336.918925] binder: BINDER_SET_CONTEXT_MGR already set [ 336.918937] binder: 30017:30023 ioctl 40046207 0 returned -16 [ 336.919748] binder_alloc: binder_alloc_mmap_handler: 30017 2000c000-2000e000 already mapped failed -16 [ 336.919990] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.920011] binder: 30026:30028 transaction failed 29189/-3, size 0-35747322042253312 line 3133 [ 336.920922] binder: 30017:30023 ioctl 540c 0 returned -22 [ 336.928770] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.928791] binder: 30017:30027 transaction failed 29189/-3, size 0-0 line 3133 [ 336.970845] binder: BINDER_SET_CONTEXT_MGR already set [ 336.970853] binder: 30037:30039 ioctl 40046207 0 returned -16 [ 336.971269] binder_alloc: 29771: binder_alloc_buf, no vma [ 336.971287] binder: 30037:30039 transaction failed 29189/-3, size 0-0 line 3133 [ 337.130117] binder: BINDER_SET_CONTEXT_MGR already set [ 337.130125] binder: 30051:30056 ioctl 40046207 0 returned -16 [ 337.131875] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.131892] binder: 30051:30056 transaction failed 29189/-3, size 0-0 line 3133 [ 337.136601] binder: BINDER_SET_CONTEXT_MGR already set [ 337.136609] binder: 30053:30061 ioctl 40046207 0 returned -16 [ 337.137147] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.137166] binder: 30053:30061 transaction failed 29189/-3, size 0-0 line 3133 [ 337.170998] binder: BINDER_SET_CONTEXT_MGR already set [ 337.171006] binder: 30065:30068 ioctl 40046207 0 returned -16 [ 337.176226] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.176244] binder: 30065:30068 transaction failed 29189/-3, size 0-0 line 3133 [ 337.204058] binder: BINDER_SET_CONTEXT_MGR already set [ 337.204065] binder: 30070:30072 ioctl 40046207 0 returned -16 [ 337.204514] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.204531] binder: 30070:30072 transaction failed 29189/-3, size 0-0 line 3133 [ 337.213369] binder: BINDER_SET_CONTEXT_MGR already set [ 337.213380] binder: 30070:30079 ioctl 40046207 0 returned -16 [ 337.214562] binder_alloc: binder_alloc_mmap_handler: 30070 2000c000-2000e000 already mapped failed -16 [ 337.214615] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.214633] binder: 30070:30079 transaction failed 29189/-3, size 0-0 line 3133 [ 337.232730] binder: BINDER_SET_CONTEXT_MGR already set [ 337.232740] binder: 30081:30085 ioctl 40046207 0 returned -16 [ 337.233668] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.233683] binder: 30081:30085 transaction failed 29189/-3, size 0-0 line 3133 [ 337.260354] binder: BINDER_SET_CONTEXT_MGR already set [ 337.260362] binder: 30087:30090 ioctl 40046207 0 returned -16 [ 337.260974] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.260991] binder: 30087:30090 transaction failed 29189/-3, size 0-0 line 3133 [ 337.267042] binder_alloc: binder_alloc_mmap_handler: 30087 2000c000-2000e000 already mapped failed -16 [ 337.267126] binder: BINDER_SET_CONTEXT_MGR already set [ 337.267132] binder: 30087:30090 ioctl 40046207 0 returned -16 [ 337.273645] binder: 30087:30095 BC_FREE_BUFFER u0000000000000000 no match [ 337.299588] binder: BINDER_SET_CONTEXT_MGR already set [ 337.299596] binder: 30093:30102 ioctl 40046207 0 returned -16 [ 337.300787] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.300806] binder: 30093:30102 transaction failed 29189/-3, size 0-0 line 3133 [ 337.314801] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.314819] binder: 30099:30106 transaction failed 29189/-3, size 0-0 line 3133 [ 337.329925] binder: BINDER_SET_CONTEXT_MGR already set [ 337.329934] binder: 30104:30107 ioctl 40046207 0 returned -16 [ 337.330860] binder: 30104:30107 got transaction to invalid handle [ 337.330869] binder: 30104:30107 transaction failed 29201/-22, size 0-0 line 3010 [ 337.353361] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.353382] binder: 30099:30108 transaction failed 29189/-3, size 0-0 line 3133 [ 337.353781] binder: BINDER_SET_CONTEXT_MGR already set [ 337.353790] binder: 30104:30113 ioctl 40046207 0 returned -16 [ 337.359592] binder: 30104:30113 got transaction to invalid handle [ 337.359602] binder: 30104:30113 transaction failed 29201/-22, size 0-0 line 3010 [ 337.418593] binder: BINDER_SET_CONTEXT_MGR already set [ 337.418602] binder: 30126:30129 ioctl 40046207 0 returned -16 [ 337.419032] binder: 30126:30129 unknown command 0 [ 337.419040] binder: 30126:30129 ioctl c0306201 20000040 returned -22 [ 337.425144] binder: BINDER_SET_CONTEXT_MGR already set [ 337.425152] binder: 30126:30132 ioctl 40046207 0 returned -16 [ 337.426376] binder_alloc: binder_alloc_mmap_handler: 30126 2000c000-2000e000 already mapped failed -16 [ 337.427632] binder: 30126:30129 unknown command 0 [ 337.427641] binder: 30126:30129 ioctl c0306201 20000040 returned -22 [ 337.448002] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.448020] binder: 30138:30139 transaction failed 29189/-3, size 0-0 line 3133 [ 337.449904] binder: BINDER_SET_CONTEXT_MGR already set [ 337.449912] binder: 30128:30135 ioctl 40046207 0 returned -16 [ 337.450752] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.450771] binder: 30128:30135 transaction failed 29189/-3, size 0-0 line 3133 [ 337.458058] binder: BINDER_SET_CONTEXT_MGR already set [ 337.458066] binder: 30140:30142 ioctl 40046207 0 returned -16 [ 337.458401] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.458417] binder: 30140:30142 transaction failed 29189/-3, size 0-0 line 3133 [ 337.459225] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.459241] binder: 30138:30141 transaction failed 29189/-3, size 0-0 line 3133 [ 337.469132] binder_alloc: binder_alloc_mmap_handler: 30140 2000c000-2000e000 already mapped failed -16 [ 337.469195] binder: BINDER_SET_CONTEXT_MGR already set [ 337.469203] binder: 30140:30142 ioctl 40046207 0 returned -16 [ 337.470321] binder: 30140:30145 unknown command -653761789 [ 337.470329] binder: 30140:30145 ioctl c0306201 20000f80 returned -22 [ 337.499602] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.499621] binder: 30149:30150 transaction failed 29189/-3, size 0-0 line 3133 [ 337.516978] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.516998] binder: 30149:30158 transaction failed 29189/-3, size 0-0 line 3133 [ 337.548739] binder: BINDER_SET_CONTEXT_MGR already set [ 337.548748] binder: 30165:30168 ioctl 40046207 0 returned -16 [ 337.549074] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.549093] binder: 30165:30168 transaction failed 29189/-3, size 0-0 line 3133 [ 337.557876] binder: BINDER_SET_CONTEXT_MGR already set [ 337.557884] binder: 30147:30161 ioctl 40046207 0 returned -16 [ 337.558543] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.558561] binder: 30147:30161 transaction failed 29189/-3, size 0-0 line 3133 [ 337.569385] binder: BINDER_SET_CONTEXT_MGR already set [ 337.569394] binder: 30165:30168 ioctl 40046207 0 returned -16 [ 337.569439] binder_alloc: binder_alloc_mmap_handler: 30165 2000c000-2000e000 already mapped failed -16 2018/05/11 08:07:15 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:15 executing program 2: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:15 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = getpid() ioprio_get$pid(0x3, r1) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r2, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) ioctl$KDENABIO(r2, 0x4b36) sendto(r2, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r4}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r2, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:15 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="0000000008000000803b5cbb2e66dbf31c00f38412a32510ab206d937fabddc3d5e61621af21a30ecfedbb15d124052655c7ad677228b284245ec5fbfa222e83c8474e0a115ba06cd166542fa209866e69390e4cdbf48f764c265d58837051e95bec125d209e04c816a62a8155edc2d28928e037a0266675b68b290c57311a13ec307e5a860fe78d6d1c6c78e815a27e2b31a8e649d71a4773841663390163b4252429a02a753bcb6e649c1134f2ea46afffe767c205efe2bf33848343c77f6013cf2d935364f04e92fafe272745310c8f9afae92ace2909424a47da550d8f72"], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000d40)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000e80)}) 2018/05/11 08:07:15 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x0) 2018/05/11 08:07:15 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:15 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x0, 0x0) 2018/05/11 08:07:15 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000340)=[@acquire={0x40046305, 0x1}], 0xd524, 0x0, &(0x7f00000003c0)}) [ 337.570642] binder: 30165:30171 BC_FREE_BUFFER u0000000000000000 no match [ 337.594123] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.594142] binder: 30169:30172 transaction failed 29189/-3, size 131072-0 line 3133 [ 337.600079] binder_alloc: 29771: binder_alloc_buf, no vma [ 337.600098] binder: 30169:30177 transaction failed 29189/-3, size 131072-0 line 3133 [ 338.278561] binder: BINDER_SET_CONTEXT_MGR already set [ 338.278571] binder: 30184:30194 ioctl 40046207 0 returned -16 [ 338.279366] binder_alloc: 29771: binder_alloc_buf, no vma [ 338.279391] binder: 30184:30194 transaction failed 29189/-3, size -4333118702037950293-1054723773792970453 line 3133 [ 338.281921] binder: BINDER_SET_CONTEXT_MGR already set [ 338.281929] binder: 30183:30187 ioctl 40046207 0 returned -16 [ 338.282367] binder_alloc: 29771: binder_alloc_buf, no vma [ 338.282385] binder: 30183:30187 transaction failed 29189/-3, size 0-0 line 3133 [ 338.293535] binder: 30189:30196 Acquire 1 refcount change on invalid ref 1 ret -22 [ 338.296293] binder: BINDER_SET_CONTEXT_MGR already set [ 338.296302] binder: 30184:30194 ioctl 40046207 0 returned -16 [ 338.296354] binder_alloc: binder_alloc_mmap_handler: 30184 2000c000-2000e000 already mapped failed -16 [ 338.305002] binder: 30184:30199 BC_FREE_BUFFER u0000000000000000 no match [ 338.305051] binder: 30189:30201 Acquire 1 refcount change on invalid ref 1 ret -22 [ 338.419470] binder: send failed reply for transaction 505, target dead [ 338.426517] binder: send failed reply for transaction 507, target dead [ 338.433213] binder: send failed reply for transaction 509, target dead [ 338.439990] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.445586] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.451080] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.456562] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.462158] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.467614] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.473116] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.478611] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.484112] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.489715] binder: undelivered TRANSACTION_ERROR: 29201 [ 338.495366] binder: undelivered TRANSACTION_ERROR: 29201 [ 338.500926] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.506378] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.511962] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.517497] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.522991] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.528573] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.534169] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.539649] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.545129] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.550657] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.556123] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.561697] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.567290] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.572875] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.578329] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.583996] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.589539] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.595181] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.600987] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.606423] binder: undelivered TRANSACTION_ERROR: 29189 [ 338.612074] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:16 executing program 2: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:16 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x0, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) recvfrom(r0, &(0x7f0000000640)=""/188, 0xbc, 0x60, &(0x7f0000000700)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x1, 0x1, 0x0, 0x1, {0xa, 0x4e20, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x677a}}}, 0x80) r2 = socket(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f00000000c0)={0x1, 0x80, 0x1, 0x100000001}, 0x10) ioctl(r2, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r3 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03630840214258baa111d965ddf334ee3364757c21f8c31e94d7af91bb0aea0b", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000e80)}) 2018/05/11 08:07:16 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000010000002eb74d60371221150000000000000e8a09ddb42dcce7f4a3", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:16 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:16 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid_for_children\x00') r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000300)={0x1, {{0xa, 0x100000000004, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, 0x40000000000000}}}, 0x108) ptrace$setopts(0x4200, r1, 0xd47, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000000), 0x0, 0x0) 2018/05/11 08:07:16 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x0, 0x0) 2018/05/11 08:07:16 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = getpid() ioprio_get$pid(0x3, r1) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r2, 0x4b36) sendto(r2, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r4}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r2, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:16 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) r2 = syz_open_dev$random(&(0x7f0000000080)='/dev/random\x00', 0x0, 0x600000) readv(r2, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/107, 0x6b}, {&(0x7f0000000140)=""/240, 0xf0}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f0000000480)=""/158, 0x9e}, {&(0x7f0000000540)=""/125, 0x7d}], 0x6) socket(0x10, 0x80800, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000d40)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000e80)}) fcntl$setsig(r2, 0xa, 0x21) 2018/05/11 08:07:16 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = getpid() ioprio_get$pid(0x3, r1) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r2, 0x4b36) sendto(r2, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r4}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r2, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:16 executing program 2: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:16 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 339.119365] binder: 30210:30211 BC_FREE_BUFFER u65d911a1ba584221 no match [ 339.137548] binder: 30212:30217 transaction failed 29201/-22, size -8498855446801547264--6632421487083725559 line 3133 2018/05/11 08:07:16 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) [ 339.146987] binder: BINDER_SET_CONTEXT_MGR already set [ 339.146995] binder: 30210:30211 ioctl 40046207 0 returned -16 [ 339.147085] binder_alloc: binder_alloc_mmap_handler: 30210 2000c000-2000e000 already mapped failed -16 [ 339.148359] binder: 30210:30211 got new transaction with bad transaction stack, transaction 570 has target 30210:0 [ 339.148371] binder: 30210:30211 transaction failed 29201/-71, size 0-0 line 3037 [ 339.150541] binder: 30210:30225 BC_FREE_BUFFER u65d911a1ba584221 no match [ 339.164222] binder: BINDER_SET_CONTEXT_MGR already set [ 339.164231] binder: 30209:30219 ioctl 40046207 0 returned -16 [ 339.164680] binder_alloc: 30210: binder_alloc_buf, no vma [ 339.164698] binder: 30209:30219 transaction failed 29189/-3, size 0-0 line 3133 [ 339.165154] binder: release 30210:30211 transaction 570 out, still active [ 339.165158] binder: undelivered TRANSACTION_COMPLETE [ 339.165164] binder: undelivered TRANSACTION_ERROR: 29201 [ 339.165185] binder: send failed reply for transaction 570, target dead [ 339.185399] binder: 30228:30230 BC_FREE_BUFFER u0000000000000000 no match [ 339.191347] binder: BINDER_SET_CONTEXT_MGR already set [ 339.191356] binder: 30228:30230 ioctl 40046207 0 returned -16 [ 339.193839] binder_alloc: binder_alloc_mmap_handler: 30228 2000c000-2000e000 already mapped failed -16 [ 339.195038] binder: 30228:30230 got new transaction with bad transaction stack, transaction 575 has target 30228:0 [ 339.195051] binder: 30228:30230 transaction failed 29201/-71, size 0-0 line 3037 [ 339.209699] binder: release 30228:30230 transaction 575 out, still active [ 339.209702] binder: undelivered TRANSACTION_COMPLETE [ 339.209709] binder: undelivered TRANSACTION_ERROR: 29201 [ 339.209725] binder: send failed reply for transaction 575, target dead [ 339.216629] binder: 30231:30235 got new transaction with bad transaction stack, transaction 578 has target 30231:0 [ 339.216639] binder: 30231:30235 transaction failed 29201/-71, size 24-16 line 3037 [ 339.224343] binder: release 30231:30235 transaction 578 out, still active [ 339.224361] binder: send failed reply for transaction 578, target dead [ 339.413213] binder: 30212:30247 transaction failed 29189/-22, size -8498855446801547264--6632421487083725559 line 3010 [ 339.427856] binder: undelivered TRANSACTION_ERROR: 29189 [ 339.433547] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/11 08:07:17 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="0059a1283c000000"], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000d40)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000e80)}) 2018/05/11 08:07:17 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001700)='/selinux/status\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) vmsplice(r0, &(0x7f0000001680)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000000)="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", 0xff}, {&(0x7f0000000140)="0545295b6516d0e951c70adf97f0c1d841b674f415738ea9ec8f477343c1e7bdbae226548eb7a3e019eb647e682265b2fb9f33c7a9c367f3", 0x38}, {&(0x7f0000000300)="d10cd3368f2123e1bea347c6241c0a654f778f958b544bd2ee3a5f4405c8b19e706a435a9e2ebfeb27eeacb35400f0a49226db67b851d42e6c9d94f325fc76e4e88488eff581dd13712f5b7d5265e8a95ba07149d1b71f0ecf2903f69af90b73ad7c4b88fdff4b6f3205f5414516bf71b30d9ece6d14dc741b359e46910b2fe670c203c5d8d9443cfb379937d1e7ebcb57", 0x91}, {&(0x7f0000001480)="a2cb7c5a43a94718723af5712da50711e350086ca606d279bc03737cb5f9a511c106f58a54c361aee636325be4c78f40bfa838a8c3a51aed530f76a8b8d93f386c82e1744e308c7018439ba07378f457d68d4b2643ba168ddec882cbe17eb63c006ac5f326a8963eeedcbedbaa6a5204623961908de6930802644cf89b47dac4ab14f09b21141522bb888a862dce382f8e70fd812719229078a401d3b11cbe57fa44020b9d17f7adbf86c80989513e7f8020", 0xb2}, {&(0x7f0000001540)="eea3570e748274e1400e9f317759d4d01112aadda9f281f419577e220d539f4c79e76f4a019f446ca4cbd8a7deb23708617a3c508a5811e03b7edbf412208c7f5700d230c39ea3178f1cf2d1e2f17e176af13923525e1638ca52443a4bed89c81fe238e4d9311f675ae31c0ff5eb4ba420b61ca9c7d166f98230952921398ec4c17d1323df4da0bfccb8e4d1a668fb35aac886d78e18bebda096931ad0f9ad70ba9817ef32bce7498055bf5817fa805353d76e4dedb896", 0xb7}, {&(0x7f00000003c0)="0314e80f34b18d52da1a83d2e2e933e51c059b7573fe0d24ac7d67d353b1a3f809482500e31935c57d7a2bf2a5d952900c6529f166b2b3f51c2f951e2190901a", 0x40}, {&(0x7f0000001600)="803eb7ffe431f2a5af51a0a0b36d08ba61e4331c86eab54d1a75687805b24de1d6c0997db58eb4597102c6fde74491e714ae619e713ab347b34fc950e2dd0e0f33450c7223304f27f0a58b48b572615943ad64f4bbecf594c556bf1587ff14a5", 0x60}], 0x8, 0x8) getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000001780)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000017c0)) gettid() fcntl$getownex(r1, 0x10, &(0x7f0000001800)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000440)='mountstats\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001740)) 2018/05/11 08:07:17 executing program 2: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:17 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:17 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x7d, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e24, 0x2da, @mcast1={0xff, 0x1, [], 0x1}, 0xffffffff}}, 0x8, 0xa6c, 0xe0f3, 0x80000000}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000500)={r2, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x80000001, 0x7ff}, &(0x7f0000000200)=0x2f2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r3, 0x3}, 0x8) 2018/05/11 08:07:17 executing program 3: r0 = socket(0x11, 0x1000000000000006, 0x2) ioctl(r0, 0x8912, &(0x7f00000001c0)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x4000, 0x0) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000000c0)="cf62d96418fde2f769855e287f7f6450cbecfaa5835dd0f89f96753d5086c239523e2a80c1b65ec11d368cf2b3ff063d4cf8257e141b40ac10145a305aed0d81047bf66aa64381eec4ed4a82efa31303cd7932d7a33e20bc05d889cc1603a23a00644ebe26ffc9d69aa45af84d89479529083d65d0dfb55409d6083c9af52cafa573baba70970680d49b") 2018/05/11 08:07:17 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = getpid() ioprio_get$pid(0x3, r1) r2 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r2, 0x4b36) sendto(r2, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r4}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r2, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r2, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:17 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 340.019934] binder: 30256:30258 BC_FREE_BUFFER u0000000000000000 no match [ 340.034269] binder: 30254:30263 got transaction with unaligned buffers size, 2 [ 340.034297] binder: 30254:30263 transaction failed 29201/-22, size 0-0 line 3178 2018/05/11 08:07:17 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400000, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000040)=0x1) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:17 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = getpid() ioprio_get$pid(0x3, r1) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendto(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:17 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) finit_module(r1, &(0x7f0000000080)='\x00', 0x3) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40000, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bcsf0\x00', 0x10) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000100)) 2018/05/11 08:07:17 executing program 2: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:17 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) [ 340.049012] binder: 30254:30270 got transaction with unaligned buffers size, 2 [ 340.049038] binder: 30254:30270 transaction failed 29201/-22, size 0-0 line 3178 [ 340.081649] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/11 08:07:17 executing program 6: r0 = socket(0x2000000011, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) [ 340.081784] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.101072] binder: BINDER_SET_CONTEXT_MGR already set [ 340.101080] binder: 30260:30266 ioctl 40046207 0 returned -16 [ 340.101569] binder: 30260:30266 got new transaction with bad transaction stack, transaction 585 has target 30256:0 [ 340.101577] binder: 30260:30266 transaction failed 29201/-71, size 24-16 line 3037 [ 340.106225] binder: release 30260:30266 transaction 585 out, still active [ 340.129428] binder: 30280:30284 got transaction with unaligned buffers size, 2 [ 340.129455] binder: 30280:30284 transaction failed 29201/-22, size 0-0 line 3178 [ 340.138014] binder: 30280:30292 got transaction with unaligned buffers size, 2 [ 340.138040] binder: 30280:30292 transaction failed 29201/-22, size 0-0 line 3178 [ 340.154372] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.154524] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.167219] binder: BINDER_SET_CONTEXT_MGR already set [ 340.167227] binder: 30282:30287 ioctl 40046207 0 returned -16 [ 340.168218] binder: 30282:30287 got new transaction with bad transaction stack, transaction 589 has target 30256:0 [ 340.168226] binder: 30282:30287 transaction failed 29201/-71, size 24-16 line 3037 [ 340.172985] binder: release 30282:30287 transaction 589 out, still active [ 340.295434] binder: BINDER_SET_CONTEXT_MGR already set [ 340.300859] binder_alloc: binder_alloc_mmap_handler: 30256 2000c000-2000e000 already mapped failed -16 [ 340.310719] binder: 30256:30258 ioctl 40046207 0 returned -16 [ 340.310807] binder_alloc: 30256: binder_alloc_buf, no vma [ 340.310827] binder: 30256:30307 transaction failed 29189/-3, size 0-0 line 3133 2018/05/11 08:07:17 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000d40)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000e80)}) 2018/05/11 08:07:17 executing program 1: r0 = socket(0x4, 0x1, 0xeffffffffffffffd) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x4000, 0x0) write$cgroup_pid(r2, &(0x7f0000000080)={[0x39, 0x39, 0x34, 0x31, 0x33]}, 0x5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:17 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:17 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:17 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x80, 0x44, 0x2}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2, 0x80000000}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', r3}) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140), 0x10) 2018/05/11 08:07:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:17 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") prctl$intptr(0x3e, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, 0x3}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:17 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 340.310900] binder: 30256:30308 BC_FREE_BUFFER u0000000000000000 no match [ 340.339720] binder: release 30256:30258 transaction 582 out, still active [ 340.347100] binder: undelivered TRANSACTION_COMPLETE 2018/05/11 08:07:17 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\f`\b@', @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000e80)}) 2018/05/11 08:07:17 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:17 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 340.360948] binder: 30311:30312 got new transaction with bad transaction stack, transaction 593 has target 30311:0 [ 340.360960] binder: 30311:30312 transaction failed 29201/-71, size 24-16 line 3037 [ 340.378608] binder: BINDER_SET_CONTEXT_MGR already set [ 340.378615] binder: 30317:30320 ioctl 40046207 0 returned -16 2018/05/11 08:07:17 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = getpid() ioprio_get$pid(0x3, r1) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendto(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:17 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:17 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080), 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:17 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000140)=0xffffffffffffff87) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)={'team0\x00', r2}) syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") 2018/05/11 08:07:17 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x2000000) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000003c0)={@mcast2, 0x0}, &(0x7f0000000840)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003380)={'lo\x00', 0x0}) sendmmsg(r0, &(0x7f0000006a40)=[{{&(0x7f0000000880)=@hci={0x1f, r3, 0x1}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000900)="8678c15a15dcff4dc34fa1d00cc6f4ae95d2b491f4d369b461ab63ea5e897f5797465ddee7c7add0902dd590b25e9070428395fe6e7ac895a64a285ce79ab2f3bce3c5a831da6e677c92ac5a942d9301fd1cc1ee89b574d45c62", 0x5a}, {&(0x7f0000000980)="13af7faf428c24cd74be6c1a8b400444372b7b3d8165779a4c785fb418", 0x1d}, {&(0x7f00000009c0)="5c2c94cd36dc2a5cc574ded3b87941862fbaef7b00181748f5b459c3b07b5caee163948e1a09c025937b45adfc4d9b75beed78b3dd7e1f0c25990f017e493df5280b5a8a124bf75b1fa69759d9030f9b9bdc06e379ad6dcec3f2be6e591477847ba355ab0716179c4743e66aced3127c4026d63b6df5d97616927f01dbcee1935ecb97d575c920ac7ad42a55bc691c9c7ed49499631c6bd253a38d39176dd7e1b15073443fa28191b1d02a7dfd20450a0314dadbe149241c5fec0ed8814636c6319cede11dea00340b64fb8d670591dd0f288210f0c36424dc77a79419d77d89289a9556ea434049626d", 0xea}], 0x3, &(0x7f0000000b00)=[{0xe0, 0x11e, 0xdd, "5139c5679298d8d05e1ce1d29d427606a1120067e9514bde7054e8a31bce4dd8b2d3c4c6e60beb5532199b210545dffef5187fff8be9c80da6eaf8fa235f392c4771c6e2492bbfba72a98cb53944959d5ffb1e2573c6bbbfa2efe6d80b6e3c97a2590d984da6a20e5798e1ef7be8b748d7c0af171d76bee853f14f09cd663a93ee515045ae5835f0c2b4daaff15135b5971a888e7281dc87fca1d561eb651916f3d0e182fcbf3a867d8d951d0840bd575e865f7519672b11ead69a0519f2a4de10c5b33fc8579cfd3827d1a1"}, {0x100, 0x117, 0x1, "79bd0c71b8bbfadf516486ff229b8cd6417bafc796dd976885bf39b876f45869794d95ef8e43ebbcf7d23e35d6b6a008ea75eff047ff117245147b93fe09569468288b2eee8c23563340e5816aa8a6b211ad33782347a487e0767fb3203a405993668083c61b983ec73368b369ecdb620c06dbbc269a3a86472dadeab38b51224e70f7e6ede60e1bb1dee216beb036d65e22e7547026c2036733b175751286d9d3d65cfed399f907c3de6ca29a702b74cc58227ce10b58caf2fab6d99b4e9de024172368759259cffd77cec49998d1cb68a9e7e187b420594785c0ae4da9e492985a178c6107438bd704b016ccdf74ec"}, {0xf8, 0x13b, 0x4, "c57a9387524597c2d37394c67a150536f291c593e784d888a3472d841a8bcb39b054df04a972bf4f4361f9f9023bd962c7f28d622f4b2b9d0834cde66c4ea8a369b2d3d7e612ee8ac9cb2849368ea4018a6c804f8c5b9ac479100c76238b3ea4e00ed1ad379020d5b689130b09acbded26483a12bee2bc0016d9b05ed88729a16af2c67366f273ce82365282701a147ee7b01b1ee9fa1fce14c7c0845092b880f516269988213c933c3c1441905040e6843a3bf991c528097599f59f3ee6c2d385219afb143cd9ff0d75db2eb8031f41279f7d98c9a0de8accf52bcc9d659bd6cae2bf0c9787284c"}], 0x2d8, 0x404c804}, 0x2}, {{&(0x7f0000000e00)=@rc={0x1f, {0xfffffffffffffff7, 0x0, 0x1, 0x0, 0x5d, 0x4}, 0x7fffffff}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000e80)="7a203814c30bd52978a919ea34a2bf0991d7dcc3e3f83dddd97f023ac09337e82767a7c95b5c1574a33ae7d9112cb9681cf29c2e820f26b19a6dc738da0134eb4e7170c94a670c7d340bebc888123dc77b", 0x51}, {&(0x7f0000000f00)="eeb33fe86c93207c91c9e676641aa0a48c0b77ac8f5ac46d56abc65f772192ce5edce163158248c4c78596a87df006b08712854ebda1ea16b7907739eb9dbcd8aa3655b4b684e19b2107d0f307bf7b948df746abcf91313367724f753c71fdfc081b179626a7af6276e6b10af5b3f1a0e63998c478b304467d7c47b1947a19956ab96f7cbcfd8b6326c247559c2b41bfca6190a585496758460aafc275e0f157c944cd0218cb0e", 0xa7}], 0x2, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x2358, 0x40000}, 0x6}, {{&(0x7f00000033c0)=@can={0x1d, r4}, 0x80, &(0x7f0000004980)=[{&(0x7f0000003440)="edf4d2656173ff3b9db92a0d31def339925f162cbea0f95a037dc04627180d49040d151db59369e3df3361dacf391a7ab01127cfc5903dafb43d2478ffd533", 0x3f}, {&(0x7f0000003480)="173106ab83ddabfc8bb5b4476e4f981f8ca1274613ecad27d8bd458c08619b16c4db633f51990806e04964f493577c5254f37161dbe418e2132b255cefb8d801eac64727e23765e5b962fb5bcadbbd5d147b2bb5b6cb34703559fa6addf389037dd6e88547b194850a971b489d22c29964a6dd76da6193de283ab416fa1a6333cb2ec4e7b02f7410", 0x88}, {&(0x7f0000003540)="0ff6fc668e7416d3e17bfc225fe29ae06ee74455542e208700b8a248f7758db2ecaafb31fbe9a9a9480422c05bdc83d53e12b0434c46eb3a3ee92bbd2ff5cf47e6fa5989e49964a25fcd04ae7e5ef138151b6bcff96bac5f8c92226eca9dc7b7dc56759c9d497be0e32c89c9556bb667e844326979bc80480ef86c75f10f883ad7e7ee927db897f30e", 0x89}, {&(0x7f0000003600)="52733cfbfd5ab12cdfbca5a031cc6db3c6f16d911ee951237b07c1d356109ba0433f81e004525ef6501c487ec005bc91094c067c56ebb510ab2f73", 0x3b}, {&(0x7f0000003640)="0d8e6fe3bb65125c107c4eff", 0xc}, {&(0x7f0000003680)="71b98a5343e20bb906d12930e931f865f42694949486353168c8d59f6e0d1f2022d1a51898be58f893dab22d3c4d71e6b44131a697c2f2f8e72395b96e04ef575831277f2834847585272dbd8e14e11396bd4c3c8af177467932bebfa7b18ae8d1b18224ffa9f662e6b9f15459ff6e4a", 0x70}, {&(0x7f0000003700)="59129b8ed7c536ec82d324b3cd73c53e1e18b346ef0bb022b8b40ca2f70e9be37159676b0fc34c22bfb60dbd6f671cfd220ea972394ccc7b270b236552a61aa87fd78c1eccaa69ee83c0a32e7f728bfc54811777ef2c67092e38a465721cbcccf06c660eca6e2ed846015f6d7f14d7f00ca405842373e3bad48b7871012e6f4d8595fa41bd892af456c0e8243446a533b7916c1bdf471bc6a37ecce71f7b1199ff9e3ff009e3774c5d32928447bd405766e52d9c8c157bccbc69f7ea607414933381fdb1a06c24b836a2e6154e5c", 0xce}, {&(0x7f0000003800)="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", 0x1000}, {&(0x7f0000004800)="1dfc02393733ea17d45bb714160e3d8a8cbe35a1329d15931b78ccbe3eb19fb68dc150b47ab75c0cc82bf12b0071cc14ffd9fa67bbcee0eb40072bc5ef0b9232060accdeb9293779c805414e984760c1976866d7d01b56d78dbd9c9d0e600d4f86d561afbdad0b354867644305d3a8c5a85d5a79686493ada0c9638c365dbdea71a2ffbe9c7d38d782428491a0632526eb559c299ee6b8", 0x97}, {&(0x7f00000048c0)="6c08ef635caf3585e943b25143bd947b068f3d08a907f03bb6ad54b8e1d7e7e768cd6f75b8d8ff85f1d27a9eb94e795870acf5578b86fbd9ee910381ebb80ca14a4394a3b5ba2011366cb75b590d1d2c585b3d1d0fa7aa5f571f6db669c6e8e5dfc499828b06f9df9171fae5fad6868886ceb41d7fff82cf5678f00e0330189becf24638821032e65c7e5de15cce9982fe6a606d2d657c9bb2175b7ef88e6372c15212174bee58712ac39753ca8f0868e7a7", 0xb2}], 0xa, &(0x7f0000004a40)=[{0x98, 0x111, 0xff, "b00635cfc5f3c2c46c5f3d4c252b6f93ea91e9980b70661de304bcbb8414ffa015c041c462978fc7905084ef5e428ebefa8b9de6d48df55344e538308d394be697e554cfe84f764a3fccf7e845e58f05fcce0a86422167eada8e80487c28df9590261ca952f3b94c997a915c21d91c482a91b6f1cc82ddcaea105fcd0dd34116df96824defc5248b"}, {0xa8, 0x3b, 0x561, "bb6297d67e04488a34855cd9233f5afc1bdb1358f6ff4e6cd3e082409debc7c75b38760fde008c5371e1f6579954a3d662184dab7a9115d87b1f32fcf0bfcc1427311a583c410534671eaf5028d71420e22eaf64e11ef8500a2152da2269b0c7357e5bf7bb19fac2ef8d070df6dcc55d0d9ddb68ef7b29dc43f5e3681b4cdd037e4e82a2006fe93bbe8b0cb7502849aa27f4df33b837"}, {0x1010, 0x119, 0x10001, "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"}], 0x1150, 0x44}, 0x9}, {{&(0x7f0000005bc0)=@l2={0x1f, 0x7, {0xce5, 0x8, 0x8, 0x35, 0x9, 0x80}, 0x200, 0x4}, 0x80, &(0x7f0000005ec0)=[{&(0x7f0000005c40)="d19742b6b503ed4dfe4e5c84103b3f7b44a1bd9af245b1e6942b663475a64b042b46c106a23318893f64870511bab15c2c6f0a854156362d98cdcc6870dc990d99f2ca30751e94c8b1374bf1f631b4af0d687fa4fa5a68225e3efa6db4780933b36085a6cddf84175cc467a27b45a2d07205eaef44e04db79eb4dd21f1ffad5d2253ff242ec1692fc0ed5c7306c4b740463ae35846a5e3e4adf788021b2a670ccd9f2937573b37fb5aa35700349b02fa7a6a9bc3ad690377e56aaf60d76273dc2c781592620eb6dae690013c4dbdd09fe46761483bf1ea412f1dacb94e094c1cf786cb62f5", 0xe5}, {&(0x7f0000005d40)="7bdb57860bdad2d71b1f57965b66084f9ea890bf34174c421a9db487d354e7a6eb502b601a1f995c32fe89120f1d27918ffb8187028dd4e262fcca91dc0fc68371694213eb385a57560e1a1854cb53d4d064553e6f6326e70961eb433248f9e1e543fd0bf1163bf1b4fbd77c79d87124", 0x70}, {&(0x7f0000005dc0)="f72880aae61082830d4dd3f56890851e67993864cf3d8475ee0ae2458724fe647ce9a06dac87778126d21720342da16ca96965794557c2d6c314ee3a06214015b8678f31e35bdaa864243cdafc193f02da63d2b723e05ce0ddb35bec1d354f2f3bcdbf14967e1997c642af28b1fd2a6a73f13bfdc1d28e3d4cab8f52cd2655a396b82fcb0d76a046a68f658bca809be362fe3ee587e89bb88d959babc92edeef0e7cc032fd4e8d4f48f4d32ef532671c4061d36eea31d746ed6cbaeb3b0fae1b36ce70d4a25d36ebe12f5d4868199bf76ea191cca22b9459e555b9d49a9f1b37f3ae2b2a92ab1fbffeecbd3ae5bc9a21dd1203860b09c83bbb56fa327062f2", 0xff}], 0x3, &(0x7f0000005f00)=[{0xa0, 0x108, 0x5, "317dc5be23965b7c38bcea62542440a83f18a74e25b0849c0edeb0d469ca36f4ac155d116362ec81fa5b1e08b4e68bab146e5762c56f3812da421353f1b4a1f48a0ccecfd27861aa5ec1e693694327081e97421f787dfc48174ac15794bd6683803b7135911397dd4904b667f01e81b5868f76699bdf4794e23baa1ef4e13c71d950bbfce742ff09bff4824dbc"}, {0x78, 0x0, 0xffff, "1a684d94b53be1c5edd6e2c48881470eb15b35f7c8f8eb0ca23c326c18d2cca13836e1c75e4f5c7fcec9a216f53f1d721b2ea442419d4d2a6a4f33aa48b8a428ef9b18bf231a25484b2844167a73bdff88fe01adca77565953c68984652be012294fc825a7"}, {0x100, 0x10f, 0xffffffffffffff7f, "c31e4d5e4daa580e55baa41d5d090d9e4c5e1eb61db7059c18b867c470d5683606e284e38bc000ea2d75b9a15be421422869a029bef40e4f3ca6c37a2a281533c74ec8301bccfb3116cecaa0e25545d169167790fbfe8728c83de01635ade68846cc83c748c808606f9a0efd374bf58c2ee817f199d6bbbd17d54549ad0e28926df5b8f62aabe071fc129faa8f3ba2505df620fe67d9d225aeb008f53e1d3e49a97492ef3db10b0b31f4c34f072247d94e8f8f3a9a3454395dd78bc4079efa087004abfaebd29beff7b98cf74c3e29a44589e82cb3b534cfce8dabb7e20d7683b477b0b0c0f41456220589"}, {0x58, 0x1, 0x2ab, "f9f1a1a58cb4801480a06c94e97d7be6f18777e9ec785ef1c621af007cbc951371aa4d2946af29ab3832a644746ff152a5b74fab15ef9b671456c5e070a1c5a6bc844e53cba4e2f0"}, {0xf8, 0x10e, 0x9, "16f249b9b836f7138c56629992ba54ac2947d99e3fa7268d571fcf14a5d54d79c27c25145dbbf1110377745d2619c3d1878ff8926afe401474c205072e1d83860d5723ef217c832197ad81377aaf4474744a08502136b9a01e291dff1cf19e2cad510d89de95de67da15707923419d458ba1980bd9aeca6d1145c12aabbdd53c1e20a7424919fd52401cd43b8e98d73ab995b741c177611fb3e702be25e3fd60f910d24b5b0b38f058759e96d7d9dfa34d97a1d9677d1587e81f0d65bab511c46d46c5ea62dbdff0c813b7461efce7c6945b08a6033308bffc2ae60bc9beba63f151354a"}, {0xe0, 0x11f, 0x53a, "1b39c3674f2a21af2f65f5f4ab16d18826b4a106c8c1235feca041b2a57c554572da01baa8e774f9ca8750e73c8c06454375d7d5b0bd8eb43d32518e4a649d76f48f377447538f7c72e37419d49267e13e32b613576ac3460038803823e9ca4c52b3797c69907e0e15569f4d218a4d30301a28a427e42e7e43e3fef4112461612f22de78d992dbab42c3ed8e980797e15eab1b7de7c2921b85cb2ed0d5b60fb6486bc7b5ad8aab77e549d15a911e6e821e1bc1d4e4d4940556372e1094057fcadf9627a9a209cda3f354bae8b3"}], 0x448, 0x20000000}}, {{&(0x7f0000006380)=@generic={0xd, "e5533616b673bee19a314b48bcf1ebafe01bda974c651ad45faccdf7e20cfd8b82d4ef586ea91b8cdd24392c12f13944c10c6141cbc73ce3e60a754b826571a42f88f750390d4b64fe3279c62b55c12e70142c52349d3f79b0fc206e324bb9b366297b680d39ca2cceb9a2a1297ee69554dd31cca2e24817c56544e0f68d"}, 0x80, &(0x7f0000006840)=[{&(0x7f0000006400)="1b84994fd9384af1396e1bfd57a2b44c0c37bd3da755eff4dff44718a44f002fcd7a", 0x22}, {&(0x7f0000006440)="f0fb68f75baf033565d8a38004929d64623b3b55578cd91b0ba464b3499a6a49a073a8bb504c59d8a663c9a34165f1fe1fc1ed99f2904abf8cac3c1addc68200415663c10da5726c5ae04f0f4aea404e59458c6093977e231ee983aeff1f", 0x5e}, {&(0x7f00000064c0)="abbd30b82ed9f02421a6bff073ec0d50700875225ba8ad6870d8ee6e06fed7f84576ed1fbab705e73b829b2259adcefcbb40bc6545a14eb3fb1047aa7cc27305380e01ce48e6543b4b7929ea4d85de16ce69530b", 0x54}, {&(0x7f0000006540)="81852780a83a39d3e6b626ef75c4f3677cbbfed9794b9c919b931be5681a6bce816f45b7aafda408527cd2483e0b707b15681c417969ebdda8f83b7979fd96b5c4606f31a36ff4f3abb7072ea6d7306bfb8c5b1927d6df8b08299b234cf742bf4c792af41018", 0x66}, {&(0x7f00000065c0)="2119d746b0542aeaf4ba5a3d5a780ab45eb14ad9f3e1de3917a62a5add460cd1e3001375603bba7ddd7bf0a7d4e141c2f50043245557d23206d49b7dbfc7e9ddc6eb911d321af89a2e5f82ca050096c1b28fda77ec008de5", 0x58}, {&(0x7f0000006640)="6d8c6d759dfe978436b9d9cfb47a162f878b99c352da93dd4e7da4fdb4bf37d0c6d1a945c5627b72ef10fba419fcaff3757e64a949944e108eadf3c1c11ac6de26ff5f7d20643c51d5b00384564a227271d661c314d01f4cd1fa4e2291ea4989b98a5b4d3af40045aea7c38c5497e072a88a79b65ee5d31ab8b62f4880bcfe7bdac07101603b17b5449f78ac765de019219ea1b89b472849f681dfa2f79f9e46460f80505148", 0xa6}, {&(0x7f0000006700)="f3c8f1059ae3e9ca60bf48ee4994fa0462ef0b15980ae08191bd6076fca30338e994ca2c50f9376e48dfa6e97dca0f8b5603693f30029582cbf1d6a15cb620e5fbac", 0x42}, {&(0x7f0000006780)="06d6686cad3ffdc35a86412926cc728aa7d1b63a04e77d4f9b010b530283323d4ce7bd8f0a3630afda8ffcb7452352cc60fe3aa3dcc3a57789d4dad534b13eb1a2262c92b115e1f43005b1d5b87b718e3c971fceddf92c63c9bee9facebf66229ab23fe785e6f0d3692db4ac5a4ad35f2d04b2934b5f4567c2ecc864c2be1908da97d1840b54acb4fb09f0bc866b0d082ea24bdb83f034f579d1eb0c28b984772ed5f84af503abbf873f52e51e97ab79", 0xb0}], 0x8, &(0x7f00000068c0)=[{0x48, 0x0, 0x7ff, "6c45d20a745b9c1fbf5b1ce2eddcb4285ce25cd41b532f820abdedf69c10cc4da0fa7c91ae73fdc30b264b54a59c3eb2639261e2145aa6a0"}, {0x40, 0x10f, 0x0, "8ff19cf2c7b62d65e0bc0948a45e7053509260bd57c51b7ca0196fd6219d749c8c10775f5f8803f9b2552c"}, {0x60, 0x11f, 0x31e, "3d7a2a4ab0a5e7397ed51ef9890911e3a9fbc80f70ddcad1f6f142f2eb9669296bf7a298e2f9c2257b4dc371bbbff4078259ac74f25c8dd101b2eb66341a87da43343a1fe423974155"}, {0x68, 0x0, 0x3ff, "b4997217767ce0cc81102604dd96c159e89a7d8ac8e279ba1b7a4692f5b41f4a5480cc23c3912795221c02c4356a54dffc8dedabaacece48878fd7bc53fe14267b0d9611e2328b5cebe936f4b48efcb9fbc11bd2ca"}], 0x150, 0x20000000}, 0x5}], 0x5, 0x40) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000800)={r2, 0x34e}, 0x8) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000680)={0x7, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}]}) r6 = gettid() fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x2, r6}) ioctl$EVIOCGPROP(r5, 0x80404509, &(0x7f0000000540)=""/252) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000006c0)='tls\x00', 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000700)={r2}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x7fffffff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000100)={r7, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x84) ioctl$SG_GET_COMMAND_Q(r5, 0x2270, &(0x7f00000002c0)) setsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000780)="6b5ec586636b09567807b3f680344cde2444b3bc14025cc5769139620e24f57d7dc97ae48c4df822453c82b3753e73a39273bcbcda0c013b4a7a13cdf1a9c3614663d84df95dc54f23f7a60e69dbe0852373818e0374835c5c3f8188088c97b2fbf49ed53d8c769cf96a79fbb6", 0x6d) r8 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x38, 0x0, &(0x7f0000006b80)=ANY=[@ANYBLOB="056304400300000008631040", @ANYRES64=r8, @ANYBLOB="010000000000000005630440040000000e630c400400000004000000000000000c630000de2a0f08bfc32e7b4542a4eae30573789899a0d2394972d5011c4319ffc6a7d484fa4e3e42591db052a9aca15a168002087becbaa8551e1dced7d55c2c07329be9f723b40badd2d6c78fd0fb079048e61396e58f10dfc0451c205201"], 0xf1, 0x0, &(0x7f0000000440)="b2d3c430d709a431cf154bb5ad6c7b724dc732ea3bd8c2b1bb2fa3d5c3cd9a25eadf1f2a0b88315d821a91778b8c2c343d5debc0cf1e42f3234ca69dcc690de1b60f5d8009959e7ec8ea5f90a25176bcc2c1fe74703625a5b0a850ba28de201b77fcb6b9230a0bb76613e7c7806d631bd5d5e625520a8bf4dfafcb535250dd64a22fa250050302128b277cbf443e0b46ba6adfafe28ab3eb7f1d30b5cc0f626044574e07eee3bf9439c904314f7aaa88c83cd080f540b05e760f66ec3d0e6ae582ad2de0de4ce15b45be1de4c0acea29a09f386377423b828250257381ef56c1f720990bd94b50b109cfe4065afe12b871"}) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r2, &(0x7f0000006c40)=0x4) 2018/05/11 08:07:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:17 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x802, 0x5) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:17 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x4) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000d40)=[@free_buffer={0x40086303}], 0x0, 0x0, &(0x7f0000000e80)}) [ 340.379001] binder_alloc: 30311: binder_alloc_buf, no vma [ 340.379018] binder: 30317:30320 transaction failed 29189/-3, size 0-0 line 3133 [ 340.382435] binder: BINDER_SET_CONTEXT_MGR already set [ 340.382443] binder: 30317:30320 ioctl 40046207 0 returned -16 [ 340.382530] binder_alloc: binder_alloc_mmap_handler: 30317 2000c000-2000e000 already mapped failed -16 2018/05/11 08:07:17 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:17 executing program 1: r0 = socket(0xa, 0x1000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11633f40000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:17 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080), 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:17 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00000000c0)={0x3, 0x8001, 0xfff, 0x9, 0x77a0d4cd, 0x3ff, 0xc0000000, 0x8, 0x0, 0x9, 0x5, 0x9}) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = socket(0xa, 0x2, 0x9) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0363084004cac9abc3024a8cfd11bedd96000400006ac2676c85c678f123bc6ffa04e1bc4b94dbc26db1658b445e01786104fd4b3b7d9888c6f4590400d8c1b44aa13531ca3902b9716b5caa7e524a7df786d1319fce10", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000e80)}) 2018/05/11 08:07:17 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 340.383764] binder_alloc: 30311: binder_alloc_buf, no vma [ 340.383780] binder: 30317:30326 transaction failed 29189/-3, size 0-0 line 3133 2018/05/11 08:07:17 executing program 1: r0 = socket(0x0, 0x1, 0x6) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100007d270100000000000000000000000000000000000000000000eef13aedbdd6df8306f4175131da1f5169f393c6d951797889a42200a2cbc8451d1d306ce153ac", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) fadvise64(r1, 0x0, 0x80000001, 0x2) 2018/05/11 08:07:17 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r4, &(0x7f0000000080)=""/98, 0x62, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) getitimer(0x1, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:17 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 340.396519] binder: BINDER_SET_CONTEXT_MGR already set [ 340.396529] binder: 30321:30324 ioctl 40046207 0 returned -16 [ 340.396992] binder_alloc: 30311: binder_alloc_buf, no vma [ 340.397012] binder: 30321:30324 transaction failed 29189/-3, size 0-0 line 3133 [ 340.439825] binder: BINDER_SET_CONTEXT_MGR already set [ 340.439834] binder: 30335:30340 ioctl 40046207 0 returned -16 [ 340.442335] binder_alloc: 30311: binder_alloc_buf, no vma [ 340.442354] binder: 30309:30325 transaction failed 29189/-3, size 0-0 line 3133 [ 340.444207] binder_alloc: 30311: binder_alloc_buf, no vma [ 340.444224] binder: 30335:30340 transaction failed 29189/-3, size 0-0 line 3133 [ 340.452132] binder: BINDER_SET_CONTEXT_MGR already set [ 340.452142] binder: 30343:30346 ioctl 40046207 0 returned -16 [ 340.452723] binder_alloc: 30311: binder_alloc_buf, no vma [ 340.452742] binder: 30343:30346 transaction failed 29189/-3, size 0-0 line 3133 [ 340.463804] binder: BINDER_SET_CONTEXT_MGR already set [ 340.463814] binder: 30335:30340 ioctl 40046207 0 returned -16 [ 340.467006] binder_alloc: binder_alloc_mmap_handler: 30335 2000c000-2000e000 already mapped failed -16 [ 340.469859] binder: 30335:30345 unknown command 1074290700 [ 340.469867] binder: 30335:30345 ioctl c0306201 20000100 returned -22 [ 340.555351] binder: BINDER_SET_CONTEXT_MGR already set [ 340.555360] binder: 30354:30359 ioctl 40046207 0 returned -16 [ 340.556170] binder_alloc: 30311: binder_alloc_buf, no vma [ 340.556188] binder: 30354:30359 transaction failed 29189/-3, size 0-0 line 3133 [ 340.578233] binder: BINDER_SET_CONTEXT_MGR already set [ 340.578240] binder: 30361:30364 ioctl 40046207 0 returned -16 [ 340.578615] binder_alloc: 30311: binder_alloc_buf, no vma [ 340.578632] binder: 30361:30364 transaction failed 29189/-3, size 0-0 line 3133 [ 340.595188] binder: BINDER_SET_CONTEXT_MGR already set [ 340.595198] binder: 30361:30373 ioctl 40046207 0 returned -16 [ 340.596862] binder_alloc: 30311: binder_alloc_buf, no vma [ 340.596888] binder: 30361:30373 transaction failed 29189/-3, size 0-0 line 3133 [ 340.598256] binder: 30370:30377 unknown command 1077895953 [ 340.598264] binder: 30370:30377 ioctl c0306201 20000400 returned -22 [ 340.601765] binder: BINDER_SET_CONTEXT_MGR already set [ 340.601774] binder: 30369:30376 ioctl 40046207 0 returned -16 [ 340.602325] binder_alloc: 30311: binder_alloc_buf, no vma [ 340.602342] binder: 30369:30376 transaction failed 29189/-3, size 0-0 line 3133 [ 340.610862] binder: 30370:30381 unknown command 1077895953 [ 340.610872] binder: 30370:30381 ioctl c0306201 20000400 returned -22 [ 340.644449] binder: BINDER_SET_CONTEXT_MGR already set [ 340.644459] binder: 30388:30390 ioctl 40046207 0 returned -16 [ 340.644944] binder_alloc: 30311: binder_alloc_buf, no vma [ 340.644963] binder: 30388:30390 transaction failed 29189/-3, size 0-0 line 3133 [ 340.676917] binder: BINDER_SET_CONTEXT_MGR already set [ 340.676925] binder: 30385:30389 ioctl 40046207 0 returned -16 [ 340.677287] binder: 30385:30389 BC_FREE_BUFFER u8c4a02c3abc9ca04 no match [ 340.697725] binder: BINDER_SET_CONTEXT_MGR already set [ 340.697735] binder: 30385:30402 ioctl 40046207 0 returned -16 [ 340.697778] binder_alloc: binder_alloc_mmap_handler: 30385 2000c000-2000e000 already mapped failed -16 [ 340.701166] binder: 30385:30405 BC_FREE_BUFFER u8c4a02c3abc9ca04 no match [ 341.000412] binder: undelivered TRANSACTION_ERROR: 29189 [ 341.005873] binder: send failed reply for transaction 582, target dead [ 341.012540] binder: send failed reply for transaction 585, target dead [ 341.019192] binder: send failed reply for transaction 589, target dead [ 341.026232] binder: undelivered TRANSACTION_ERROR: 29189 [ 341.031814] binder: undelivered TRANSACTION_ERROR: 29189 [ 341.037372] binder: undelivered TRANSACTION_ERROR: 29189 [ 341.042864] binder: undelivered TRANSACTION_ERROR: 29189 [ 341.048426] binder: undelivered TRANSACTION_ERROR: 29189 [ 341.053894] binder: undelivered TRANSACTION_ERROR: 29189 [ 341.059476] binder: release 30311:30312 transaction 593 out, still active [ 341.066436] binder: send failed reply for transaction 593, target dead 2018/05/11 08:07:18 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = getpid() ioprio_get$pid(0x3, r1) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendto(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(0xffffffffffffffff, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:18 executing program 3: r0 = socket(0x11, 0x3, 0x0) getrlimit(0x9, &(0x7f0000000080)) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x177, 0x4) sendto$inet6(r1, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:18 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000480)=""/136) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) getpid() getpgrp(0xffffffffffffffff) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000140)) fcntl$getownex(r1, 0x10, &(0x7f0000000300)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f00000000c0)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:18 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080), 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:18 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:18 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/anycast6\x00') syz_open_pts(r2, 0x2000) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000f80)={0xc, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="03630840567696343d11492c26db1f4926cf838cece4c4ae3610b1607bcf4204005facd9df96f66ce82eea082eebdc8659cdf87d4a2cf1a01c560034eaf4ccdc36cabceefbefbb9d30d0a89fccd120f8149528a7632a6def8bc877c302a8ed2f717befc674773ed140d40030852259f521bc86f1d70132e313ae3a3652eeaee6dbd5b944c581e13734d33eb4153767658c774709a206bc57b827712c74817696596ef6fcda054070e2851f99b4fa42fbce99152870145bc63ea8206f65d74125", @ANYRES64=0x0], 0x0, 0x0, &(0x7f0000000e80)}) 2018/05/11 08:07:18 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 341.698169] binder: 30426:30429 BC_FREE_BUFFER u2c49113d34967656 no match [ 341.702290] binder: BINDER_SET_CONTEXT_MGR already set [ 341.702299] binder: 30424:30431 ioctl 40046207 0 returned -16 [ 341.703869] binder: 30424:30431 got new transaction with bad transaction stack, transaction 608 has target 30426:0 [ 341.703880] binder: 30424:30431 transaction failed 29201/-71, size 24-16 line 3037 [ 341.719108] binder: release 30424:30431 transaction 608 out, still active [ 341.727200] binder: 30427:30433 got transaction with unaligned buffers size, 2 [ 341.727225] binder: 30427:30433 transaction failed 29201/-22, size 0-0 line 3178 [ 341.738109] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.800271] binder: BINDER_SET_CONTEXT_MGR already set [ 341.806580] binder: 30426:30429 ioctl 40046207 0 returned -16 [ 341.812609] binder_alloc: binder_alloc_mmap_handler: 30426 2000c000-2000e000 already mapped failed -16 [ 341.812819] binder_alloc: 30426: binder_alloc_buf, no vma [ 341.812837] binder: 30426:30447 transaction failed 29189/-3, size 0-0 line 3133 2018/05/11 08:07:18 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:18 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:18 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:18 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:18 executing program 3: r0 = socket(0x100000000000011, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x400, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) pkey_alloc(0x0, 0x2) 2018/05/11 08:07:18 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8915, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:18 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:18 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) rt_sigaction(0x1c, &(0x7f0000000000)={0x9, {0xffff}, 0x80000000, 0x8}, &(0x7f0000000040), 0x8, &(0x7f0000000080)) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getpeername$packet(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x14) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000800)={@empty, @broadcast, 0x0}, &(0x7f0000000840)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000880)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000980)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@ipv4, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000c00)=0xe8) accept4$packet(r2, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000c80)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000d80)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@broadcast}}, &(0x7f0000000e80)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000005040)={{{@in6=@mcast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000005140)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000005240)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005280)={'veth0\x00', 0x0}) getpeername$packet(r2, &(0x7f00000052c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000005300)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005340)={'team0\x00', 0x0}) recvmmsg(r0, &(0x7f0000005fc0)=[{{0x0, 0x0, &(0x7f0000005700)=[{&(0x7f0000005380)=""/165, 0xa5}, {&(0x7f0000005440)=""/115, 0x73}, {&(0x7f00000054c0)=""/11, 0xb}, {&(0x7f0000005500)=""/150, 0x96}, {&(0x7f00000055c0)=""/3, 0x3}, {&(0x7f0000005600)=""/75, 0x4b}, {&(0x7f0000005680)=""/112, 0x70}], 0x7, &(0x7f0000005780)=""/112, 0x70, 0x100000001}, 0x3ff}, {{&(0x7f0000005800)=@can={0x0, 0x0}, 0x80, &(0x7f0000005980)=[{&(0x7f0000005880)=""/64, 0x40}, {&(0x7f00000058c0)=""/138, 0x8a}], 0x2, &(0x7f00000059c0)=""/137, 0x89, 0x4}, 0x200}, {{&(0x7f0000005a80)=@nl=@unspec, 0x80, &(0x7f0000005f00)=[{&(0x7f0000005b00)=""/248, 0xf8}, {&(0x7f0000005c00)=""/29, 0x1d}, {&(0x7f0000005c40)=""/226, 0xe2}, {&(0x7f0000005d40)=""/210, 0xd2}, {&(0x7f0000005e40)=""/165, 0xa5}], 0x5, &(0x7f0000005f80)=""/42, 0x2a, 0x4}, 0x1a0a2ec3}], 0x3, 0x12000, &(0x7f0000006080)={0x0, 0x989680}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000060c0)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f00000061c0)=0xe8) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000006200)={0x0, @broadcast, @loopback}, &(0x7f0000006240)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000006740)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000006700)={&(0x7f0000006280)={0x450, r3, 0x10d, 0x70bd25, 0x25dfdbfe, {0x2}, [{{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8f}}}]}}, {{0x8, 0x1, r5}, {0x1e4, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x3a}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xffffffffffffffbe}}, {0x8, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x3c, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r12}, {0x1c0, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r15}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r17}}, {0x8, 0x7}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}]}}]}, 0x450}, 0x1}, 0x20004000) 2018/05/11 08:07:19 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:19 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x19, 0x0, &(0x7f0000000040)="addee59d3a2488d131fc07f0bcb38a8b6dc74ab8003f31c1a3"}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x16, @empty, 0x4e20, 0x3, 'sh\x00', 0x0, 0x40000000000, 0x5a}, 0x2c) [ 341.845726] binder: release 30426:30429 transaction 607 out, still active [ 341.852954] binder: undelivered TRANSACTION_COMPLETE [ 341.858190] binder: undelivered TRANSACTION_ERROR: 29189 [ 341.870622] binder: send failed reply for transaction 607, target dead 2018/05/11 08:07:19 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x7ff, &(0x7f0000000180)="c6295e46ca6c4968494954") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x101}, 0x1c) timer_create(0x0, &(0x7f0000000140)={0x0, 0x34, 0x4, @thr={&(0x7f0000000080)="7476ee79e0c41455c70acb9b23f710477808f8b272d04c82af30afe52e1a2d047da06b2792bf6e5b6c1e6cf2b531d485741fda831add10a4701ca21c0148686a0af3246c820aa325c90ba7d67cd4def4aa4dac781174fbb7413813", &(0x7f0000000100)="6432cba608b77e6fe4e26510e82d45ed329298"}}, &(0x7f00000001c0)) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000280)=0x6, 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, [], 0x21}, 0x3f}, {0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x3, [0x2, 0x5e9, 0x1, 0x2, 0x5, 0x3, 0x4, 0xddf]}, 0x5c) pread64(r0, &(0x7f00000003c0)=""/146, 0x92, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x1, 0x4, 0x6}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r2, 0x100}, &(0x7f0000000380)=0x8) 2018/05/11 08:07:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 341.874872] binder: 30454:30458 transaction failed 29189/-22, size 0-0 line 3010 2018/05/11 08:07:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc18") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) [ 341.876973] binder: 30453:30456 got new transaction with bad transaction stack, transaction 614 has target 30453:0 [ 341.876983] binder: 30453:30456 transaction failed 29201/-71, size 24-16 line 3037 [ 341.890992] binder: 30454:30463 got transaction with unaligned buffers size, 2 [ 341.891018] binder: 30454:30463 transaction failed 29201/-22, size 0-0 line 3178 [ 341.941459] binder: BINDER_SET_CONTEXT_MGR already set [ 341.941468] binder: 30469:30477 ioctl 40046207 0 returned -16 [ 341.942744] binder_alloc: 30453: binder_alloc_buf, no vma [ 341.942772] binder: 30469:30477 transaction failed 29189/-3, size 0-0 line 3133 [ 341.943270] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20000 sh [ 342.048907] binder: send failed reply for transaction 608, target dead [ 342.055790] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.061299] binder: undelivered TRANSACTION_ERROR: 29189 [ 342.067086] binder: release 30453:30456 transaction 614 out, still active [ 342.074065] binder: send failed reply for transaction 614, target dead 2018/05/11 08:07:19 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:19 executing program 1: r0 = socket(0x5, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="020000004970df89"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x0, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:19 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000940)={{0xa, 0x4e20, 0x240, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, {0xa, 0x4e23, 0x1c, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, 0x2, [0x8, 0x1f, 0xffff, 0xa9, 0x5, 0x3f, 0x7fff, 0x7]}, 0x5c) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) writev(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)="1d8c1a61ca04b2a0ddf02b374dccc034a22ec411515491fa700a6309792b66dd0f0d67d1552f7e4cc11e9d8e1817e8c2ac6e64d0b3e3f5b1b7e8f58b6baaf71a6a4b10204c90f84e6adffc31fcebcdde5cf6b472bcdf0936dade6bf468a39f6d8ec810af2013bd4e", 0x68}, {&(0x7f0000000240)="15a198ed30f040464bcfc22be477af212c192edaa01caea34d24147858db8fc006ad70afe17537b2ee04ea", 0x2b}, {&(0x7f0000000280)="b9a3956e4fa8a4639efd121c7b3049711b085efd5d603230a85d994585ee3669d3f709f423e66e77393b0e35e1b774be1f63b233040627bc1a7614ee6ce42339be36b41f0bed2942d0505212c7f31fcfea556ab0b3bad264ab5ce9ee330347f77b2616b8ed3a4c2bb1e171380d5e8ea91f80bd1d9ced31ccd078ba03bb9417cbf3c5619a13666864b407840db5486263809285ed411fe65fff2243fea86ee9ffa78ca0baf720c1a1e4bbed2b024242f2042af43a405063b5ddf5722d678faae0a817d13bae7dc1fde99f30db7c73ef33d1514228b449c2b90dd4ee0a31bc8bb75cc8af8d568d69962eafc4e933d03b50", 0xf0}, {&(0x7f0000000380)="cec525187bbd0f5156fa34af1b6c9f12bf7bd003a03abedcdc131d85258c8bb4cd6f1285510ceaf0ef86b298cfbed594191e8f18da84", 0x36}, {&(0x7f00000003c0)="68471ba15b19f0dc1926864bfa2368138ed62b", 0x13}, {&(0x7f0000000400)="5599f8f7f5dd68dbf34776bb90f0f07e5add7754883dfa6c4cd1d2ed72b7c8f28511e7696278d86f0a916ed63400d4cb972af3751e32bb26dbc0d54d2df68a45de7a40209179b2ffef624fffbbc0e56a1f39249dbd2b4dd0d1c10db362e1a2ce20df", 0x62}, {&(0x7f0000000480)="d1c0676de143c2a83d703ebeacda4c2fae75b6a166112be09979e0621a89ad9f22e9c5b5cbd3690fd4f76c414abd994208897a3ef6a01864422dd004eaa4dcb44ca1e0b09fc91a3cc05f613bd7797a653da56d762c439c13949c16c6ed07732c5a31cf0f95275a627646c4a86ad77f0ef078bcd17e96b4914fcffc8f5b66691fc2d7b624bf9ab3019fa6c6561de400a9bab77d48cac5445e37094685d3c81109325461ec17d20b60b2eaa4e13ee55afea4658c49502bfa65c07a4ee038", 0xbd}, {&(0x7f0000000740)="e5a430e15e0a4ae4ee69a2013a0d8e6fe5c6c3aa0817682bb35c23363d9e8e34e79905a0325f16cf0a2ee56b4965422d732597a06f1a65773d6b9fe41e2855ee44a8ab548fa122141f7b560072b97549ab708b92cb193d2db1db40b73639d2f1041de9c2e152478263edf8078a829a47cb3c", 0x72}], 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000ac0)={0x0}, &(0x7f0000000a80)=0xc) waitid(0x0, r3, &(0x7f0000000540), 0x21000009, &(0x7f0000000b00)) sched_getaffinity(r3, 0xffffffffffffff5e, &(0x7f0000000900)) accept$ax25(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000100)=0x5536, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x8006, 0xffffffffffffffe0) sendto$inet6(r2, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) ptrace$setsig(0x4203, r3, 0x9, &(0x7f0000000880)={0x7, 0x100000001, 0x20, 0x9}) execveat(r0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000d80)=[&(0x7f0000000bc0)='/selinux/avc/cache_stats\x00', &(0x7f0000000c00)='bpq0\x00', &(0x7f0000000c40)='/selinux/avc/cache_stats\x00', &(0x7f0000000c80)='\x00', &(0x7f0000000cc0)='systemmime_typewlan1[em1cpuset(&}}\x00', &(0x7f0000000d00)='%-\x00', &(0x7f0000000d40)="76626f786e657430955e212e7d707070305d656d305e2b00"], &(0x7f0000000e40)=[&(0x7f0000000dc0)='bpq0\x00', &(0x7f0000000e00)='.-\x00'], 0x1000) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000a00)={0x3, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xf}}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x4, 0x7, 0x40000, 0xfff, 0x1ff, &(0x7f00000009c0)='bpq0\x00', 0x913, 0x0, 0x257}) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:19 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c620000000000000006faa") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000000)={0x5, 0x2, 0xff, 0x7, 0x7, 0x7f}) 2018/05/11 08:07:19 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) [ 342.135654] binder: 30504:30512 got new transaction with bad transaction stack, transaction 619 has target 30504:0 [ 342.146368] binder: 30505:30507 transaction failed 29201/-28, size 0-0 line 3133 [ 342.151052] binder: 30504:30512 transaction failed 29201/-71, size 24-16 line 3037 [ 342.156213] binder: release 30504:30512 transaction 619 out, still active 2018/05/11 08:07:19 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 342.156233] binder: send failed reply for transaction 619, target dead [ 342.178122] binder: 30515:30516 got new transaction with bad transaction stack, transaction 623 has target 30515:0 [ 342.178133] binder: 30515:30516 transaction failed 29201/-71, size 24-16 line 3037 [ 342.184695] binder: release 30515:30516 transaction 623 out, still active [ 342.184715] binder: send failed reply for transaction 623, target dead [ 342.199174] binder: 30521:30522 got new transaction with bad transaction stack, transaction 626 has target 30521:0 [ 342.199187] binder: 30521:30522 transaction failed 29201/-71, size 24-16 line 3037 [ 342.208755] binder: release 30521:30522 transaction 626 out, still active [ 342.208773] binder: send failed reply for transaction 626, target dead 2018/05/11 08:07:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001d40)={'lo\x00', 0xfff}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:19 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") sendto$inet6(r0, &(0x7f0000000080)="d6c4c0b1f6e2827c3c563c6e844ea7630121eb45627929d87d5614f385a56ece511205893a7085e8eda9de9514e016d60a6eb47232c495c5c1a3283236e070e55e296f6c14aee911cffa845f9e5687b333e0e5b51f2ddd072e12255d2bab871d29f2a7b023468a415826c72d33b1b16ef55116a2eab5c14881bc94db43f42db1c4e7a3e6c365d68d6d7c4c801d1b1f36179e2f7ef89a944d134c25ff075861bcf46bfc4665b37866f57a6d1163a72f9b7b193486dba2f5a8b2994a9b33a29c9d8447efdfde95a43efd5bf290bb1c04884534a1254dcc199bb036a9e967e0", 0xde, 0x8004, &(0x7f00000001c0)={0xa, 0x4e21, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x80}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:19 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:19 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r2) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r3 = fcntl$getown(r0, 0x9) r4 = syz_open_procfs(r3, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa00700000938d0cc3a1c07ddf89a74cbfc050093263858898491b8") setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:19 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000040)=0xf4) [ 342.300466] binder: 30505:30507 transaction failed 29189/-22, size 0-0 line 3010 [ 342.310567] binder: undelivered TRANSACTION_ERROR: 29189 [ 342.316029] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/11 08:07:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001d40)={'lo\x00'}) sendfile(r2, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) [ 342.347035] binder: 30539:30540 transaction failed 29189/-22, size 0-0 line 3010 [ 342.358828] binder: 30543:30548 got new transaction with bad transaction stack, transaction 631 has target 30543:0 [ 342.369655] binder: 30543:30548 transaction failed 29201/-71, size 24-16 line 3037 2018/05/11 08:07:19 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0xc5a02637c566f9cb, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001d40)={'lo\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) [ 342.376023] binder: 30539:30549 got transaction with unaligned buffers size, 2 2018/05/11 08:07:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:19 executing program 6: r0 = socket(0x11, 0x1, 0x1fe) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c59b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4c}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="00000000a45e0fb99357c188b99507d30707c011d6bb7274332719d0cb177bdb104855e647e6673437b74937fbceeb43245add53338b31bc1743e7048266ddc4f0c2929a813c0b92194e9790ca5d0632a7bb43314f3c807ba7dc7348195a5ae7fb8875ff5d54b8732cefb3c36eb93aa83e29d5f03cd3117bee2f270ecc4f56fb13bc8c8875b1e3f133eb2b5fbf4d76f1cc428646b3c604", @ANYRES16=r3, @ANYBLOB="060325bd7000fbdbdf25080000002c000300080005007f00000108000300030000000800080007000000080008000000000008000100030000000800050001800000"], 0x48}, 0x1, 0x0, 0x0, 0x20008084}, 0x48880) r4 = fcntl$getown(r2, 0x9) fcntl$lock(r2, 0x0, &(0x7f0000000080)={0x3, 0x7, 0x7ff, 0x6, r4}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @loopback}, &(0x7f0000000480)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000004c0)={@loopback={0x0, 0x1}, 0x25, r5}) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:19 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:19 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0xdc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000565701e79c948b68576bf7aac5d20bc9db3baf9c3374b529fd44a90d0da2f24a083a67d7bb1a9e4bd7e891429c7d2b696cf534654a8b7f300d93691015357aaa965da8250e0f8418c8f7e19ab568000eb398003f9c83bf69d92c75d2797afed6460e539b6867aeb70480e8301f11002d6635f2350adbebab3ff8e5bef43045ca3dc0126ef26a60c01c4240738a1b5ce8", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0xc0, 0x0, &(0x7f0000000100)="1d98c4c1bfc3518de0801aa39530e3185db1515a89490da0aeda7ed86305f00aa8b561f6ce98e5c6a4a4d2902106766f744bafadf68427c1cfa3541211a6254d1ff00fcb503da94a534e1ea2e4bc7045eaa8efc57f70b139124659e83e565f9bbc2fefc74372501dde92df2020abce2822e53eebcc3cffc3dd24b7d64e12e03dab924da7f35d41af32778b67fa7e308db8182643d4b76c3fa2d061e8b3ba7a09c94184e7d620afb33185ba93c026b8d2986def0744e51d082ebe0b2eb2a005b2"}) [ 342.376047] binder: 30539:30549 transaction failed 29201/-22, size 0-0 line 3178 [ 342.396437] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.396574] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001d40)={'lo\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:19 executing program 6: r0 = socket(0x80000011, 0x3, 0x6) ioctl(r0, 0x8912, &(0x7f00000000c0)="bc63b160eb1985f159a72d7509fb2122e529d9ae5251d6aa0608d223b15bca1a6797c4") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) [ 342.439353] binder: 30562:30563 got transaction with unaligned buffers size, 2 [ 342.439381] binder: 30562:30563 transaction failed 29201/-22, size 0-0 line 3178 [ 342.471304] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/11 08:07:19 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:19 executing program 1: r0 = socket(0xa, 0x1, 0x0) read(r0, &(0x7f0000000040)=""/71, 0x47) ioctl(r0, 0x8911, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") signalfd(r0, &(0x7f0000000000)={0x2}, 0x8) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="000006fd2b75af6c44512693fd239400"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001d40)={'lo\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) [ 342.512339] binder: 30578:30580 transaction failed 29201/-28, size 0-0 line 3133 [ 342.526091] binder: 30578:30589 transaction failed 29201/-28, size 0-0 line 3133 [ 342.553471] binder: release 30543:30548 transaction 631 out, still active [ 342.561020] binder: send failed reply for transaction 631, target dead [ 342.593602] binder: 30597:30604 transaction failed 29189/-22, size 0-0 line 3010 [ 342.607810] binder: 30601:30608 got new transaction with bad transaction stack, transaction 639 has target 30601:0 [ 342.607823] binder: 30601:30608 transaction failed 29201/-71, size 24-16 line 3037 2018/05/11 08:07:19 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0xfffffffffffffff8, 0x4) r1 = socket$inet6(0xa, 0x80c, 0xfffffffffffffff8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:19 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc18") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001d40)={'lo\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)="b38f1b4d3fa891ca55cef3717a0942bc534ebdf5713470950677325977fa3b622d2d614a316be3a39cded9080419f3a5ea5c13bb98612c585dc0f380817517d4fbdaac04663d0681072925e444ce429a54a8c270aa6b4ba3d3e9387a37fe316c2405185738a2ccc47e82bf6a91a1cc3426bd86250798724d55f7182f44fd9fc09a2dabe9c1cdacb3a4719e0aebcfd3651496354ef360653395ddb74f6327f3f9e365d524c933b6afb241a0f0bf96ccd00d174873a27414364ec32799a7dd813fa11461d0d63a3ab0", 0xc8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:19 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000008000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:19 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:19 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) [ 342.618571] binder: release 30601:30608 transaction 639 out, still active [ 342.618590] binder: send failed reply for transaction 639, target dead [ 342.662239] binder: 30597:30612 transaction failed 29189/-22, size 0-0 line 3010 [ 342.676852] binder: undelivered TRANSACTION_ERROR: 29189 [ 342.682552] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:19 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001d40)={'lo\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400), 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) [ 342.704794] binder: 30621:30626 got new transaction with bad transaction stack, transaction 643 has target 30621:0 [ 342.715442] binder: 30625:30629 transaction failed 29201/-28, size 0-0 line 3133 2018/05/11 08:07:19 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:19 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc18") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 342.752788] binder: 30621:30626 transaction failed 29201/-71, size 24-16 line 3037 [ 342.762865] binder: 30625:30639 transaction failed 29201/-28, size 0-0 line 3133 [ 342.769370] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.769505] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.787382] binder: release 30621:30626 transaction 643 out, still active [ 342.795777] binder: send failed reply for transaction 643, target dead 2018/05/11 08:07:20 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001d40)={'lo\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400), 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180)=0xc7, 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc18") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:20 executing program 3: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) fcntl$setflags(r0, 0x2, 0x1) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r2, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000040)=""/182) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:20 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:20 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:20 executing program 6: r0 = socket(0x11, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x4a8, 0x140, 0x280, 0x280, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000000), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x1c}, @empty, 0xffffffff, 0xff000000, @mac, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0x2, 0xf8af, 0x3f, 0x1, 0xfffffffffffff170, 0x6, '\x00', '\x00', {}, {}, 0x0, 0x10}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @remote={0xac, 0x14, 0x14, 0xbb}, 0x9, 0xffffffff}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="784c9e97104f", @empty, @dev={0xac, 0x14, 0x14, 0x1d}, @local={0xac, 0x14, 0x14, 0xaa}, 0xc, 0x1}}}, {{@arp={@rand_addr=0x7, @remote={0xac, 0x14, 0x14, 0xbb}, 0xff, 0xffffff00, @empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, 0xffffffffffffffe1, 0x0, 0x6, 0x9, 0x0, 0x4, 'veth1_to_team\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x100}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="694bf00dedf5", @mac=@link_local={0x1, 0x80, 0xc2}, @multicast2=0xe0000002, @multicast1=0xe0000001, 0xf, 0xffffffff}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4f8) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:20 executing program 4: r0 = socket(0xa, 0x1, 0x0) getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:20 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001d40)={'lo\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400), 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x20000, 0x0) 2018/05/11 08:07:20 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc18") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:20 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:20 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 342.982739] binder: 30661:30664 transaction failed 29189/-22, size 0-0 line 3010 [ 342.992047] binder: 30662:30666 got new transaction with bad transaction stack, transaction 649 has target 30662:0 2018/05/11 08:07:20 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet6(0xa, 0x400000000001, 0x0) r2 = dup(r1) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xbe0, 0x4) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000001d40)={'lo\x00'}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000700)) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400), 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000180), 0xfffffffffffffc46) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) 2018/05/11 08:07:20 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:20 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x100, 0x4) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)={'raw\x00', 0x15, "a8bcded6fa5d7cbf5efab89ee105ff57edfd27cc60"}, &(0x7f00000000c0)=0x39) [ 342.992059] binder: 30662:30666 transaction failed 29201/-71, size 24-16 line 3037 [ 342.998975] binder: release 30662:30666 transaction 649 out, still active [ 342.998994] binder: send failed reply for transaction 649, target dead [ 343.024615] binder: 30678:30679 got new transaction with bad transaction stack, transaction 652 has target 30678:0 [ 343.024626] binder: 30678:30679 transaction failed 29201/-71, size 24-16 line 3037 [ 343.028294] binder: release 30678:30679 transaction 652 out, still active [ 343.028312] binder: send failed reply for transaction 652, target dead [ 343.046506] binder: 30681:30682 got new transaction with bad transaction stack, transaction 655 has target 30681:0 [ 343.046515] binder: 30681:30682 transaction failed 29201/-71, size 24-16 line 3037 [ 343.053045] binder: release 30681:30682 transaction 655 out, still active [ 343.053063] binder: send failed reply for transaction 655, target dead [ 343.105187] binder: 30687:30692 transaction failed 29189/-22, size 0-0 line 3010 [ 343.202351] binder: 30661:30705 transaction failed 29189/-22, size 0-0 line 3010 [ 343.214740] binder: undelivered TRANSACTION_ERROR: 29189 [ 343.221622] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:20 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:20 executing program 4: r0 = socket(0xa, 0x1, 0x0) getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") memfd_create(&(0x7f0000000040)='/dev/binder#\x00', 0x1) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:20 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc18") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:20 executing program 3: r0 = accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14, 0x80000) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f00000001c0)=""/162, 0x7}) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000002c0)={0x0, 0x8000, 0x30, 0x0, 0x8}, &(0x7f0000000300)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r2, 0x8}, 0x8) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r3, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:20 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000080)=""/66, 0x42}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/202, 0xca}, {&(0x7f0000001500)=""/235, 0xeb}, {&(0x7f0000001600)=""/86, 0x56}, {&(0x7f0000001680)=""/156, 0x9c}], 0x8, 0x0) 2018/05/11 08:07:20 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0xdc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000565701e79c948b68576bf7aac5d20bc9db3baf9c3374b529fd44a90d0da2f24a083a67d7bb1a9e4bd7e891429c7d2b696cf534654a8b7f300d93691015357aaa965da8250e0f8418c8f7e19ab568000eb398003f9c83bf69d92c75d2797afed6460e539b6867aeb70480e8301f11002d6635f2350adbebab3ff8e5bef43045ca3dc0126ef26a60c01c4240738a1b5ce8", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0xc0, 0x0, &(0x7f0000000100)="1d98c4c1bfc3518de0801aa39530e3185db1515a89490da0aeda7ed86305f00aa8b561f6ce98e5c6a4a4d2902106766f744bafadf68427c1cfa3541211a6254d1ff00fcb503da94a534e1ea2e4bc7045eaa8efc57f70b139124659e83e565f9bbc2fefc74372501dde92df2020abce2822e53eebcc3cffc3dd24b7d64e12e03dab924da7f35d41af32778b67fa7e308db8182643d4b76c3fa2d061e8b3ba7a09c94184e7d620afb33185ba93c026b8d2986def0744e51d082ebe0b2eb2a005b2"}) 2018/05/11 08:07:20 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r4, &(0x7f0000000080)=""/98, 0x62, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) getitimer(0x1, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:20 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc18") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:20 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getpeername$ax25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200490000000000ca3226f9eb69c57eaa98d73a6ab82794a9"], 0x0, 0x0, &(0x7f00000003c0)}) [ 343.284964] binder: 30711:30720 transaction failed 29189/-22, size 0-0 line 3010 [ 343.286338] binder: 30714:30718 transaction failed 29189/-22, size 0-0 line 3010 2018/05/11 08:07:20 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="86295e4e6f000000080000") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:20 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x5, {{0xa, 0x4, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:20 executing program 1: syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x101}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0xf0d, 0x8, 0x6, 0x80000000, r1}, 0x10) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000c910d9ebbd1932d809bbe85ed3cfb5b9c6afd5b10d278cb021209985ce72b53a1c89f0b13e85f8c39c74a89fa37859d3312b4ba7cdcbad21fda94019989a9fa00b61f1decfbd216b1e21b83266e730a2ef442dc3f1a43ba9b3216f633820070b6a6b8ac57d1a7199dcfb9f15ede4eccd4ef83dffda1b1fa16593236670c53957b20f24c176ad34f07b4acb3652be0391c76f3b80c4fc9896959c8c894eefb8992a2e1c1ec0a4ca259504c53c2e9637bc0af820f8a57d4079022fed075d57", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:20 executing program 1: r0 = socket(0xa, 0x80e, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000df10e7dc000000010000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x2a4, 0x0, &(0x7f00000003c0)}) [ 343.300063] binder: 30712:30723 transaction failed 29189/-22, size 0-0 line 3010 [ 343.308915] binder: 30712:30728 transaction failed 29189/-22, size 0-0 line 3010 [ 343.325335] binder: undelivered TRANSACTION_ERROR: 29189 [ 343.326660] binder: undelivered TRANSACTION_ERROR: 29189 [ 343.332785] binder: 30732:30734 transaction failed 29189/-22, size 0-0 line 3010 [ 343.341200] binder: undelivered TRANSACTION_ERROR: 29189 [ 343.354251] binder: 30737:30738 transaction failed 29189/-22, size 0-0 line 3010 [ 343.355715] binder: 30737:30739 transaction failed 29189/-22, size 0-0 line 3010 [ 343.363230] binder: undelivered TRANSACTION_ERROR: 29189 [ 343.363363] binder: undelivered TRANSACTION_ERROR: 29189 [ 343.379426] binder: 30743:30745 transaction failed 29189/-22, size 0--4761473514899243008 line 3010 [ 343.390831] binder: undelivered TRANSACTION_ERROR: 29189 [ 343.405902] binder: 30751:30753 transaction failed 29189/-22, size 0-0 line 3010 [ 343.407352] binder: 30751:30754 transaction failed 29189/-22, size 0-0 line 3010 2018/05/11 08:07:21 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000300)={0x1, {{0xa, 0x4, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xffc00000000000}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x8000010000054) ioctl$KDSETLED(r2, 0x4b32, 0xcb) 2018/05/11 08:07:21 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:21 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r4, &(0x7f0000000080)=""/98, 0x62, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) getitimer(0x1, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:21 executing program 4: r0 = socket(0xa, 0x1, 0x0) getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:21 executing program 3: r0 = socket(0x16, 0xf, 0x9) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc18") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:21 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @loopback=0x7f000001}}, [0xffffffff, 0xfffffffffffffe00, 0x7f, 0x22ff, 0xfffffffffffffffd, 0x7f, 0xb38, 0x1, 0x4, 0x0, 0xfa1, 0x6, 0x6, 0xfffffffffffffff7, 0x3ff]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r2, 0x430}, &(0x7f0000000180)=0x8) 2018/05/11 08:07:21 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000001380)={&(0x7f0000000080)={0x27, 0x0, 0x1, 0x7, 0x3, 0xfffffffffffffffc, "c011b42d99bde3406f4e68f05440942fc00aad70e809efa357b9b530246d42652b26d1941902e5a3403e7450e530f33fdf6dbe0ee20686002385f70b82afdf", 0x1b}, 0x60, &(0x7f00000012c0)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f0000000100)="de4f49adf372e493e4850c31e4d05d46c7c324f626702a43ca57baa1352ab38f4ba4f62e179ccd80ecf08cf8ea088d132aee31984346bb5a804e9a0eb81338041a6ba74343c604a561f79e5bce272dc1ca8e88402b872f9af7f9aa7e2a3d6ea60e58a3f9f13abb4fd619f8d90543407dce", 0x71}, {&(0x7f00000011c0)="79bc3647b8984eedac389ff4815a402d3a5b9cdc863a1ea5fad860015ffd9efbf98354efc7d45c19e9ad405412c9707092b1d5061df6faf1bd26638471b733770f2c00126f268ba9933624394ed5e87f5ad1e53d6882c84a02b0fefd6c1301feeeb58575aed07a343c918e0b4a898381cdef3d715a7d38f85e248303c1e7049133c9877dcf10c3b1a53f1e94016c50d73d54cc774e4ee1c307", 0x99}, {&(0x7f0000001280)="00b2bf71dd65df6f479250ba7776df9e27bd987e2925a7e43d544c05602712c38f93214be37d15d5abf6a06c666c7076757c63d55c", 0x35}], 0x4, &(0x7f0000001300)={0x78, 0x102, 0x81, "db235f42385ad365d3aeaaca116adb783c6882a359c1bf1f177a8ad119336c79ec2cbe05447de7fa0f78ec8a7d38c6dedf42f4328e128180d5af62e1d55805f00c5c1cda61f1fc3a2590fab759bc9ec1ecee53aac75d50b8d7ffd8f95eb45ec9e1248a5b"}, 0x78, 0x4000}, 0x20040001) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) fcntl$notify(r0, 0x402, 0x2a) [ 344.204425] binder: 30773:30777 transaction failed 29189/-22, size 0-0 line 3010 2018/05/11 08:07:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:21 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc18") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:21 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r0, 0x4b36) sendto(r0, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'gretap0\x00', r2}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r0, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:21 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:21 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x7, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) [ 344.232877] binder: 30779:30786 transaction failed 29189/-22, size 0-0 line 3010 [ 344.254252] binder: 30779:30790 transaction failed 29189/-22, size 0-0 line 3010 [ 344.269176] binder: undelivered TRANSACTION_ERROR: 29189 [ 344.288698] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:21 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:21 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:21 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 344.301297] binder: 30799:30800 transaction failed 29189/-22, size 0-0 line 3010 [ 344.301364] binder: 30799:30800 ioctl 8906 20000040 returned -22 [ 344.308073] binder: 30794:30801 got new transaction with bad transaction stack, transaction 674 has target 30794:0 [ 344.308084] binder: 30794:30801 transaction failed 29201/-71, size 24-16 line 3037 [ 344.337829] binder: BINDER_SET_CONTEXT_MGR already set [ 344.337836] binder: 30806:30808 ioctl 40046207 0 returned -16 [ 344.338223] binder_alloc: 30794: binder_alloc_buf, no vma [ 344.338239] binder: 30806:30808 transaction failed 29189/-3, size 0-0 line 3133 [ 344.342088] binder_alloc: 30794: binder_alloc_buf, no vma [ 344.342105] binder: 30799:30800 transaction failed 29189/-3, size 0-0 line 3133 [ 344.342138] binder: 30799:30802 ioctl 8906 20000040 returned -22 [ 344.385323] binder: BINDER_SET_CONTEXT_MGR already set [ 344.385331] binder: 30810:30817 ioctl 40046207 0 returned -16 [ 344.386546] binder_alloc: 30794: binder_alloc_buf, no vma [ 344.386569] binder: 30810:30817 transaction failed 29189/-3, size 0-0 line 3133 [ 344.456385] binder: undelivered TRANSACTION_ERROR: 29189 [ 344.461886] binder: undelivered TRANSACTION_ERROR: 29189 [ 344.467413] binder: release 30794:30801 transaction 674 out, still active [ 344.474396] binder: send failed reply for transaction 674, target dead 2018/05/11 08:07:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x7fff, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x200, 0x4) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000140)=0x80) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000000, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840000000000000000000000000000000180000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="e7ffffffffffffff"], 0x0, 0x0, &(0x7f00000003c0)}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x10000, 0xfffffffffffffff9}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r2, 0x80000000, 0x0, 0x80000001, 0x4}, &(0x7f0000000100)=0x18) 2018/05/11 08:07:22 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="0065742f6d6366696c74657236007711b6cd5e89366e646823844a817d004cef825f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") connect(r2, &(0x7f0000000040)=@nl=@unspec, 0x80) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:22 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") fcntl$setsig(r0, 0xa, 0x18) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'veth0\x00', {0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:22 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r3 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r3, 0x2}, @increfs_done={0x40106308, r3, 0x1}, @acquire_done={0x40106309, r3, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:22 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc18") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:22 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r4, &(0x7f0000000080)=""/98, 0x62, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) getitimer(0x1, &(0x7f0000000040)) r6 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:22 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r0, 0x4b36) sendto(r0, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'gretap0\x00', r2}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r0, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:22 executing program 4: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r0, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r0, 0x4b36) sendto(r0, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'gretap0\x00', r2}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r0, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xa9, "63baa398e79814c5c6d8925e593186218e1f9025a4389c45cb11e8d613bc16eac04a2d1b5a61b7a7436d726b52fcf000802be212bfbc57ad119ca86a246b1ac8cea9c494dc8802b488fbeba27e448bb5bbf9938fba474c913da71a41e1a03586c6deb1e4ae75fc45972bdae2f4cb7344483383c54ba2a8ff10c5e53102b712a0b2403d49b3c6fd17f2e1b1cd697ee9480c7961c42c118e2ac009dd796e1bb1b7217963e723da93cbb9"}, &(0x7f00000000c0)=0xb1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x8) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:22 executing program 5: socket(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 345.114044] binder: 30830:30841 transaction failed 29189/-22, size 0-0 line 3010 [ 345.131249] binder: 30830:30847 transaction failed 29189/-22, size 0-0 line 3010 [ 345.147155] binder: undelivered TRANSACTION_ERROR: 29189 [ 345.153251] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:22 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc18") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(r1, &(0x7f00000023c0), 0x0, 0x0) 2018/05/11 08:07:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 345.193536] binder: 30834:30836 got new transaction with bad transaction stack, transaction 682 has target 30834:0 [ 345.205760] binder: 30834:30836 transaction failed 29201/-71, size 24-16 line 3037 [ 345.206656] binder: 30848:30850 got transaction with unaligned buffers size, 2 [ 345.206681] binder: 30848:30850 transaction failed 29201/-22, size 0-0 line 3178 [ 345.216044] binder: 30848:30853 got transaction with unaligned buffers size, 2 2018/05/11 08:07:22 executing program 1: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x0, 0x0) setsockopt(r0, 0x8, 0x7, &(0x7f0000000040)="d71431cb12e88200568c742876fed14992b6420dde155ec74809efcdefd887cc49a0ab898eae6944590d330fc6f1169360e8ef83591ce36902b3aa30170c365ee819fb4fccc1bad8737b8a5a5acac9d22a1934cac955c8f8c9f7c66d7b807a4480fbf644d80542c0934a12e5d993b85801698a92a7b90a22720a451f0851bafacdb462098d61f65a1a0725eba0f890273f37370899a19840bc08c7340aead27ff1bdc86503fa67263b0e9b53304e0690c556b393a9", 0xb5) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840000000000000000000000000100000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB='B\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:22 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000000c0)={0x1000, 0x1, 0x81, 0x8, 0x7, 0x3f}) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:22 executing program 6: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="fb6bc23fa033894c6cd3e508f0e18901a7e30e9d99fcf2e9196ef4840101ad0aa67622d5150de258b0f0012b8f2534446b3c468ec8", 0x35, r0) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@ipv4_deladdr={0x28, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x8, 0x1, @local={0xac, 0x14, 0x14, 0xaa}}, @IFA_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x14, 0xaa}}]}, 0x28}, 0x1}, 0x0) getpeername(r2, &(0x7f00000003c0)=@nl, &(0x7f0000000480)=0x80) r5 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000340)='/dev/keychord\x00', 0x80002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000380)='cgroup.controllers\x00', 0x0, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) [ 345.216066] binder: 30848:30853 transaction failed 29201/-22, size 0-0 line 3178 [ 345.221430] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.221576] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.255984] binder: 30859:30860 got transaction with unaligned buffers size, 2 [ 345.256044] binder: 30859:30860 transaction failed 29201/-22, size 0-0 line 3178 [ 345.258759] binder: 30859:30861 got transaction with unaligned buffers size, 2 [ 345.258780] binder: 30859:30861 transaction failed 29201/-22, size 0-0 line 3178 2018/05/11 08:07:22 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @multicast1=0xe0000001}], 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000100)) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000080)=0x8, &(0x7f00000000c0)=0x4) 2018/05/11 08:07:22 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0xfffffffffffffecf, 0x0, &(0x7f00000003c0)}) [ 345.263942] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.264093] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.296644] binder: 30867:30869 got transaction with unaligned buffers size, 66 [ 345.296669] binder: 30867:30869 transaction failed 29201/-22, size 0-0 line 3178 [ 345.298711] binder: 30867:30871 got transaction with unaligned buffers size, 66 [ 345.298735] binder: 30867:30871 transaction failed 29201/-22, size 0-0 line 3178 [ 345.303383] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.303527] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.318993] binder: 30875:30876 got transaction with unaligned buffers size, 2 [ 345.319014] binder: 30875:30876 transaction failed 29201/-22, size 0-0 line 3178 [ 345.326888] binder: 30875:30876 got transaction with unaligned buffers size, 2 [ 345.326909] binder: 30875:30876 transaction failed 29201/-22, size 0-0 line 3178 [ 345.332204] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.332420] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.346732] binder: 30879:30880 got transaction with unaligned buffers size, 2 [ 345.346755] binder: 30879:30880 transaction failed 29201/-22, size 0-0 line 3178 [ 345.348365] binder: 30879:30881 got transaction with unaligned buffers size, 2 [ 345.348388] binder: 30879:30881 transaction failed 29201/-22, size 0-0 line 3178 [ 345.514464] binder: release 30834:30836 transaction 682 out, still active [ 345.522387] binder: send failed reply for transaction 682, target dead 2018/05/11 08:07:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc18") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(r1, &(0x7f00000023c0), 0x0, 0x0) 2018/05/11 08:07:23 executing program 3: r0 = socket(0x14, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xfffffffffffeffff, 0x3f}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x800, 0x8, 0xfffffffffffffffa, 0x0, 0x3a}, &(0x7f0000000200)=0x98) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e46ca6c49b612ec6f") stat(&(0x7f0000000500)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in=@loopback=0x7f000001, 0x4e24, 0xfffffffffffffffb, 0x4e23, 0x0, 0xa, 0x20, 0xa0, 0x3f, 0x0, r2}, {0x7fff, 0x8, 0x6, 0xffff, 0x1000, 0x1, 0x100000000, 0x7fff}, {0x2, 0x100000001, 0x1, 0x8}, 0x5, 0x6e6bbd, 0x1, 0x1, 0x2, 0x2}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d5, 0x2b}, 0xa, @in, 0x0, 0x2, 0x1, 0x4, 0xf75, 0x400, 0x9}}, 0xe8) r3 = socket$inet6(0xa, 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000004c0)=0x14) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000740)={{{@in, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e24, 0x0, 0x4e22, 0x9, 0x2, 0xa0, 0x80, 0x3e, r4, r2}, {0xc8, 0x3ff, 0x2, 0x1, 0x400, 0xfffffffffffffffa, 0x3ff, 0x80000001}, {0xfffffffffffffff9, 0xc9, 0x4, 0x101}, 0x200, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4d5, 0xff}, 0xa, @in, 0x3507, 0x3, 0x2, 0x100000000, 0x5, 0x2e6, 0x2}}, 0xe8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='pids.events\x00', 0x0, 0x0) ioctl$SG_SET_DEBUG(r5, 0x227e, &(0x7f0000000440)=0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000240), 0xffffff81) sendto$inet6(r3, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:23 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x1) ioctl$KDENABIO(r2, 0x4b36) r3 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:23 executing program 5: socket(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:23 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:23 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r4, &(0x7f0000000080)=""/98, 0x62, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) getitimer(0x1, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") 2018/05/11 08:07:23 executing program 4: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in6={{0xa, 0x4e20, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x90de}}, 0x10000}, 0x90) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="020000000000000089b5cfa9dce11f1e6007d70116ddf9ec3f"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:23 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc18") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(r1, &(0x7f00000023c0), 0x0, 0x0) 2018/05/11 08:07:23 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 346.033876] binder: 30901:30908 transaction failed 29189/-22, size 0-0 line 3010 2018/05/11 08:07:23 executing program 5: socket(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:23 executing program 4: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:23 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:23 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) 2018/05/11 08:07:23 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 346.045903] binder_alloc: 30899: binder_alloc_buf, no vma [ 346.045920] binder: 30899:30913 transaction failed 29189/-3, size 0-0 line 3133 [ 346.089948] binder_alloc: 30920: binder_alloc_buf, no vma [ 346.089967] binder: 30920:30923 transaction failed 29189/-3, size 0-0 line 3133 2018/05/11 08:07:23 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:23 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:23 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") connect$l2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr=0x4}, 0x0, 0x4, 0x1, 0x1}}, 0x26) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) [ 346.101739] binder_alloc: 30925: binder_alloc_buf, no vma [ 346.101757] binder: 30925:30926 transaction failed 29189/-3, size 0-0 line 3133 [ 346.132425] binder_alloc: 30931: binder_alloc_buf, no vma [ 346.132442] binder: 30931:30932 transaction failed 29189/-3, size 0-0 line 3133 [ 346.151566] binder_alloc: 30934: binder_alloc_buf, no vma [ 346.151582] binder: 30934:30935 transaction failed 29189/-3, size 0-0 line 3133 2018/05/11 08:07:23 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r2, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:23 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = getpgid(0xffffffffffffffff) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=r2) r3 = memfd_create(&(0x7f0000000100)='yam0\x00', 0x1) mkdirat(r3, &(0x7f0000000200)='./file0\x00', 0x40) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000300)=0x177, 0x4) r4 = fcntl$dupfd(r0, 0x406, r1) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f00000001c0)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000080)={'yam0\x00', {0x2, 0x4e21, @rand_addr}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000140)={'veth0_to_bond\x00', {0x2, 0x4e24, @rand_addr=0x8}}) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4096}]}, 0xfffffffffffffffc}, {{&(0x7f00000006c0)=@rc, 0xfffffffffffffe2c, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) [ 346.180709] binder_alloc: 30938: binder_alloc_buf, no vma [ 346.186308] binder: 30938:30941 transaction failed 29189/-3, size 0-0 line 3133 [ 346.186310] binder_alloc: 30938: binder_alloc_buf, no vma [ 346.186325] binder: 30901:30943 transaction failed 29189/-3, size 0-0 line 3133 [ 346.192017] binder: undelivered TRANSACTION_ERROR: 29189 [ 346.192161] binder: undelivered TRANSACTION_ERROR: 29189 [ 346.219089] binder_alloc: 30938: binder_alloc_buf, no vma [ 346.219149] binder: 30945:30948 transaction failed 29189/-3, size 0-0 line 3133 [ 346.242382] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:24 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x80, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x96fa, 0xa6}, &(0x7f0000000180)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000001c0)={r2, 0x73, "b5274980776d82cb486d9f9b9b5540dc34d9cb55067838519ee0a920fd8ff1a6394cecbb3d7b87acdaa43ff7f79c9dc51f406121ca29815142cb4ff5b425fb98aa1bf3b1848ad72c5a3d07a54b9381c8e43d59e632592d3bd77e5569880d340326ce56a7775c80bd66262b12e8a75cebe4dc03"}, &(0x7f0000000240)=0x7b) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x4cd, 0x5, 0x7, 0x3}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r3, 0x3, 0x3b8}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:24 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:24 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e23, 0x9, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x20}}, 0x1f}, {0xa, 0x4e20, 0x3f, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x23c9}, 0xac7, [0x5, 0x2, 0x2, 0x8, 0x7fff, 0x7a, 0xcad9, 0x5]}, 0x5c) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x7ff, 0x2, 0x9, 0x4, 0x10, 0x101, 0x400, {0x0, @in6={{0xa, 0x4e23, 0x1ff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}, 0xd5c}}, 0x2, 0x10001, 0x3, 0xb6, 0xb2c}}, &(0x7f00000000c0)=0xb0) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000140)={r3, 0x2}, 0x8) 2018/05/11 08:07:24 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r4, &(0x7f0000000080)=""/98, 0x62, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) getitimer(0x1, &(0x7f0000000040)) 2018/05/11 08:07:24 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/05/11 08:07:24 executing program 4: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:24 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r2, 0x0, 0x0, 0x7fff) fallocate(r2, 0x3, 0x0, 0x2a1e) 2018/05/11 08:07:24 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:24 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5, 0x32, 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000040)) 2018/05/11 08:07:24 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 346.941249] binder: 30975:30984 got transaction with unaligned buffers size, 2 2018/05/11 08:07:24 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:24 executing program 4: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:24 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:24 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 346.942087] binder: 30976:30982 got transaction with invalid offset (24, min 0 max 24) or object. [ 346.942109] binder: 30976:30982 transaction failed 29201/-22, size 24-16 line 3196 2018/05/11 08:07:24 executing program 3: r0 = socket(0x11, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet6_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000080)=""/93, &(0x7f0000000100)=0x5d) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:24 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 346.986265] binder: 30993:30997 got transaction with invalid offset (24, min 0 max 24) or object. [ 346.986292] binder: 30993:30997 transaction failed 29201/-22, size 24-16 line 3196 [ 347.020760] binder: 31001:31002 got transaction with invalid offset (24, min 0 max 24) or object. [ 347.020784] binder: 31001:31002 transaction failed 29201/-22, size 24-16 line 3196 [ 347.041147] binder: 31007:31009 got transaction with invalid offset (24, min 0 max 24) or object. [ 347.041170] binder: 31007:31009 transaction failed 29201/-22, size 24-16 line 3196 [ 347.065790] binder: 31013:31014 got transaction with invalid offset (24, min 0 max 24) or object. [ 347.065817] binder: 31013:31014 transaction failed 29201/-22, size 24-16 line 3196 [ 347.122474] binder: 30975:30984 transaction failed 29201/-22, size 0-0 line 3178 2018/05/11 08:07:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x1001) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) fcntl$setlease(r1, 0x400, 0x1) 2018/05/11 08:07:24 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:24 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x891a, &(0x7f0000000040)="c6295e6f00000000000000") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x4, 0x4800000000000000, 0x7, "91b1e00a8eae8f68fb7ce589b230b79ad4748b09a107708e08f832051b1eae8d94a846ec16c5eddc797cb5dcb4b77db73fe6c848567feec0f2f10a7dcc1b0be05703bfb31bc500c48c546644e7733d18"}, 0xd8) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) [ 347.142653] binder: 30975:31023 transaction failed 29189/-22, size 0-0 line 3010 [ 347.156123] binder: undelivered TRANSACTION_ERROR: 29189 [ 347.161668] binder: undelivered TRANSACTION_ERROR: 29201 [ 347.175625] binder_alloc: 31027: binder_alloc_buf, no vma [ 347.181325] binder: 31026:31028 transaction failed 29189/-3, size 0-0 line 3133 [ 347.181349] binder: 31027:31029 got transaction with invalid offset (24, min 0 max 24) or object. [ 347.181373] binder: 31027:31029 transaction failed 29201/-22, size 24-16 line 3196 [ 347.212053] binder: 31026:31034 transaction failed 29189/-22, size 0-0 line 3010 [ 347.223105] binder: undelivered TRANSACTION_ERROR: 29189 [ 347.228782] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:24 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r4, &(0x7f0000000080)=""/98, 0x62, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) 2018/05/11 08:07:24 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:24 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:24 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:24 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x7f, {0x2, 0x4e20, @multicast1=0xe0000001}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e24}, 0x100, 0x1, 0x73, 0x1ff, 0x3, &(0x7f0000000100)='syz_tun\x00', 0x1000, 0x3, 0x100000000}) socket$inet6(0xa, 0x5, 0x1000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x92e8, &(0x7f00000000c0)=0x4) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:24 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") write$binfmt_aout(r0, &(0x7f0000000480)={{0x108, 0x5, 0x1, 0xa4, 0x3d9, 0x8, 0x134, 0x9ae}, "74e4f0dbae31ba1454fc4abd3b7d94409f5008401c588103bd709fe9184e6054c207ef6a962c421a20cc3878b8ec3a785d120769815e0d3e8e05a6bfbcff9f72f27feb7e099a33ddc72456bc7c4b94b2f6950a8ee4d74b1e0e457a890d2d", [[], [], [], [], [], []]}, 0x67e) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="df4e87ef432f2183e92e3ada95f0eaf3", 0x10) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000b00)={0x1000, 0x4, 0x2, 0x9, 0x6, [{0x7fff, 0x6, 0x4, 0x0, 0x0, 0x2000}, {0x8, 0x81, 0x7, 0x0, 0x0, 0x1000}, {0x4, 0x7, 0x7, 0x0, 0x0, 0x800}, {0x0, 0x2, 0x87, 0x0, 0x0, 0x2004}, {0x54a, 0x8, 0xf7a1, 0x0, 0x0, 0x608}, {0x5, 0xffff, 0x5}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000300)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6346fd50dee16ff6f128646b4d1066696c74657236007711b65fddd848c17f8b31e2c95938d0cc3a1c07dd") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:24 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x48, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0xc}, 0xab}, @in6={0xa, 0x4e23, 0x1f, @loopback={0x0, 0x1}, 0x7}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r2, 0xff, 0x1, 0x80}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:24 executing program 4: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:24 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:24 executing program 5: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 347.847291] binder: 31049:31052 transaction failed 29189/-22, size 0-0 line 3010 [ 347.866476] binder: release 31050:31057 transaction 727 out, still active [ 347.866479] binder: undelivered TRANSACTION_COMPLETE 2018/05/11 08:07:25 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:25 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:25 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}}, 0x108) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r2 = getpid() syz_open_procfs(r2, &(0x7f0000000040)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x218}], 0x1000000000000113, 0x10000054) 2018/05/11 08:07:25 executing program 4: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) [ 347.866500] binder: send failed reply for transaction 727, target dead [ 347.896741] binder: release 31067:31069 transaction 729 out, still active [ 347.896745] binder: undelivered TRANSACTION_COMPLETE [ 347.896768] binder: send failed reply for transaction 729, target dead 2018/05/11 08:07:25 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = dup(r0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0xfffffffffffff2a7, 0x5, 0xf18c, 0x8, 0x4, 0x6, 0x100000000, 0x80000000, 0xd2, 0xffe}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r2, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:25 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3c, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 347.951648] binder: release 31073:31076 transaction 731 out, still active [ 347.959212] binder: undelivered TRANSACTION_COMPLETE [ 347.963684] binder: 31049:31080 transaction failed 29189/-22, size 0-0 line 3010 [ 347.983885] binder: 31085:31088 BC_ACQUIRE_DONE u000000002000c000 no match [ 347.983893] binder: 31085:31088 BC_INCREFS_DONE u000000002000c000 no match [ 347.983899] binder: 31085:31088 BC_ACQUIRE_DONE u000000002000c000 no match [ 348.013146] binder: send failed reply for transaction 731, target dead [ 348.020330] binder: undelivered TRANSACTION_ERROR: 29189 [ 348.025859] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:25 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r3, &(0x7f0000000080)=""/98, 0x62, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:25 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3c, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:25 executing program 6: r0 = socket(0x11, 0x3, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @multicast1}, &(0x7f0000000400)=0xc) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$llc(r0, &(0x7f0000000040)="f35ca619c4423cf0a5b855888377be2c5c0c470051a929c574f133cf4fd7a78c8a5efd1c7e4350e626db077b3c449974f15e1e8a5210d215971b5eeadd02902ae57032c993c509ec86bc9207d806c3cd486b91ba52c41b9b51bb522b3191b8578c", 0x61, 0x805, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") writev(r2, &(0x7f0000000780)=[{&(0x7f0000000300)="d843f6d71d6a5e9b170f52ad48ed348953a3a82d748e4b3ad8db03aca2f26d0bdd2b77ea2761859c6e0cc1f862fba2421327c29027f3b3726a82976e670a92861996effe95e66f60d900e290db3c4a8ec205ac56e65bebb6bfa98e6af8612f2ce699d9ec11472a6d54cae9c744df4f82adaa9ecffbb6172421a16b614df7c85421e850bcc13fe6ff52805acb2f6f5e6ebfd34d5154099b0b46cfedacb19724ad05e18cf9e5d4ad0a86352ecb45259560a56c30b5df885f126af874c50316e956f7a163ee905c65", 0xc7}, {&(0x7f00000000c0)="d29e1ab11b1d29c50352001625f81ebbc9b580a1ed7d5d46bb9ef714a06a53f7150847d279bfcddfc73e7c298a432a8915a45d06bab96f1756446f23e3118835f9f8d914d4c9183950357e476abc0fbc6dd1f50ddf3658ed272f8399781f83fe7f3f24d8ecbe56a113c81b89c44af707e48712731cd575f2132f", 0x7a}, {&(0x7f0000000480)="6eef61db6ba5c7c23cf1cbff25984e7cdafabeff6b83ce00d83b88f20806fd8994dd749c7af382888f8c8acaf172b4826a8515aa63ffaa8ff1038d5174beba62d0c48c2876b68417fbe247212208ef2dd13a0572ec696eb152e453281310c0e6a43ff36772dbfab48805e8807815fe4ad5aaab3766f7", 0x76}, {&(0x7f0000000500)="4da0b36c965c4d5aa38bb4564d8ca18912383765263792128c0a40ee1ed4c3bf427d7d92267bac6a6756730f1dbd1127bbb1bf9a3661574c9d23e1112371158fd2ca69f7a53b2faff9da1bd216a0035a2238fdbffd7c20769f1f5522a9ea57f89e26d9eb4ee850dd3248bea0e6534127d673fc61daadeb15a1502646ccc8abb5923e82723c64836d", 0x88}, {&(0x7f00000005c0)="dcb05f70c751ca4e2afd7fc7eee014f4d1d88cc348e5d603c90ff6fcb6b9db7611ce5118cbbc35628f2c9a357b8cd5ceb550a0269574f69b6ab642dc9a160806f4226b5c62a6313416b51304e6ae16432f0fbfe51d8eaa82fcdd11209dd59c311405547c45abfce0a758d56af61bd25bfe9cf6dcd35be3b4eb825a6526457442ff76212e3bf8d7d04e5d0b66570471c8ac55c2afda9852675920b6e2f9d1f88c5cc049ea04331eb03c51df77cfb605729c42fdca6ea94b69b7a12730472bfaa7aa1740eeb73a24336fd5285a1ab80f0b441446dba31a43782f9f23ec0d7cdc299a28c1c49b7216c7ebdc3d4ffe75d65003885566f4", 0xf5}, {&(0x7f00000006c0)="34b9b800d1c28b80f4473b4f149b2475601e4ab0b98e0db1df7ff254bc76810b3a658042eeebd2f19d2acad066d71daeef3d1a4475432175eb327f9f4626abf28e50b65b1dcff3ac59cd358fc5ff81324c3c7e7e5d655e60000dd8aa7ecf7e7ba7272ae4267b549d771e9bb586a8597f76812176609d78cf5b307f88237d1ee685d2af5fd2f48af846f7788f786463e76e7fddf50fe890cb8aed6375cbbd2dfb6521c31c", 0xa4}], 0x6) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) lstat(&(0x7f0000000040)='.\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) 2018/05/11 08:07:25 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:25 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000180)="86295e46ca6c49b6120100") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000080)=@rc, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:25 executing program 5: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:25 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) [ 348.778851] binder: release 31085:31088 transaction 734 out, still active [ 348.786081] binder: undelivered TRANSACTION_COMPLETE [ 348.791879] binder: send failed reply for transaction 734, target dead [ 348.802930] binder: 31106:31110 transaction failed 29189/-22, size 0-0 line 3010 2018/05/11 08:07:25 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00000000c0)) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000140)={0x3e, 0x4, 0x15, 0x4, 0x5, 0x2}) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000300)={0x0, @tick=0x80, 0xd2, {0x0, 0x6}, 0x6, 0x3, 0x4}) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:25 executing program 5: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:25 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) [ 348.820081] binder: 31116:31119 BC_ACQUIRE_DONE u000000002000c000 no match [ 348.820089] binder: 31116:31119 BC_INCREFS_DONE u000000002000c000 no match [ 348.820096] binder: 31116:31119 BC_ACQUIRE_DONE u000000002000c000 no match [ 348.864238] binder: 31106:31127 got transaction with unaligned buffers size, 2 2018/05/11 08:07:25 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x40030, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000003c1efc985936a18028a0598a615dd795000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:26 executing program 3: r0 = socket(0xd, 0x800, 0x1) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) [ 348.872275] binder: 31106:31127 transaction failed 29201/-22, size 0-0 line 3178 [ 348.888450] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.895227] binder: undelivered TRANSACTION_ERROR: 29189 [ 348.914186] binder: 31133:31134 transaction failed 29201/-28, size 4294967296-0 line 3133 2018/05/11 08:07:26 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x8000000000000175, 0x4) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:26 executing program 6: r0 = socket(0x11, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) ioctl$TTUNGETFILTER(r3, 0x801054db, &(0x7f0000000080)=""/121) [ 348.926224] binder: 31133:31141 transaction failed 29201/-28, size 4294967296-0 line 3133 [ 348.945704] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.953326] binder: undelivered TRANSACTION_ERROR: 29201 [ 349.614120] binder: release 31116:31119 transaction 737 out, still active [ 349.622174] binder: undelivered TRANSACTION_COMPLETE [ 349.627658] binder: send failed reply for transaction 737, target dead 2018/05/11 08:07:26 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:26 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = gettid() ptrace$poke(0x4, r1, &(0x7f0000000000), 0x9) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:26 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xbb5c}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x8, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xe93}]}, &(0x7f0000000140)=0x10) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:26 executing program 5: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:26 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0xffffffffffffff4f, &(0x7f0000000340), 0x0, 0x0, 0xc4, 0xfffffffffffffffc}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:26 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:26 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r3, &(0x7f0000000080)=""/98, 0x62, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2018/05/11 08:07:26 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x3c, 0x0, &(0x7f0000000100)=[@acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 349.734606] binder: 31167:31171 transaction failed 29189/-22, size 0-0 line 3010 [ 349.743380] binder: 31166:31174 BC_ACQUIRE_DONE u000000002000c000 no match [ 349.743388] binder: 31166:31174 BC_INCREFS_DONE u000000002000c000 no match [ 349.743395] binder: 31166:31174 BC_ACQUIRE_DONE u000000002000c000 no match [ 349.799288] binder: 31167:31188 got transaction with unaligned buffers size, 2 [ 349.807411] binder: 31167:31188 transaction failed 29201/-22, size 0-0 line 3178 [ 349.819698] binder: undelivered TRANSACTION_ERROR: 29201 [ 349.826462] binder: undelivered TRANSACTION_ERROR: 29189 [ 350.534783] binder: release 31166:31174 transaction 743 out, still active [ 350.542022] binder: undelivered TRANSACTION_COMPLETE [ 350.547145] binder: send failed reply for transaction 743, target dead 2018/05/11 08:07:27 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:27 executing program 5: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:27 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:27 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000000140)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/166, 0xa6}, {&(0x7f0000000280)=""/180, 0xb4}], 0x4, &(0x7f0000001740)=""/4096, 0x1000, 0x1000}, 0x20) 2018/05/11 08:07:27 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xbb}, 0x9, 0x0, 0x0, 0x2, 0x1, 0x6, 0x6d}, 0x20) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:27 executing program 6: r0 = socket(0x8, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f00000014c0)={0x0, {{0xa, 0x4e24, 0x1, @loopback={0x0, 0x1}, 0x2}}, {{0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}}, 0x108) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x208102, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x30, 0x4, 0x68e}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000480)=ANY=[@ANYRES32=r4, @ANYBLOB="0010000057bb30cff395d0ecf15261ab99b64595dd6bef60d61c003e4a524ed42a35ab6c897a2787f01923417a7fb71dac9a9438cf86f626e3dd61a301b8a28e2ce5398927a0bed8698b5deab410d9199805f6206183180759794759649fc8a15db4801ea09878932ce1f87036725a12e9a71d500bdf41b38c6f80985099743d2f6517da010b28c66cbce17fc70f1232d7a7f0fb25d2b3648b0eefae995ff0f2dfff6f32710f7cfad32f0529c0f3dbd43226e795dca5f82c74382011351b1b6d9a63caed614e8f642061c8c7bfffd240d12c0c8ab3ce0a2326e4265d9ea720a73ad0a21f1fee86f1a49857d88f56ed96883cff5b435711578993c337b18354e6d998eefa3b3e4b082ba18b75428e4a1e0a6e2980aee2b477c76c244951543acf2a77ac547d6d367a4e3992ccfc784eb4f6ed527135b14326781426690750fa51a628c33a489993f4242c08193f58d013677c46d9e79c95b7b279a95469abbf0d04c8bc1c9a7f5abee76a88a0d0697aa04163e6f7d35fdb3cf5be81dfd6ecc4d5f03e7dd24ea4665ecb456c051d2d89079741bd029367d871268d01490d77ef7601c8c248198582156bf6bb5452074dcf4aa2864f9bf9f749ac68c15d3f59aee3ce95244afb67973feb48ed476fab5ea34726665f3fd7b8c3ef3934a935bc1ec130fb8f53be2412ddc3c0e261d82f67d566b4b2a3ea3a42c3a111e1c9a82a23923b2f2ed362d2a180a735f1c1a42fe19d6c51b61b14b42c2c32ad3adf55f50fc0cf775305df783b620e5f0b4936ac528cf3eb303c796e04f527a7f96a3eecda60ce2bb555e5151c3c34291d503e78a771c841c689b5f694b5f677f2787dd98f8fde15379e94186c894c82659aa6cb5758c4495e99878adf31dae8a9d3f31e3da4d6edd06f71fae7cc561800fc5f8d09707085774d5945ca493c2ce96ebdbfbcb5edd1cbe5a2523f41fd8378b659e791877cf8e823cc318cdb8eb25020f31aa8ab83cac027e7148d232ba4d9f7cf996b978bebe52f293d1b24af6ce13de1e4e98e085f01676a689d247fd1b8fbb848eef66921f7b52671889eebb26f7cc0c82246d5d6e724b2673415f2a63aa1bd83ff55b923c50a795aff16b8c74627dcbf9d7b00363e176aa3184d8efb74f9df2736e1ecdb0206d3ea9b624635bdaaf156548d5c960b502aff5fa98e7e7f89c02b82629dce87f9adf66ca6cff761cfd3925f800ab73b01c700fec05682ed3407c7f79afd0795e581489033f571cbb7efe19a81d0719ddc06bd042e6b6db4a54b41d33492285e0621b5205fe07c82084c5adfb09933bfc0e6ec39ef76444629c68dd3233233aab3813809f2bba6d8e16219f59550381483a326f07445175321896dbaea0f6ac29486c35182e2ac84afe3946e5bd609be34d48f9ce76a1c71fe6b6aec80d0c66195ce42d9c4b2811ac673a8bff0be2b69103aa887f495a606c1830e986ce95b25831eaab1e07eb30479fb6b67ceeade6dc072119aeb5ea60fb6d23b63e4a266957eee22670887c2a4aab5fde867dc7c2fc02be6c75e22299695da582cba410f39f58a6cc301ba6f4827b3e3bebe92cba2e9cc4f7714dbc1b905feb52fcbd2c0d24fb5f42d306d9061422a1787c612500d755ebdab9e9301bb0263416d8e6d00ad174a0bb32bd564d7f39225a2a15f487d441b3df15589fdccc080f3cba8f160bc74b67ba2306768bdc302561cb13869d23ecbedc1567421407facb972b9dfaed29b0d8358cb5ceeea4640c71291d8e0da348f6d8fa89be3a9e33ded04dfe14d5617799fd9d813548a2ebe2720d9519bab04e70e84d7482b3774ad05303be8a64f3642c78316a7e6c6f9dc2cb91b37aa820c97abcddc8557abd3136603f3bad00e97fd8d35495740e3f19abbca6c44a3ce00e68c47e6d940bd5df2a4f35188d3315532b485b31192a5575efc9f01912933ec5cbf82b5a8f41106abb33878e157d61b44cb6530dc22e895c59c31300110d73df3cd41bb2be289406960f874a21457e15ff91ff1d350abac58b7cfc9257851d716aab441aa55ed971e14883f70e6412a3b88e4c14deacca053e074d65f2d618375b53bf8b2549dc48bf9f01ab9ce4f53865b21b6c740d82f60473a422b7c8ad95912b1c3381194368813fba4b937e6fbe9b0cd6f241debf53d1c9e9e12a00e3d04b38f501d5a7d51bc914a520cfb4f2d3cf100407d210c998da29b8074fc2af25c323bc92dfa0750679717c986f93e09cfe92db08909078f6782c2d9fc7804e3279974a065c93e4f5c863c9a32a6389d43c051fa68f3063106b194b27cf2e46cfdbaa81b5918532966f668885db6ac52960da00069ac6e0c71128123564f17492cdeb7c4d6ebd8bbd12981d397978fc6605ad5c97dd08c3f3d51c8d5f0d1d582c72758421b6ae58504847211d85f6edc44daac6fb1f37da17adcd31a0b12d00d7ab29cc08206efcb5683ab4696327d1778a2e5a8891396c7db13c0026ac643ad1031fab4b782423b71cdd6a842d893d5e40d3d87270f04265b2ab45bec377b0239db05566df1de6ce909c58ffece14c4b8a6e4f6b8da1d7fa7d94382bcdf3a1a1bfe487561bea0b852ff5c7a2f46983875b5fe98b8184147177928f0a9602dcd775f91c89432ed447d6c61a327538f7e82007288f4f0f8fd767c5f8e36deab20abc89799259f68b43636ed7d59cb28263381d04f01201130561f129f33e0c343fd64ea25571480827375053bf465e615d762280e04badd72779b95c57765987653a741af093b2e7fe431a350a8222708364dda69d4c0c24381a486033a0c4bcb9bc78f5464c2f92854b355b572e22e15d9dfe278e26a9cb56787b4ad576e6f70e4ba5d118a13540028d3876217c2a7a3a73023ce04632f9bf34196fb2094b0aa80994ee8dc15a7233be36a25412e62b68a1e9c52413a92324c5edf24bd5f528979f39e964a569ea97997f3fc500c32c1763cb510b539ee01008d4187f7b91ff14a267836a94d4ec95a131ee127905b177d44ceb6e67f282b611b0b74433590933211518fe37141b48fc0cf6c8a850be812ab0815bb3139f557d2b7627983bd85596f4bfe4a097179c76ee9989871e9932d2b15732f5ea4e705364e02b4f9480daf4c038ed7430939f9b335c86cb002dc36a5a1a9a30f6c343079e31f438d8e24c2df68348128ea283ae92de3bae65ee2d93cc7f900d3cf6b3bd5d7ab048a2b5af390a3b864bb266ddee85b4b45e735cfcbba83dbe216529252f0a97834ed456fcbff723e39e9e8341f65526f5a8f70f5842c08ffdb59b721ff0efe7637123cdc6827de1f583106e8b5f8a576563a77ca2c5f9c28aae11d7abc399a5ec394b943f371f06d93f87460ced63584608a8e04fe87ad9f46ae73a9f40f6e0a19a29295f3839b3ca8c5ec123426ab094258f9493916080a6900f1e98dd2438c4bc4a026e65a2169d35bea8cf4b34ce6a812bb333a570703168b5088f3ef5e92f8c63f60f2bef4a9a51da3215467d975564378ca0e21d4f77ecf407fb658426ca617d0aea4ce3fc7490bc4a36b1ef63ceb6cb3c1a5922e6a55935840484c8860c37d2a5b47c3621f0e815542e04111cc11eb9f02bd1c9fa773412e9d0874aed2b1de5d89770c6a8c16109637c3f541519a5bf57cbca56846fffc2d69d8a6698d7ba65a0cbc14816dc2d4820bd554c47159652715bb4a9fc18af5e66e7069a6fde4c6aa5b858970263bfee2454e449cb2206b376073173ff5d0c29467a165d2561810350f9e4d708ab5edd1af8d5f35b0397b591db38fd5dc773af73970144b686995e2733cd8ac526008aa6b8080cf94987e8516639b6bd6a2c15ceb1a353b43a0c803055ab28eb1506455ab9c11d1852254ddbca4c175da29cd48043c5fdb1dabe7d7aadc5fb1b769c084cf4086c5ccf1b1ffe35aace3faf882001b75238070c0a9f10d30f0917973c60c1fae31e521d1ac1057875d36917eb2695b792e44c5c559f94e4fc0aa77eb7c7b27503e3c1a82b4ba942e19b50d9c8244c6b0a71584de2880b85b25daea6ee924685205892373d9893348830d82409140bee1ad00c8fb84c01ba65f03047cb062c457cbb5ebe41a9675160865523d8e913436f7bcd19f66da0260e55579dfb8f6b4cdf4d42ce68906ba3ba74d4be46c0fd1be8cd56cc27557c14492ae2e0d7d23ac31158aa2a2e0600ed2d80057347e8266a51bdf932851c179885408fecf17212bc150ba9cce2fcd028d0852d560c40d4abb0a1cea28b5ead03f40fd1d9f15df7d2be8691e76a43011c1e46a1ab85ba912a28412109091d8e53e7b16b655e30ff5cfc20a29827bdc2c6538f4a705c44fff0f0dc4dee7110d02167b06dcaf21d3bdc253a49a093d24077024b829472bfc328092aae23253625e626de0ff186026b0e5a6e401f092ea254b8a8f2f7dc62a6db5db664da09e35d0f6aaa31b0395d420fff37911b49a877e3746077646ab4d6b38059e67c942a30d8280957b63d3c5542a7749572d95e297a8c82c55750c22cf5a368150d34095c2cebc140f206778e52682fd2ed2ea8b130ce4533923f3eb9416d7136f684d3ce59843ff3c5616c4d0aa41cd00fe5fb23590c749d9c0637ec39194a6d2ad043e6b50fd9208c331749ba9f0ba556681d29e60151c7558964f50917650d2b459186ce96d37ca2362c62a937118aa8e16a83b81a952b878b2ce292b0a05aaf1868037dff4ea450b5a6feb11e192e733c5cdb2c48b5530a9f726101d9e704f81e0e8016721db22e9ccfb3db8455f9c943137bc0b4667d982197b9bd36516a4aae29f1b16dc0303f68ae6d99f9afd38fab0f6bc2d2d3c21cd6cf14d4f43b93f6bade9d63ee1bef2f3c2d29ea97520201b83d6d127388d31fea89a75fc40fc287fad4d3ebc83b39a3e997575d4e359f5295c74dd46dc3e54a160255a92274bf8b39306317210e9d0e986b8425fccc3f889fec352eefd963ccae74afac867136c66d962121ae5402891b7174cb765c18c5bb3be7a129d497674d20332287f5d7dcabd4317300f432af27c4380661c19f3b31467eb45eac56c48a6c96b46720440fc5090308f8aa721cf9add9079e5a6d4d9be880e3f31c94a0a19a52af52dccbb9c1d960df2c2a9f446897452f886bde7f4b1f1a9e6d13c947d93de9dc1cb56f02e6c17753721fcbcbd910e4a5ddd8e981f870f05530b8308c74589f5e66378e44907b30c373409eb43a12ab4a0f4dec27d8fb459faf70b051eeff45331545752747ee2393e0737a69224587f1ce041edba69d398c84cb2306169072a503b31f9945f2d6b88e9f742ea7680254d0c38ff933b113d7879872f7b36f1f148fd338d3a2c0c46d38379f910903c757111be400149700bdb463bb635b386718238b694cdf1758d3626ad69ddedb729b525ae306855d050fc8448671dde105a58798b8141f0fa002e4426041039ea74ad137202a0af8520f8d86368854e5d6f2420b854d8182ad80bd13a8c7b7eb54e1ab083323c6ebcf6220f37028b95da06c9495971400d1edb171d9c5ff744be710ed976e506d6a8991f89da756f8bbb39556388801ea0beeef93d508e6337319bd6794aacaa17b977988c64b3e369b2475211435fa365901c7bd619f4d2192cad9990f0ec84ab3bed7fa5e1babf0dc02ce43285eccf5a85ea74cc50a9ba4742a6c44d732baa8a1b5a98c50ac5aedbc4d069064ba3ac7c12501f366b7af14ed59a66681e4f1111fd337e61b577a1aa0538b56e393eee4f872d8e8ee17a50aa285b55db2ee0f142cfbb69757b4fca03474a50001d61c36e8742"], &(0x7f00000000c0)=0x1008) 2018/05/11 08:07:27 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r3, &(0x7f0000000080)=""/98, 0x62, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2018/05/11 08:07:27 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:27 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:27 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 350.748155] binder: 31196:31197 got new transaction with bad transaction stack, transaction 746 has target 31196:0 [ 350.767071] binder: 31202:31207 got transaction with unaligned buffers size, 2 [ 350.778684] binder: 31202:31207 transaction failed 29201/-22, size 0-0 line 3178 [ 350.786336] binder: 31196:31197 transaction failed 29201/-71, size 24-16 line 3037 2018/05/11 08:07:27 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:27 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000080)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x2}], &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 350.799736] binder: release 31196:31197 transaction 746 out, still active [ 350.799755] binder: send failed reply for transaction 746, target dead [ 350.831000] binder: 31218:31221 got new transaction with bad transaction stack, transaction 750 has target 31218:0 [ 350.831011] binder: 31218:31221 transaction failed 29201/-71, size 24-16 line 3037 [ 350.843884] binder: release 31218:31221 transaction 750 out, still active [ 350.843932] binder: send failed reply for transaction 750, target dead [ 350.871813] binder: 31225:31227 got new transaction with bad transaction stack, transaction 753 has target 31225:0 [ 350.871823] binder: 31225:31227 transaction failed 29201/-71, size 24-16 line 3037 [ 350.876315] binder: release 31225:31227 transaction 753 out, still active [ 350.876333] binder: send failed reply for transaction 753, target dead [ 350.917414] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/11 08:07:28 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:28 executing program 5: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:28 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") ioctl(r0, 0xc26, &(0x7f0000000140)="76eeb76b9688b0b6ee78ef801e589b") r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) accept$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:28 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:28 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000010000000000e6ca74f200002c960000002000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:28 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:28 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0xc668, 0x2) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:28 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r3, &(0x7f0000000080)=""/98, 0x62, 0x0) socket$nl_route(0x10, 0x3, 0x0) [ 351.792917] binder: 31245:31248 got new transaction with bad transaction stack, transaction 756 has target 31245:0 [ 351.805794] binder: 31247:31249 transaction failed 29201/-28, size 35184372127276-0 line 3133 [ 351.825872] binder: 31245:31248 transaction failed 29201/-71, size 0-16 line 3037 2018/05/11 08:07:28 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:28 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:28 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)) getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:28 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x18, 0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:28 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f00000000c0)) ioctl$SG_SET_COMMAND_Q(r2, 0x2271, &(0x7f0000000080)=0x1) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000000)) [ 351.837010] binder: 31247:31261 transaction failed 29201/-28, size 35184372127276-0 line 3133 [ 351.858133] binder: release 31245:31248 transaction 756 out, still active [ 351.865891] binder: send failed reply for transaction 756, target dead [ 351.883069] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/11 08:07:29 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=[0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 351.885332] binder: 31267:31270 transaction failed 29189/-22, size 0-0 line 3010 [ 351.888023] binder: 31266:31271 got new transaction with bad transaction stack, transaction 762 has target 31266:0 [ 351.888033] binder: 31266:31271 transaction failed 29201/-71, size 0-16 line 3037 [ 351.893902] binder: 31267:31272 got transaction with unaligned buffers size, 2 [ 351.893924] binder: 31267:31272 transaction failed 29201/-22, size 0-0 line 3178 [ 351.914698] binder: BINDER_SET_CONTEXT_MGR already set [ 351.914707] binder: 31273:31275 ioctl 40046207 0 returned -16 [ 351.915119] binder_alloc: 31266: binder_alloc_buf, no vma [ 351.915137] binder: 31273:31275 transaction failed 29189/-3, size 0-0 line 3133 [ 351.978199] binder: undelivered TRANSACTION_ERROR: 29201 [ 351.984359] binder: undelivered TRANSACTION_ERROR: 29189 [ 351.989865] binder: release 31266:31271 transaction 762 out, still active [ 351.997200] binder: send failed reply for transaction 762, target dead [ 352.003981] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/11 08:07:29 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0xfffffffffffffe16, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:29 executing program 0: socket(0x11, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:29 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=[0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:29 executing program 3: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r0 = socket$inet6(0xa, 0xe, 0xfffffffffffffffd) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x101, 0x6, [0x59, 0x7fffffff, 0x1f, 0x3, 0x7, 0x5554]}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x9, 0x8008, 0x3, 0x100000001, r1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x4e23, @broadcast=0xffffffff}}) sendto$inet6(r0, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x3e9) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) bind$ipx(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x100000000, 0x4, "ae4e2cc3d968", 0xfffffffffffffffc}, 0x10) 2018/05/11 08:07:29 executing program 6: r0 = socket(0x10, 0x4, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}, 0x1, 0x4, 0x80000001, 0x3f}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x800}, &(0x7f0000000140)=0x8) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 2018/05/11 08:07:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:29 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r3, &(0x7f0000000080)=""/98, 0x62, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:29 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)) getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:29 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x4) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x4000)=nil, 0x4000, 0x4, 0x50, r0, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x200000000000002) setrlimit(0x7, &(0x7f0000000000)={0x3, 0xffffffffffff4ec1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840000059080000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:29 executing program 0: socket(0x11, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:29 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in=@dev, @in=@local}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) [ 352.808903] binder: 31297:31299 got new transaction with bad transaction stack, transaction 767 has target 31297:0 [ 352.836897] binder: 31297:31299 transaction failed 29201/-71, size 0-8 line 3037 2018/05/11 08:07:29 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)) getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:29 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=[0x78]}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:30 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20, 0x7, 0x3f}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e20, 0x20, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}, 0x3, 0x0, 0xe9, 0x4, 0x7fffffff}, &(0x7f0000000080)=0x98) 2018/05/11 08:07:30 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x88, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @acquire_done={0x40106309, r2, 0x2}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 352.868652] binder: 31315:31318 got transaction to invalid handle [ 352.875383] binder: 31315:31318 transaction failed 29201/-22, size 0-0 line 3010 [ 352.879862] binder: release 31297:31299 transaction 767 out, still active [ 352.879880] binder: send failed reply for transaction 767, target dead 2018/05/11 08:07:30 executing program 0: socket(0x11, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:30 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x74, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @increfs_done={0x40106308, r2, 0x1}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:30 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x60, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @acquire_done={0x40106309, r2, 0x1}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) [ 352.889472] binder: 31320:31321 got new transaction with bad transaction stack, transaction 771 has target 31320:0 [ 352.889482] binder: 31320:31321 transaction failed 29201/-71, size 0-8 line 3037 [ 352.900972] binder: release 31320:31321 transaction 771 out, still active [ 352.900991] binder: send failed reply for transaction 771, target dead 2018/05/11 08:07:30 executing program 3: r0 = socket(0x11, 0x3, 0x0) accept4(r0, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000100)=0x80, 0x80800) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) r2 = dup(r0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) dup2(r0, r1) [ 352.918338] binder: 31327:31328 got new transaction with bad transaction stack, transaction 774 has target 31327:0 [ 352.918349] binder: 31327:31328 transaction failed 29201/-71, size 0-0 line 3037 [ 352.924617] binder: release 31327:31328 transaction 774 out, still active [ 352.924637] binder: send failed reply for transaction 774, target dead [ 352.947878] binder: 31333:31334 got new transaction with bad transaction stack, transaction 777 has target 31333:0 [ 352.947889] binder: 31333:31334 transaction failed 29201/-71, size 0-0 line 3037 [ 352.954150] binder: release 31333:31334 transaction 777 out, still active [ 352.954167] binder: send failed reply for transaction 777, target dead [ 352.966377] binder: 31336:31337 got new transaction with bad transaction stack, transaction 780 has target 31336:0 [ 352.966387] binder: 31336:31337 transaction failed 29201/-71, size 0-0 line 3037 [ 352.989627] binder: release 31336:31337 transaction 780 out, still active [ 352.989648] binder: send failed reply for transaction 780, target dead [ 353.099978] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/11 08:07:30 executing program 6: r0 = socket(0x3, 0x3, 0x8) epoll_create1(0x80000) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:30 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:30 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x63, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf438968235850be898f04a83d994a798a62806721a4a16a9f37df"}) 2018/05/11 08:07:30 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:30 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2d, 'rdma', 0x20}, {0x0, 'io', 0x20}, {0x0, 'io', 0x20}]}, 0xe) 2018/05/11 08:07:30 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:30 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r3, &(0x7f0000000080)=""/98, 0x62, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:30 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:30 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:30 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f00000001c0)}) 2018/05/11 08:07:30 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 353.807514] binder: 31358:31372 transaction failed 29189/-22, size 0-0 line 3010 [ 353.812196] binder: 31363:31369 got new transaction with bad transaction stack, transaction 784 has target 31363:0 2018/05/11 08:07:30 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:30 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:30 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) sched_getparam(r2, &(0x7f0000000040)) sendmmsg$nfc_llcp(r0, &(0x7f0000000a80)=[{&(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x1, 0x400, "2dac5c1cc9ea7a8a26fe98c709b2804c5a79461daf2766418a1b919ba22dad2daf26cb362763061f3e792fd28baababd3ec0c97721ef603c8778f8e789d8f0", 0xb}, 0x60, &(0x7f0000000140)=[{&(0x7f0000000300)="d10164f97b6b6bbdd5378e3fde728828e361f96720de6b042b033268c681bc2e2afe508b2bc3e4844068a7ec2bdefbdaf9bc111f982ff2bce45bbd38127b4fcd9381912603eb57a80ca6f60f1709ae838a3a25f50499c5f2dc733daef49ac2dc56588167313606e23e9436031e6f1d248a4c05d8e1610a1efc395807a893011f463c26aab9f33391f430ee1b9ea02f40b147a8b7d83cb41cf8990f71619e92ec73c4eef27141b8013d396c094ff8a8be59850c2a18fe03db5f7df04644babc95ad7a30821f43570aae05a154f1e1d9bfc75008d6f9c6e5dee3ad08e8cefc8e3e", 0xe0}, {&(0x7f0000000480)="dfd8646a600e04bd6ef573b1cdecc14568ed8d1e79ad077afb7f7f688b5b66a991ef427d81b3b8faf3deec0b9f96b44a97ebce3eaa896a2ddceff74438d35178b88267d17b41af2cc01a7d97ea9bf6946cab34d70471cf57d41fabbd5f3a1d720cac211a513eca8242fe274824f5dcb1ce1ca07ef1d4cdd5091ace3da5c62bf13ca19d9a3d86c35fe48d7d4ca35106c5122fcbb033868b653d23fc2a619b5ae8645bee9a83c5d5fb4adf37d98b6edb8792fefacb6d9d11af00496ba37a8d972e1ef38c4a923a54405480b56fdeaa4af8b81773ab86e87264cef621b3d3efe01e4cfaff9ff305109f7ad93816e4c39c5a", 0xf0}, {&(0x7f0000000580)="76098989d8071ce7dc2930fa9edbf35dbfd69ad2b3138dfb3d62b4a85eb467e880d198238c56a1d01482546480fcdc4898cd5c838ed15c17f047bde88175fd30d26eccae5f1516bdc96696c5944d11a19e4f8b0502b04a8b175d85c3efe2135aaf14ff2b687a63e87d83b628142566f756ee94433199cff50f0cf9e7b31559968512ebfbb867af0bba6628f5f641aa4a880c3bc60c5b15e78c5666882724585d7f099e698af5c7ab0e397acd4f57503ef3af3574ef33516801f8055a576c07fd8a", 0xc1}], 0x3, &(0x7f0000000680)={0xb8, 0x114, 0x6, "1fef6dad95e951737a4308bf17531a2604c7bd24238d513d6eae92ef491b784c3503cc60ea4d798dc57da968ec653fd85e3ce6f72e5c09beef3e68a6236c3a352bffc304b6b5a99a7dbac722bb880b6ae2414792cc9973f3936bc285ef9ad04e276c4da6d82938d3d65df860f1c9bd41aeea8c27f5469ca8bc007f18a1d2acdc6a62b1f71c7329787ab40169089fa3255e169d230b68842d6fb30b991888a59b57b3cfbb78c50f"}, 0xb8, 0x10}, {&(0x7f0000000740)={0x27, 0x0, 0x1, 0x7, 0xffffffff7fffffff, 0x1000, "1759fddd3f8d2d79893295a6f4e84b0c2bc52ab700e0a7c02ffb4a4e954a104442f8d47061bb038516f82104cbc353fd25613222cc64192818dc1f22eb6391", 0x2}, 0x60, &(0x7f0000000a00)=[{&(0x7f00000007c0)="13db2640504c228d54f8e052f6045ec1becad800cd931f6c96bec953fa15fc2b9b8000192abbcd6417c6da3347a141e5c9e0ce93eb8948ddfcf8a811b292c1ff812346ac2dba108e5e029802115f", 0x4e}, {&(0x7f0000000400)="162bae47d4c0433b5f797b991f25641a84b021453a2bef81a49cac21cc3787", 0x1f}, {&(0x7f0000000840)}, {&(0x7f0000000880)="b85b7b5850b7b76f79c55e736e26fcb35081d0e94531d09dc43a09fbe3e10256e1834107d67a3c4dfa0b1bb73b495e33af5a89a78558eeaff1734ac4acc273532b6e1b4409961b84e9d68e74d60ae0b424b90d690f03ae1f922a512fcbc8143898573e746269b188199a143b56d52e27b2c9f8328ec8f820e896c8b35973ab3b529e9ab963091f48e63726fa9e3b04d8d7899a6f4cc2cd7572c47a09125a4fa232", 0xa1}, {&(0x7f0000000940)="34aee4bb8108774f61decb5c3362f6953e2da6108b18aa4b54efdbd0f4ef4d7c23cf5c1c20329f4e9ecbc62048ef261fe6a364a317987f6027ab51f49d89b4ecd263a8850760bf3582c770539a5cd9c30a5eb3abae7e657f0fb19411759eefa21754c17cfb", 0x65}, {&(0x7f00000009c0)="c465e42f532ae0", 0x7}], 0x6, 0x0, 0x0, 0x20000000}], 0x2, 0x8000) r3 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:30 executing program 0: r0 = socket(0x0, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:31 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f00000001c0)}) [ 353.812207] binder: 31363:31369 transaction failed 29201/-71, size 0-0 line 3037 [ 353.837049] binder: release 31363:31369 transaction 784 out, still active [ 353.837068] binder: send failed reply for transaction 784, target dead [ 353.879332] binder: 31381:31383 got new transaction with bad transaction stack, transaction 787 has target 31381:0 2018/05/11 08:07:31 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x0, 0x0, &(0x7f00000001c0)}) 2018/05/11 08:07:31 executing program 0: r0 = socket(0x0, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:31 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x44800, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000500289c672842169c3f00000000b7448f2587277f69dab6393aea2677e64f9e09476037b32e91816593095c405fc805324db4e6c0178f85b83a474b1bfe00c78952900df2a3d51f4540096e7072b39f25422c51eea7675a2cab23d2d16d5ef2e08116bac785ae2d07c41088e9a405b544d0dfd8b33d1b186b7efd309e3576c58d28e70000c9e3ad2796afd2cbc88c8c26af1ce4344276e8c10e6e64cf9ed70273eedbeb9016e41c9bde294852424043c8f9cfd64435cb8f90ea89c4734a80b60a2eee25838f9dcd181319"], &(0x7f0000000100)=0x6) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r2 = socket$inet6(0xa, 0x805, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r2, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:31 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x32, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e4702257"}) [ 353.879362] binder: 31381:31383 transaction failed 29201/-71, size 0-0 line 3037 [ 353.890713] binder: release 31381:31383 transaction 787 out, still active [ 353.890717] binder: undelivered TRANSACTION_COMPLETE [ 353.890723] binder: undelivered TRANSACTION_ERROR: 29201 [ 353.890740] binder: send failed reply for transaction 787, target dead [ 353.919061] binder: 31394:31396 got new transaction with bad transaction stack, transaction 790 has target 31394:0 [ 353.919072] binder: 31394:31396 transaction failed 29201/-71, size 0-0 line 3037 [ 353.923653] binder: release 31394:31396 transaction 790 out, still active [ 353.923657] binder: undelivered TRANSACTION_COMPLETE [ 353.923663] binder: undelivered TRANSACTION_ERROR: 29201 [ 353.923679] binder: send failed reply for transaction 790, target dead [ 353.953352] binder: 31397:31399 got new transaction with bad transaction stack, transaction 793 has target 31397:0 [ 353.953362] binder: 31397:31399 transaction failed 29201/-71, size 0-0 line 3037 [ 353.958802] binder: release 31397:31399 transaction 793 out, still active [ 353.958806] binder: undelivered TRANSACTION_COMPLETE [ 353.958814] binder: undelivered TRANSACTION_ERROR: 29201 [ 353.958829] binder: send failed reply for transaction 793, target dead [ 353.990156] binder: 31409:31410 got new transaction with bad transaction stack, transaction 796 has target 31409:0 [ 353.990167] binder: 31409:31410 transaction failed 29201/-71, size 0-0 line 3037 [ 354.001432] binder: release 31409:31410 transaction 796 out, still active [ 354.001436] binder: undelivered TRANSACTION_COMPLETE [ 354.001443] binder: undelivered TRANSACTION_ERROR: 29201 [ 354.001459] binder: send failed reply for transaction 796, target dead [ 354.131925] binder: 31358:31422 transaction failed 29189/-22, size 0-0 line 3010 [ 354.144588] binder: undelivered TRANSACTION_ERROR: 29189 [ 354.150079] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:31 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0xd907, &(0x7f00000000c0)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x22, 0xb4f4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x178, 0x3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$VT_WAITACTIVE(r2, 0x5607) 2018/05/11 08:07:31 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="13634840000000020000000000000000000000000000000000ffffffffe100000000008c00000000000000000000000000000000e0932e9ee84efbcc3c133fbec6a195d796b7cd8d117c02526768efad63513c859e160546a8d8b0ee148abf17c33150aaa9bf500e0a62633813a5ceab45070698511d47ffac22ada8e1cfc6dc4cf6f94d5662440d473a4a84caffb96fa4c89386c79498", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:31 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r3, &(0x7f0000000080)=""/98, 0x62, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:31 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:31 executing program 6: r0 = socket(0x11, 0x3, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x240540, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0x9, 0x8, 0x1}) ioctl(r0, 0x7, &(0x7f0000000300)="c63686a5c0292346ca6c49") openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pktcdvd/control\x00', 0x1, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x4000, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffffe}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, 0x10000000000}}}, 0xd46d0b55605bf200) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:31 executing program 0: r0 = socket(0x0, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:31 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x32, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e4702257"}) 2018/05/11 08:07:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000100)={0x2, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e24, 0x2, 'wlc\x00', 0x20, 0x51, 0x3}, 0x2c) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000bd17148db9fba9d7801962ba41fd0c495db1a6a42d077a93b9266dc481b38c7c4e48231123d624c6c7f89763e01ba9d65b8dbf5c85890e006d4bc86004877430d663181704163d7fa0ba1cb65fc5a1807fba04268e75934951f522a8f365b8bc9f7c58407f22843e00dbb81fd8c5f98a51f724bd679ca3b6b3483ca68debc0137a1a69ecca0aef24461bd2af58a56772fc8f64fb96aa922007f0e7bdda092a11b5f989161d64aa0fa15f8d79123620a90099"], 0x0, 0x0, &(0x7f00000003c0)}) [ 354.798011] binder: 31431:31438 got new transaction with bad transaction stack, transaction 800 has target 31431:0 [ 354.802327] binder: 31436:31444 unknown command 1078485779 [ 354.802334] binder: 31436:31444 ioctl c0306201 20000400 returned -22 [ 354.848345] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20004 wlc [ 354.849023] binder: 31431:31438 transaction failed 29201/-71, size 0-0 line 3037 [ 354.853446] binder: release 31431:31438 transaction 800 out, still active [ 354.853449] binder: undelivered TRANSACTION_COMPLETE [ 354.853454] binder: undelivered TRANSACTION_ERROR: 29201 [ 354.853466] binder: send failed reply for transaction 800, target dead [ 354.891091] binder: 31453:31460 transaction failed 29189/-22, size 0-0 line 3010 [ 354.899063] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20004 wlc [ 354.907186] binder: 31453:31462 transaction failed 29189/-22, size 0-0 line 3010 [ 354.919214] binder: undelivered TRANSACTION_ERROR: 29189 [ 354.925411] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:32 executing program 0: r0 = socket(0x11, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:32 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="c6295eff030000b612ec6f374590027ac6aa8c0b5a763e21a9f78e91cecbe4618fc2e0eb928bbcef7195373af8cdf678fbc000c695acd687cbe02d7f1f317dbfeb3c3f97f378551fdedbd81a637b3ad1e213e62a7cd142254e926b4047b7ede7cfc2dd323351162f7391a539c1b63d8cc8a03fb70f683a3a650268041be8b9142ccf4e") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f00000001c0)="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", 0xffffffffffffffd2, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x3f}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/05/11 08:07:32 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:32 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:32 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x32, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e4702257"}) 2018/05/11 08:07:32 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={r2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:32 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/98, 0x62, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:32 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x4b, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bcbf4389"}) 2018/05/11 08:07:32 executing program 0: r0 = socket(0x11, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:32 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:32 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:32 executing program 0: r0 = socket(0x11, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:32 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x33, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789"}) [ 355.812716] binder: 31479:31481 transaction failed 29189/-22, size 0-0 line 3010 [ 355.813092] binder: 31477:31480 got new transaction with bad transaction stack, transaction 806 has target 31477:0 [ 355.813099] binder: 31477:31480 transaction failed 29201/-71, size 0-0 line 3037 [ 355.819571] binder: release 31477:31480 transaction 806 out, still active [ 355.819574] binder: undelivered TRANSACTION_COMPLETE [ 355.819579] binder: undelivered TRANSACTION_ERROR: 29201 [ 355.819590] binder: send failed reply for transaction 806, target dead [ 355.845643] binder: 31493:31495 got new transaction with bad transaction stack, transaction 809 has target 31493:0 [ 355.845650] binder: 31493:31495 transaction failed 29201/-71, size 0-0 line 3037 [ 355.848162] binder: release 31493:31495 transaction 809 out, still active [ 355.848165] binder: undelivered TRANSACTION_ERROR: 29201 [ 355.848177] binder: send failed reply for transaction 809, target dead [ 355.861400] binder: 31500:31501 got new transaction with bad transaction stack, transaction 812 has target 31500:0 [ 355.861407] binder: 31500:31501 transaction failed 29201/-71, size 0-0 line 3037 [ 355.863915] binder: release 31500:31501 transaction 812 out, still active [ 355.863918] binder: undelivered TRANSACTION_COMPLETE [ 355.863922] binder: undelivered TRANSACTION_ERROR: 29201 [ 355.863932] binder: send failed reply for transaction 812, target dead [ 355.978345] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:33 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x33, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789"}) 2018/05/11 08:07:33 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/98, 0x62, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:33 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") ioctl$sock_bt(r2, 0xdd17, &(0x7f00000000c0)) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:33 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") connect$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x6a, 0x7, 0x5, 0x9, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000000c0)=0xec, 0x4) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:33 executing program 1: r0 = socket(0x400000006, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840080000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0xfffffffffffffea2, 0x0, &(0x7f0000000340), 0x6b2}) socket(0x11, 0x3, 0x9) 2018/05/11 08:07:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 356.184064] binder: 31516:31523 got new transaction with bad transaction stack, transaction 815 has target 31516:0 [ 356.187871] binder: 31522:31526 got transaction to invalid handle [ 356.187877] binder: 31522:31526 transaction failed 29201/-22, size 0-0 line 3010 [ 356.196025] binder: 31522:31534 got transaction to invalid handle [ 356.196031] binder: 31522:31534 transaction failed 29201/-22, size 0-0 line 3010 [ 356.203557] binder: undelivered TRANSACTION_ERROR: 29201 [ 356.203626] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/11 08:07:33 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000080)=""/98, 0x62, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:33 executing program 1: r0 = socket(0xa, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x80000000, &(0x7f0000000240)="c6b609ec3c99474ff18600000000000000000000") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x45, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="11634840000000000000000009000000000100001f000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x3e1, 0x0, &(0x7f00000003c0)}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000180)={0x303, 0x33}, 0x4) r2 = dup3(r0, r0, 0x80000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x100, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$TIOCEXCL(r4, 0x540c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x3ff, 0x8, [0xfff, 0xffffffffffffff80, 0x5, 0x1000, 0x2, 0x8, 0x4, 0x9]}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)={r5, 0x1}, &(0x7f0000000140)=0x8) 2018/05/11 08:07:33 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x33, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789"}) 2018/05/11 08:07:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x3f, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53"}) 2018/05/11 08:07:33 executing program 3: r0 = socket(0x1d, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) [ 356.233515] binder: 31516:31523 transaction failed 29201/-71, size 0-0 line 3037 [ 356.254865] binder: release 31516:31523 transaction 815 out, still active [ 356.266353] binder: undelivered TRANSACTION_COMPLETE 2018/05/11 08:07:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x6, @loopback={0x0, 0x1}, 0x4}}, 0x7, 0x80}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r2, 0x8}, &(0x7f0000000140)=0x8) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 356.266437] binder: 31540:31545 transaction failed 29189/-22, size 0-137439133696 line 3010 [ 356.271254] binder: 31551:31554 got new transaction with bad transaction stack, transaction 821 has target 31551:0 [ 356.271261] binder: 31551:31554 transaction failed 29201/-71, size 0-0 line 3037 [ 356.279192] binder_alloc: 31551: binder_alloc_buf, no vma [ 356.279204] binder: 31540:31545 transaction failed 29189/-3, size 0-137439133696 line 3133 [ 356.288533] binder: BINDER_SET_CONTEXT_MGR already set [ 356.288537] binder: 31557:31560 ioctl 40046207 0 returned -16 [ 356.288889] binder_alloc: 31551: binder_alloc_buf, no vma [ 356.288900] binder: 31557:31560 transaction failed 29189/-3, size 0-0 line 3133 [ 356.301152] binder_alloc: 31551: binder_alloc_buf, no vma [ 356.301182] binder: 31563:31564 transaction failed 29189/-3, size 0-0 line 3133 [ 356.303795] binder_alloc: 31551: binder_alloc_buf, no vma [ 356.303806] binder: 31563:31565 transaction failed 29189/-3, size 0-0 line 3133 [ 356.396748] binder: undelivered TRANSACTION_ERROR: 29201 [ 356.402311] binder: send failed reply for transaction 815, target dead [ 356.409031] binder: undelivered TRANSACTION_ERROR: 29189 [ 356.414504] binder: undelivered TRANSACTION_ERROR: 29189 [ 356.419954] binder: undelivered TRANSACTION_ERROR: 29189 [ 356.425490] binder: release 31551:31554 transaction 821 out, still active [ 356.432405] binder: undelivered TRANSACTION_COMPLETE [ 356.437660] binder: undelivered TRANSACTION_ERROR: 29201 [ 356.443317] binder: send failed reply for transaction 821, target dead 2018/05/11 08:07:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x3f, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53"}) 2018/05/11 08:07:33 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/98, 0x62, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:33 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:33 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000), 0x4) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:33 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) socketpair$inet(0x2, 0xb, 0x101, &(0x7f00000017c0)) process_vm_writev(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/109, 0x6d}], 0x1, &(0x7f0000001740)=[{&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000280)=""/110, 0x6e}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000300)=""/10, 0xa}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000480)=""/250, 0xfa}], 0x7, 0x0) 2018/05/11 08:07:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:33 executing program 1: r0 = socket(0xa, 0x40000000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x3f, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53"}) 2018/05/11 08:07:33 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/98, 0x62, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:33 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) [ 356.515357] binder: 31583:31597 got new transaction with bad transaction stack, transaction 828 has target 31583:0 [ 356.530859] binder: 31583:31597 transaction failed 29201/-71, size 0-0 line 3037 [ 356.538573] binder: 31603:31605 got transaction with unaligned buffers size, 2 [ 356.543695] binder: release 31583:31597 transaction 828 out, still active 2018/05/11 08:07:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x45, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde38"}) [ 356.543698] binder: undelivered TRANSACTION_COMPLETE [ 356.543702] binder: undelivered TRANSACTION_ERROR: 29201 [ 356.543714] binder: send failed reply for transaction 828, target dead [ 356.565117] binder: 31609:31613 got new transaction with bad transaction stack, transaction 832 has target 31609:0 [ 356.565124] binder: 31609:31613 transaction failed 29201/-71, size 0-0 line 3037 [ 356.567618] binder: release 31609:31613 transaction 832 out, still active [ 356.567621] binder: undelivered TRANSACTION_COMPLETE [ 356.567626] binder: undelivered TRANSACTION_ERROR: 29201 [ 356.567638] binder: send failed reply for transaction 832, target dead [ 356.582153] binder: 31615:31616 got new transaction with bad transaction stack, transaction 835 has target 31615:0 [ 356.582160] binder: 31615:31616 transaction failed 29201/-71, size 0-0 line 3037 [ 356.584519] binder: release 31615:31616 transaction 835 out, still active [ 356.584522] binder: undelivered TRANSACTION_COMPLETE [ 356.584527] binder: undelivered TRANSACTION_ERROR: 29201 [ 356.584538] binder: send failed reply for transaction 835, target dead [ 356.677195] binder: 31603:31605 transaction failed 29201/-22, size 0-0 line 3178 [ 356.688167] binder: 31603:31625 transaction failed 29189/-22, size 0-0 line 3010 [ 356.699144] binder: undelivered TRANSACTION_ERROR: 29189 [ 356.704649] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/11 08:07:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x45, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde38"}) 2018/05/11 08:07:33 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0xfffffffffffffede) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:33 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:33 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='net/icmp6\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:33 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/98, 0x62, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:33 executing program 1: recvmsg(0xffffffffffffff9c, &(0x7f00000005c0)={&(0x7f0000000080)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)=""/211, 0xd3}, {&(0x7f0000000200)=""/91, 0x5b}, {&(0x7f00000002c0)=""/14, 0xe}, {&(0x7f0000000300)=""/243, 0xf3}, {&(0x7f0000000440)=""/251, 0xfb}], 0x5, 0x0, 0x0, 0x3}, 0x20) sendto$ax25(r0, &(0x7f0000000600)="93b86a7f16f0bc082479adddb5f145917843ff06c34a964b5c627f22bb73db0d3a6a0e81716fe31cf5a60daae9b075bdf77632ada03c2225a8f704ed80743bc80d59cfb2463c4280f3f4d8f024acdac4246bb59f076ffbda5fd558553d5d3a8c10b2a3664299f6c66da02f5bd9", 0x6d, 0x0, &(0x7f0000000680)={0x3, {"520f1c636684b7"}, 0x81}, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x1, &(0x7f0000000740)="c62948f9344cc45e4e153165dc12ec6f") r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000d3a538b6968ee6b7a1cc2f882f7acfd9b36debfdf548dbaf000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0221000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x45, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde38"}) 2018/05/11 08:07:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x48, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06bc"}) [ 356.802078] binder: 31631:31633 got new transaction with bad transaction stack, transaction 839 has target 31631:0 [ 356.818900] binder: 31638:31646 transaction failed 29201/-22, size -3242591731706757120--6793708012776834907 line 3133 [ 356.826902] binder: 31631:31633 transaction failed 29201/-71, size 0-0 line 3037 [ 356.829966] binder: release 31631:31633 transaction 839 out, still active [ 356.829968] binder: undelivered TRANSACTION_COMPLETE 2018/05/11 08:07:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x45, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde38"}) 2018/05/11 08:07:33 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:33 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={@ipv4={[], [0xff, 0xff]}, 0x1b, r2}) r3 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r3, &(0x7f0000000080)=""/98, 0x62, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:33 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x45, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde38"}) 2018/05/11 08:07:34 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x45, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde38"}) [ 356.829973] binder: undelivered TRANSACTION_ERROR: 29201 [ 356.829985] binder: send failed reply for transaction 839, target dead [ 356.836134] binder: 31647:31648 got new transaction with bad transaction stack, transaction 843 has target 31647:0 [ 356.836141] binder: 31647:31648 transaction failed 29201/-71, size 0-0 line 3037 2018/05/11 08:07:34 executing program 6: clock_gettime(0x1, &(0x7f0000000540)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x6, 0x2, 0x7a5c, 0xce, 0x6, 0x401, 0x5}, &(0x7f0000000080)={0x3, 0x6, 0x98, 0x2, 0x3, 0x7, 0x80, 0x822}, &(0x7f00000000c0)={0x401, 0x5, 0x1000, 0x8, 0x1, 0x0, 0x0, 0x7}, &(0x7f0000000300)={r0, r1+30000000}, &(0x7f0000000380)={&(0x7f0000000340)={0xffffffff}, 0x8}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x1, 0x0) ioctl$TIOCEXCL(r2, 0x540c) r3 = socket(0x11, 0x3, 0x0) ioctl(r3, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r4 = dup3(r3, r3, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r5, 0x11, 0x65, &(0x7f0000000140), &(0x7f0000000500)=0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) fcntl$getownex(r6, 0x10, &(0x7f00000005c0)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000580)='cmdline\x00') getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000400), &(0x7f0000000480)=0x4) openat$full(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/full\x00', 0x10940, 0x0) preadv(r8, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) [ 356.838725] binder: release 31647:31648 transaction 843 out, still active [ 356.838727] binder: undelivered TRANSACTION_COMPLETE [ 356.838732] binder: undelivered TRANSACTION_ERROR: 29201 [ 356.838743] binder: send failed reply for transaction 843, target dead [ 356.847955] binder: 31650:31651 got new transaction with bad transaction stack, transaction 846 has target 31650:0 [ 356.847962] binder: 31650:31651 transaction failed 29201/-71, size 0-0 line 3037 [ 356.850473] binder: release 31650:31651 transaction 846 out, still active [ 356.850476] binder: undelivered TRANSACTION_ERROR: 29201 [ 356.850488] binder: send failed reply for transaction 846, target dead [ 356.859271] binder: 31653:31654 got new transaction with bad transaction stack, transaction 849 has target 31653:0 [ 356.859277] binder: 31653:31654 transaction failed 29201/-71, size 0-0 line 3037 [ 356.869181] binder: release 31653:31654 transaction 849 out, still active [ 356.869184] binder: undelivered TRANSACTION_COMPLETE [ 356.869188] binder: undelivered TRANSACTION_ERROR: 29201 [ 356.869200] binder: send failed reply for transaction 849, target dead [ 356.884692] binder: 31660:31663 got new transaction with bad transaction stack, transaction 852 has target 31660:0 [ 356.884701] binder: 31660:31663 transaction failed 29201/-71, size 0-0 line 3037 [ 356.887210] binder: release 31660:31663 transaction 852 out, still active [ 356.887213] binder: undelivered TRANSACTION_COMPLETE [ 356.887218] binder: undelivered TRANSACTION_ERROR: 29201 [ 356.887230] binder: send failed reply for transaction 852, target dead [ 356.895165] binder: 31664:31665 got new transaction with bad transaction stack, transaction 855 has target 31664:0 [ 356.895172] binder: 31664:31665 transaction failed 29201/-71, size 0-0 line 3037 [ 356.897588] binder: release 31664:31665 transaction 855 out, still active [ 356.897591] binder: undelivered TRANSACTION_COMPLETE [ 356.897595] binder: undelivered TRANSACTION_ERROR: 29201 [ 356.897607] binder: send failed reply for transaction 855, target dead [ 357.098787] binder: 31638:31646 transaction failed 29189/-22, size -3242591731706757120--6793708012776834907 line 3010 [ 357.112741] binder: undelivered TRANSACTION_ERROR: 29189 [ 357.118531] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/11 08:07:34 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x47, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06"}) 2018/05/11 08:07:34 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x177, 0x4) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:34 executing program 6: r0 = socket(0x11, 0x3, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x48, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @ipv4={[], [0xff, 0xff]}, 0xffff}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, @in6={0xa, 0x4e21, 0x83a7, @empty, 0x1000}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e21, 0x5, @empty, 0xbfb}}, 0x0, 0x0, 0x99, 0x0, 0x10}, 0x98) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000003c0)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) getpgrp(0xffffffffffffffff) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000400)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000580)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0xc) r5 = syz_open_procfs(r4, &(0x7f00000005c0)="617513bce6ae60a8db3ec4b7c46bf96e5560796d5c57d6d9488e5752d7af4d5032956a58c452378351e6371995c7bdf38a29640808dfbd56914041c6b0db2f2565bc2288a5633191bfd7bef70f21e863477aaf7af100a0a595c352ef5e2d61743b713428ae9a8ef5b6a68e0f190307994c4b620cd764aef00f8533ac6d07849461479629ddf085b2fe074914b4b1f5a580506b40ff02818c2f9beb6253ef6791fd20eff392c5129a5502e7e88234b0f07cc1f4ae40ed7b880cf79fe91345ab9bdf03af0561e36dc42428fc5bef37cfe050883aae52a260b4893295d805fec5a7e02e92") preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:34 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) accept4$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x14, 0x80000) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r2, @remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff}, 0xc) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:34 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r2, &(0x7f0000000080)=""/98, 0x62, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:34 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:34 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:34 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:34 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x47, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06"}) 2018/05/11 08:07:34 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) [ 357.757623] binder: 31687:31689 got new transaction with bad transaction stack, transaction 859 has target 31687:0 [ 357.777088] binder: 31693:31699 got transaction with unaligned buffers size, 2 [ 357.786775] binder: 31687:31689 transaction failed 29201/-71, size 0-0 line 3037 [ 357.798993] binder: release 31687:31689 transaction 859 out, still active 2018/05/11 08:07:34 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000300)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}], 0x47, 0x0, &(0x7f00000001c0)="f028341ac064b0552cc2318ac1ecaf9a3eda1f059ea5ca83d2c3a80d013570fd21d361a958ea0bf5728bcfd766e4e470225789d4b65833258526eaeade2c53aa601cfdde381a06"}) 2018/05/11 08:07:34 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:34 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0x1fc0000000000, 0x4) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:34 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000340)={0x3, {{0xa, 0x4e21, 0x7, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000580)='tls\x00', 0x4) keyctl$search(0xa, r3, &(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, r4) add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r3) accept(r1, &(0x7f00000004c0)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, &(0x7f0000000540)=0x80) 2018/05/11 08:07:34 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="b9", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0), &(0x7f0000000100)=0x8) [ 357.799008] binder: undelivered TRANSACTION_COMPLETE [ 357.799013] binder: undelivered TRANSACTION_ERROR: 29201 [ 357.799025] binder: send failed reply for transaction 859, target dead [ 357.810518] binder: 31704:31705 got new transaction with bad transaction stack, transaction 863 has target 31704:0 [ 357.810525] binder: 31704:31705 transaction failed 29201/-71, size 0-0 line 3037 2018/05/11 08:07:34 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:35 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) [ 357.813899] binder: release 31704:31705 transaction 863 out, still active [ 357.813902] binder: undelivered TRANSACTION_COMPLETE [ 357.813906] binder: undelivered TRANSACTION_ERROR: 29201 [ 357.813917] binder: send failed reply for transaction 863, target dead [ 357.831033] binder: 31707:31711 got new transaction with bad transaction stack, transaction 866 has target 31707:0 [ 357.831041] binder: 31707:31711 transaction failed 29201/-71, size 0-0 line 3037 2018/05/11 08:07:35 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 357.838858] binder: release 31707:31711 transaction 866 out, still active [ 357.838861] binder: undelivered TRANSACTION_COMPLETE [ 357.838866] binder: undelivered TRANSACTION_ERROR: 29201 [ 357.838876] binder: send failed reply for transaction 866, target dead [ 357.949782] binder: 31693:31699 transaction failed 29201/-22, size 0-0 line 3178 [ 357.966259] binder: 31693:31743 transaction failed 29189/-22, size 0-0 line 3010 [ 357.977569] binder: undelivered TRANSACTION_ERROR: 29189 [ 357.983226] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/11 08:07:35 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x1}}, 0x3, 0x1, 0x699, 0x8000, 0x15}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000300)={r3, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}, [0x8, 0x6, 0x800, 0x5, 0x3, 0x2, 0x1000, 0x3, 0x80000001, 0x9, 0xbe39, 0x6, 0x0, 0xd800000, 0x1]}, &(0x7f0000000140)=0x100) 2018/05/11 08:07:35 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:35 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f00000001c0)={0x3, {{0xa, 0x4e20, 0x9, @loopback={0x0, 0x1}, 0x2}}, {{0xa, 0x4e20, 0x6, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x4}}}, 0x108) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x3, 0xb18, 0x3, 0x5feb, 0x2, 0x4, 0x7ff, 0x5, 0x7, 0xe4, 0xe0b}, 0xb) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:35 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r2, &(0x7f0000000080)=""/98, 0x62, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:35 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:35 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:35 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='aufs\x00', 0x4, &(0x7f0000000100)="96e7a0213daa52c9b0cfa5545f5f2b25badbf9bddce373d9d976f4dbde3d6dccf413690dbd6682c9678d6e2abde5bcbae04cd6cae87473771c2add35383d88d25bb57abc4822d5ecd140047e9c7df27b33970b57dc39a3de14d469f78701790a4032a48b348744fb6f37758cb3dcbf4d84f9cb54bd64f2b6c9d135b596a740881240049f17c56c5c51e914f4fe3ab00af98110453f2b7263381f9e1ddf069d19d71a292bb7a743f760a4ffb388cb91fdb97817432ba12e508feec4f93885ba9d993b41d4d7e7cef55ae27276cccbfb5e4cf318ff94cd6d4681655ddb652f36a3922e24fb503b3e") ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840000000f8ffffff00000000000000000000000001000000000000000009000000000000f1ffffff0000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:35 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:35 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:35 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:35 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:35 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:35 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0xc080, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x4a) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:35 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) [ 358.691941] binder: 31766:31774 got transaction to invalid handle [ 358.719662] binder: 31766:31774 transaction failed 29201/-22, size 72057593786269696--4611686018427387904 line 3010 2018/05/11 08:07:35 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 358.758248] binder: undelivered TRANSACTION_ERROR: 29201 [ 358.772414] binder: 31793:31794 transaction failed 29189/-22, size 0-0 line 3010 [ 358.795095] binder: 31793:31799 transaction failed 29189/-22, size 0-0 line 3010 [ 358.806252] binder: undelivered TRANSACTION_ERROR: 29189 [ 358.812140] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:36 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:36 executing program 2: socket(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:36 executing program 3: r0 = socket(0x11, 0x3, 0x0) socket$inet6(0xa, 0xa, 0x84) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000100)={r3, 0x1}) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) writev(r2, &(0x7f0000001740)=[{&(0x7f0000000140)}, {&(0x7f00000001c0)="64f43ada06d0b5e491be070270d1677884ce4a98fba70aa811899ec34c27a6c7357002e5431429d062e79f4592f6d37396ee0b00bfbae787af7cdfc88a7d899a9d074910915e7326328edaadbbe53089521aa0a58099bfa59a64a60f33e4c45da037ac936aa5e7dabc0e89e1d3bc6a675acf0ee5fd7d4b23fadbc4de307e587e81c334d09d99e074d503cb3a87adf216a0b5d5cb89ae2e808c94d007128f753a9aa794a07d4674937e19e642e2611943d5996e1f1a97", 0xb6}, {&(0x7f0000000280)="c1fd70b8cd5e9c109a", 0x9}, {&(0x7f0000000740)="54339a1d18f22ad79c61635d2528d08d5bfbecc17a81015f3fb6d0ca08cc05ab36629ea3601c5bc4d050754e3e722458c37076f59f12a82b62679569f1b0df8cbc5e77651ace8bb5fd3d2dd412c9e65ee315537f08dc042b458e1e4fd53fadbb55c51215fc510b30bdd4ad8469cbcb132fa895583555d83ec5d7f201d1d961ec88f284965a78be118df3735c1421ea2515f0fc2ca69ca2b8d83c39ee3272ee0d4f3d857541cf3462be678e47532841e9be42735e426ea72a42949d5bcae08cc4e46af56ae71830da85795986298d99879c0bc80b6f88ec12dae24420df372604f1cb430c538fa84f5fac9055d5cbcbdf063640d30f8bbbb2e1f60c2f21b17bdfdd0203575fcb3829d32893cb33761cec1acda0006bef33d13887f589d8281147545f9e706c916b3372e3ad46230a0141aaf30836ed8477da520a942fb783643e1562ce160a5b3e5c6ec879b79bb9f45f54ffa5a34ee249bcbf57ffa66cc091c3ba617f1a93a0d7d4a938d74401c377897d4ff416d1223fe691f24a1e5d3d9e993ee0108f969f64fe0c2b36edab76c58de718b65e4e150d8f45bec42ac1085bc42be5a5e0be64a4a428aaa3b17200bd8709f6472d86ca6df8afe50e567dc32b272dd26b44c0290dedbc386811f1b9eb8d839f517d1963f8f9640303f42430d6aa18fb7eee3efe6399cec012cd72f9d8cb858a8be8a6b736b8824371edf50c785e49ac1e1b8f1d159c869e617389f1bf60dd5a4d27513a9017595180114cf7aaed89b4ae14d56eba6d59e67a0c2a8efdddd0038e1efd006273450159e7e0ca9ea1bef0689bb4066bb9bdb424d70451f28358ac4ad8d807cbf62acd658a510e864893ef1cbd9578b9e51e22b425ce3c4eedbea723f99c95ff168b7a03e011066eaeeb1cf254322de71036074188918296610ab4d6afa23fcbc666a195289e8a0382eb5f7dd02cd9ca0acd7393d6f3a8673fda7e65adbdc290ea3247fa78f01fbc124c1b0b447f92fb2acc5d6a772248d75acfc22ba0999967d3c5af3a39ea53a6747f0836acf6d77585ecd85f17150e56eb9a1427248ae0b63cd608af4440600627080affcdb8db1af420118bc41637f636a1bd0a60893748573123f92c5416b5a4cad3c4343f81151590b3d8aa9fe67e47f951bf1d9dc28195509d0659445093eea9130fe1ada64fc120d6562eb3abaaa5d7ffc477266fb94db0c9e445897f30cf865c03a9a310319e1fbd9999006dfba01633f087adc94af26d14ab8d4ee083a34d5d178f8b08c871fa38c126eb124818a2f352e0d9aa07391aca36f90cf5c0acc3d9cae00be09b3a8fdf5830e293ea57819002cbb375968962cc19ff97846b22a05a99f84e94973a220a8bfb3c68a93a614131dd67bf788c1d167cc7b5c0e2163bdf51c140fd9873fefc9de6afb0e18d8d366684c10367bb44b002212071d381d13ff5e6892f85dfe679b92145fde70f1d5038859826d4c9da2f680888415e23080d01cb89972504909934ebe540a439431c50de98377b791894a7fcdb75919743773ffe1b015b5055626b79521c1b187934fcb699e45ed20592c34c3a2c0af351f51a54953c0c40eb123d6e3648df0e2ad38455e433288bf0a0cee690ab5b8454c447c5f66737a3d9e721d51b4cbe54a6db7b158fed7c0d735320a1f18ab306090b8e07e74464c5ee3ea23a4afe7919580eb1a2e8d6d7c508f469aa3f68dc7d479e4e98446c5bb4ac16f2e83ce5722ac9c454358d4eab22b425ea9c02aa1794565495640a4ecfae935e9f0d4a4b22edca118ef4010cc4fe1593243c70b233ccec0b07935e8c0e342ed787f6c987b1ae0036edb2a81919b726e1f2aa410110342b2995b7179451a02744a68a50609b2de533ae9b65f06aeab3cad31f3f8bb523417ac946b60dbd675278abbd0b31602bab6a9ccaded23d315804a7acda584424237802b592b4d87fe49056d9833162abb15b56a48cdd933e63e53e9284ececaae1ef08c3d7fa49b83ec84a6ecc0ff354d514e2e58777fd8741df406626af3b6768b6bc29bcdfaf9ce3c981d44d9b2f8b06ce82b577a191158fd2842bba7bceff755cb855b31975f683a18d69183a09f2b13726fb618f5fc8c857a340c9c088bf87e153df3e56bfa55b754cd5af4ac3ba88a9346e0f1288ea79ca57ab030af8e5c695f299d59d4653de6ec407cf5b0ab55defd7ba09f416700148d71e7b34aa5108992f3c4640533bc1b2dc2e13eb3b71755c06fc7690206eb7a30c5c4a3376d70c37f5ee99fe6469e651b082d020194259a8fe8b4a1dc801185499cc2fdeb2326ba05026fa63b224ab1226edaac26861755bfe9bdb667eb3ae4c99df1ae1546ab9b226df3bb1e223d798d124d3282530c732cda1fb5273624ce5c525e35ea736cc1512fde6e3c753eaad59928241c7b49c656c560e1bb1b42fa716bc00588e8081202218f184e17c27cd40ba749a89f8d3f9b29d89dba4659651871e1473be5eb7f9fc1c63993338b0e92dbf8c87142e9a03f6e3ccba6433f87c173d5f6350ccc517b11cb373d876281c04a1aa7c2350f47838da70ac634e4848180370abd95153ac871b2764a8c387f3311403ed5f73165dcfbd8af1620861ac4fded82b7f92c50bc1114a463fb4cc57b156a86d2041e99b2bf6fa5dfd79fd0b8d213403ed064d613b5d175852f7d9a04a6253e08db2685952f93f131bd9059dbd68efbaf6938a0a12152f2c07a5f855d6e93fb60f3a9e674d8bd0a69b95eeaab710b0884c67aa907984afb9bac6daf8a2d056448a52a069e0f1d023151f57925933ebc666ea2c9e1aff0ae69a954586819aee63033fdbd7c5aef585c24462665fc5a661446ae7dcbd8997d294e32ee0c0542e08c8947299de849360207518f04f536ec7ee7de4572db2c27b5747fd7a5165d88fee579a47cc28bd44896748ad48bf1c797b99adaccdecf4e5a3e6efd5b2303e799e8a8879a7e9ab862d711b2b34fad48cace654693c0d134a97be7ead82fe289be5083cfa7ad024d330b87e2302b461a052e6d6db35019441b1dbe8c1125c7d3eb94bf5241b44512ec9533fb0bec597fe32964c9796993a934fdd8be2cbd1532a2b6cf0910689a64f9abf4805b1211cb68e1c729455e689350f82e79f2d8831c9caa60fa91bc3a277bad21a74c4d1af0976f6f3f18fdb548248c0327e7f03f55428dc452a39f566889a48e1de659c7c43cdbcf202b60060d7a89add338a33edcc920c9db57db9db0a34e1c8f305a3b2d53e95aa8596c5685bb30b227183d295367b8be251ad3bcd743086ef133752bd670f6f78bd60bead9ec0b0348968bc59a5714f93604957c7994b393877f3c7a4fdd8558385960b82debfde5b48ebc182e9bb46ea4b4d09c8777d8f3b96eae1617968aa1fed162d44fd4959d583c5ad3185f1475f0fb6a6adf790f92300c5830856900cf87c4042a9faf1504770c4c2b3f67148f31b54208b9d9cb089dbc1a4fcd3bdf178b2a351cfe5046616f95c598e3df777b89d8b504486af0c8e74c1628b1fcf17074b07331cf46f947265d618b23cbbde5045ebcfee705b4e5eefe76ebdebe7b3e6584069216e2d929eb8c8a5538b7d6c243f8e87a7fb6d974595443abb3a333d9c16392c7295d10fda6bc45ce73c28dfff8b7666e87d7b0b9d7ba46f99fc21a829fc51b8226809750d70ad25b5c1a7ea473d6b55436fe32317944e0e1e9e10592b51e9e12a5c7c791af8cb22cf6c924aee620a296ca354d7ceab9c5a8971669f9d17fe108520bf7a0a8cfbc37050d003f2ec16d471cd6492061d42e226ad1e9ff42dfbaa8b50dd7fcfd63103fda6e01986a065ebc8d76c0c7b7c6b994e5fddc6b22f29686b225b1b5e0bd9ea3fe1dcf9ecf282c824ff9e838a19aebdf9e123ce52ed9e1f92f66297cea1d13ea0446bc43c238f5862e548ae45312b6e16e4d20876e6df25633d4de73029c03a99e958d845ede1e6b8bc2d76984fdae55ce1a8ef007a2618bcb67e5436721d750486e142e6b7dadba42d68eb839e3d74655e321bd18f66cbe9313ead8a1c7f99c3c2d867d263f1b740bcb1eb54720c2968837e99edfe3ecb2deb0ac056a1c73bdbb0aaae0ea80ac5ec5e3e456d209b7df70d023dd0852772851fae7649527e329005fc48f14b52cc84b5a7ae8e41dfb92a80c048c052aac372327e991b6eda9c8798fcb1ff3d84c344d78a15f6c39dd501d5fb649e1cabe8ca88b5c755663ded8209a5c712ff39f2e0e8b296b248ed3b64a88cfbe70320c7c56e5973064fc6df42ea2983de08934c1622ef86989324d994315163417c6539535335901f0af3de65882cc524cb076ac200eed7c2f1cebd0e56dbd18ae83fb1ccbd22436ff4a969225458608d8cca6b9f6bc30cc9f7d4a995d39de98deeebf6cf13c1db515ab7efb0213d8261bc5f553b447f9c9d718a3d85ab75bfbf13cc13256e4f4fa41c1860b5e6efa2d97b85e5c79b834f559adc83760eed46c447d57c5bbd6e18b1317c83ba1fec01c846ec10ef002b4bf2eec1172eb1ad2544430374348e2bb41f3c67947ad16b07862ca8ed335655952e697df83a98f12702e91eae1fc150a40dc2e56c429320eac7a846178b1e5f8472f1c0c75fe8a943df110fbe139f63bd23ad0c5e8b35ab7ee7fed792942a015f914931ed8c60891db0d9b31f9df3a2be5cc997217f754ad803a7682e10bf60b00c8aa3423d424fdef54d34728d1e1c4ce29cdc0e9eea50c7c30db164b16a40ad5c1db1a24b4622ab4d2cab5d61010291ad9a3675ee0098da0c1d464ddb17c2060c7dc8cdd38329b36940e2c293892cafc65dac2426de83baada1f985cf53e4e79f7f0174415dd6f01c0093429b46efb9c27210e0095751d4fe9e2279aac3a8f1b6eea5e2e1ed3bbd902f12d5422eadb567728784da0718808936fa4431e6797f272c66cf17f86b5805c4f7d6d93d16ac37f6a558a8e447ffcf0dae0a0d5d06bdc4a83fdd7a45d0f06fef1bcb373995a9d6f12350cc5b309b8f32dd9473ba4ef2fe026736de4b7d6bd192c24ac513c31dce6ce5b9858812895b349cf8f727099981fa9f99f77bdae9f5ae8f32b6c586b6174a78254ce30a61de2e40145b40b5ce95d0d840b62be638cae4d476d30ade47fd23fdf48d74c901b4e179c27f50889b25d273caa73f64d956715799a111a8e210005b2d5600494d7f70aba5c38160efa1941abb7a02af0ea3ec52c542f29754db48e823c89abd637ce76b33ad5e53b9b1971ba5b4a740dfc2ea95f18d6b9efa4b6ede56031e709c7aef844d1ac1cb4b27f2af0d304fc7d893564a20b380351e9b3f8c1bb6069a44d48ba9bf715c8d6c4613791c67952b0b46a58a09c87b76b7ef412cfafc664699375c000bcc6284879797095202798175de92a612229f6f6d2e6697e108495304987a7ff6a01ba8f2864b64205277af157279e2bcb947cc165b6766e22c1765a2913bc61a51164af9a7d711d70ef627e972eeec53b3bffdd97ca12e637561aace36a27669a1d46a70902f118955179179da670116b6210fe565bdf4f240f1186880be9f685902c1b56cb3439970a5de3f9bb3e239c3dfce438b7ea2b9a5cbc9731b54510330839ff4728deb3469eb450b902744cc35b0f00153e70d09a64d814dfd093770095071ab77143cb2da2dd2d9dc5cb217d7477191a8d316d6ecb30a74798cdb1a749768d59d9db3cd798cf7b74467cd450661164fde56f48274b86a2aaa691f34cc706c2ca695230de73724d7c8493242397a18ecf91f1ce35a1bf90aacd9d7d8f89c1e96999435aed973a258", 0x1000}, {&(0x7f00000002c0)="505933b7c7dfe82ca40d0499767f232084ef1ac00590bf9b44e027fd08d591ad07fd53e6bf20eacb28de333f91b61c5082600e02b1fcdbe3d80daff3cd7b60f9ec3b7c65f138dc76e9961167a1ecad7760f83ebfba91df0556eb6e1bda0d170ff1552ddfb8d9ffe5d98f7d7a07bc6edcc73e7979ad641363be59e48c039457efcb240e0fca9d176f8179a832ecf9ed09", 0x90}, {&(0x7f0000000380)="1dbd4c15d3c6b2b4490b26d8be54a2d981b23281acd34192b2247b514a8801769938361326c38f91d89bc1ae61cc521e0c0bec441d86c07c6737f0739eb09b7ba4591ac7e7fafca92ab5972c14405aac9f6b6bb89b84eb272c58d49ec74d974c0304c540dea92d4c3321f38d60f7fa8a592ebabad525b0ecb574b876e3714fc1b5c1230df361480ba330a5bd24ad2a4d6b9078f5d2eb9541476e963f3191b8d360d86e57b8f31e2b57b4b57049c362a4007d6fdf6273c4e05702f765f5e0ef8c572557", 0xc3}, {&(0x7f0000000480)="41963c0dc17d1366903419400ad516f846e78302d3bd6c49dd2a426b77d960b111bde785a4647aaa5b2f7bfd7652290642c734bb8e5a3a36ce596cf8787f5acc28f8d6903aacc761ee20a0e52ca2b1d3c7b9f3a56173a7965dbcfbdb43679f35ef6db138916317052dc1c555677bc291c97d345ca20fdc03b2d083a1acff5ed108ba2a", 0x83}], 0x7) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:36 executing program 6: r0 = socket(0x4, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:36 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x20000) getsockname(r0, &(0x7f0000000140)=@vsock={0x0, 0x0, 0x0, @my}, &(0x7f00000001c0)=0x80) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000adf739f614b12fb6fdd6b610a4315d010000000000008be00000000000000063000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000000)=""/241) 2018/05/11 08:07:36 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) socket(0x11, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:36 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:36 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:36 executing program 2: socket(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:36 executing program 2: socket(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:36 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:36 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) [ 359.575857] binder: 31817:31819 transaction failed 29189/-22, size 22884772-3767205888 line 3010 2018/05/11 08:07:36 executing program 6: r0 = socket(0x3, 0x0, 0x100) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x4c1a, 0x4) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) unlink(&(0x7f00000000c0)='./file0\x00') 2018/05/11 08:07:36 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:36 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:36 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$int_out(r1, 0x2, &(0x7f0000000240)) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, r2, 0x204, 0x70bd2d, 0x25dfdbfb, {0x5}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2642}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x401}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x45) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x44101, 0x0) read$eventfd(r3, &(0x7f0000000300), 0x8) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0xfffffffffffffee1, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0xa) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) 2018/05/11 08:07:36 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:36 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200000, 0x0) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000040)={0x88, 0x0, 0x1}) r3 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:36 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) [ 359.637826] binder: 31817:31837 transaction failed 29189/-22, size 22884772-3767205888 line 3010 [ 359.672084] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:36 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:36 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000200", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000010"], 0x0, 0x0, &(0x7f00000003c0)}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x210400, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) accept$ipx(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000100)=0x2, 0x2) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x8000080000000000, 0xfffffffffffffcee) [ 359.710702] binder: undelivered TRANSACTION_ERROR: 29189 [ 359.747848] binder: 31869:31870 transaction failed 29189/-22, size 0-562949953421312 line 3010 [ 359.761070] binder: 31869:31871 transaction failed 29189/-22, size 0-562949953421312 line 3010 [ 359.788914] binder: undelivered TRANSACTION_ERROR: 29189 [ 359.795483] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:37 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:37 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 2018/05/11 08:07:37 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) socket(0x11, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:37 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:37 executing program 2: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:37 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000000c0)=0x8) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000140)={0xff, 0x1f, 0x5d, 0x9, 0x7, 0x0, 0x59d25fa6, 0x0, 0x0, 0x7}) 2018/05/11 08:07:37 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) fcntl$getown(r1, 0x9) r2 = getpgrp(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000680)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c00000000000000690093263858898491b813350908a4c7798b9a53f066e51e6064491bfe9575a04ac7b13599170414803c52f5edf348a5834e59a95e4ff7dc8b10bda4fa61c5c35cb6156535a487927ada94474f5be0177226b0d440eddaa935dd48e2a85c5b474974b625b048c4b6857754cae43f13684dcd890ee2303aad52488db16c75ba1f0ae766e52530a443de1b1259f83a5beb669d32d70b8b2ddd5567710491d9d9abc203a1051cb4a40b22ae5b95b1cffe34040baa115fc5ca7122921a694ee800b316cff1ca5653b961c22d5e8414c94d") preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:37 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:37 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) [ 360.519886] binder: 31888:31894 transaction failed 29189/-22, size 0-0 line 3010 [ 360.561637] binder: 31888:31906 transaction failed 29189/-22, size 0-0 line 3010 [ 360.577934] binder: undelivered TRANSACTION_ERROR: 29189 [ 360.585421] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:38 executing program 2: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:38 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:38 executing program 1: r0 = socket(0x5, 0x4, 0x400000000000000b) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000000000000ddfd4f0000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:38 executing program 6: r0 = socket(0x8000000000000011, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x3}) r3 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:38 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:38 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:38 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) socket(0x11, 0x3, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:38 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:38 executing program 2: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:38 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:38 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:38 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a123") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 361.421361] binder: 31923:31924 transaction failed 29189/-22, size 0-87951753084928 line 3010 [ 361.458926] binder: 31923:31943 transaction failed 29189/-22, size 0-87951753084928 line 3010 2018/05/11 08:07:38 executing program 2: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:38 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000140)={0x303, 0x33}, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="11632b00000000005bb43755000000000000468e5e63b50000000000dc9a7b000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB], 0x0, 0x0, &(0x7f00000003c0)}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x1}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x37365d94}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={r3, 0x400}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r3, 0x1}, 0x8) 2018/05/11 08:07:38 executing program 2: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:38 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:38 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x80000001, &(0x7f0000000080)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) [ 361.496899] binder: undelivered TRANSACTION_ERROR: 29189 [ 361.505583] binder: undelivered TRANSACTION_ERROR: 29189 [ 361.529889] binder: 31955:31959 unknown command 2843409 [ 361.536144] binder: 31955:31959 ioctl c0306201 20000400 returned -22 2018/05/11 08:07:38 executing program 2: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:38 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x5, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x37) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:38 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) socket$nl_crypto(0x10, 0x3, 0x15) [ 361.555429] binder: 31955:31959 unknown command 2843409 [ 361.562534] binder: 31955:31959 ioctl c0306201 20000400 returned -22 [ 361.619363] binder: 31988:31990 transaction failed 29189/-22, size 0-0 line 3010 [ 361.633219] binder: 31988:31992 transaction failed 29189/-22, size 0-0 line 3010 [ 361.646819] binder: undelivered TRANSACTION_ERROR: 29189 [ 361.653419] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:39 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a123") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:39 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:39 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:39 executing program 1: r0 = mmap$binder(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x80, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="10630840040000000000000008631040", @ANYRES64=r0, @ANYBLOB="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", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="08000000000000000b6300000f630c40040000000300000000000000"], 0x57, 0x0, &(0x7f0000000140)="48ac85660f55f0446a7a7e4897bc61c959fee2e8d56c9267a8d2eeb982ede1f1645636124a2d90eeba8c810be03372463c02cac86f15b8763d3fb73506ea45daedaad0f5775051c4544365a3f1f5236ee3428cd43fef13"}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:39 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x12, 0x9a, &(0x7f0000000300)="0e489e207e3acba685ee0e261121c072686c62b869aaaa2f8f9d832c1d627f887f1f1de28abf585e1103a90b9f206f2348cfc61a2fab79103f7f78c4115f5708f8c2755604d8e41d7fb14bfbecfaf291e495b43d8b31f217c0f730127edb3dad1ae88e4e5cc7204bae87fd1f2699699f7b06a3ea50c5aa0b78b1795aa91cd74ce2ff30e1cf32d1caf96e6c962121251aa1765e9f4979004a63fc"}) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x10000000000000dd, 0x10000054) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x10040, 0x0) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f0000000000)=""/10) 2018/05/11 08:07:39 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x22, 0x4) sendto$inet6(r1, &(0x7f0000000280)="85afd8e2fac49eefa90aeffcca796dd72998224f426c0720e9bbad294958ef09aa43eb010387ba74f070bb41e6ed937a0c5d2fda3b722408fe0588138e444c8d81ce", 0x42, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000001c0)=0x2) setsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f00000000c0)="1fb0d7f613b9a311a3210a993ade205943abf48afcd9e92f2584d7130c6f3f314508efe4672cf8a1ee33f2cb7b41654d5e38ebdf523b6d80477f6e7e174adae1d2243c57978250b74a0547a4db87a4432dd2bcbbed8ed5a1d1bfa7791fee009a23af61fc2963349d66f1cdcbbb458de973db276935b5b7c89eadb5fbccecb867e1cb1f62b4f4ce7842f6049090baf92c234868b1912cd2d2ed84ddf11b9a6c35263bcf5711c6153fc629129d09", 0xad) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:39 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:39 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:39 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:39 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a123") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:39 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) [ 362.322139] binder: 32009:32011 transaction failed 29189/-22, size 0-0 line 3010 [ 362.378410] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:40 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:40 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:40 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200800000000000ca89ebd98bd2c7fe1b64de085643318a15e20e486c27ce9cef6258804b8d793d8ce53a4d143d7e1d7998d97c1dc906c177e3a9ad0463487de24347653944decdfcdca5f63ec780a8f4b41ffd4e245d01208ffac817f9e0f41e3d6e9dd0914cff51565250e5921266a0f9b20e5b103755cf73c8b3273767045201e4655b6ae74f4d347a1360bdf193f5c497775e8fc233ac804f4ed6c5a876f49fdfda0f"], 0x0, 0x0, &(0x7f00000003c0)}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000100)) 2018/05/11 08:07:40 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:40 executing program 3: r0 = socket(0x14, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="c6295e46ca6c49b612ec6f") bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x1, 0x1, 0x4, 0x7f, "c34c99633dd0c5df8813dbcff6036dc36f13a1d4dfe446d446f3800168085cec02c7510c5c79786ac3b56d04ca67f4efae2ec0a31c06094360f44bfa7820a8", 0x1d}, 0x60) r1 = socket$inet6(0xa, 0xa, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000140)={{0x0, @dev={0xac, 0x14, 0x14, 0x1d}, 0x4e21, 0x2, 'nq\x00', 0x1, 0x8, 0x4f}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x4e21, 0x12003, 0x8, 0x9, 0x4}}, 0x44) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x10000000002, &(0x7f0000496fff)="c9", 0x1) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f00005e2f83)=""/125, &(0x7f00009cd000)=0x7d) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:40 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1, @remote, 0x0}, &(0x7f0000000040)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") write$binfmt_elf32(r3, &(0x7f0000000480)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0xfffffffffffffffc, 0x0, 0x19b, 0x3, 0x2, 0x3, 0xf1b, 0x1ba, 0x38, 0x2a, 0x5, 0xe2, 0x20, 0x2, 0x52a000, 0x1}, [{0x7474e557, 0x1, 0xb3ca, 0x1, 0x401, 0x1000, 0xa54, 0x101}], "5f911774390788e22e67fc3588f270ba251759ed08756e7c9461ec3ec943af568fda070c4c8a1ef1a0a32964c9234b240d68e54d413ff3c13a115f692568632c0841d4f4ff50ca05d7ef5c5abc6b3d7bea7d3b36419bca00e4f89f239c214d28ce594f7fa92f6bc46523b0818fdfc532a028f406148f62987709eb430b3ddf323024ea1198d54be0fe7dd9721d7ce52e472010fce0747a7df31aa376dfafe2006003cdb3c2f8c24a32e111bc3f34a12fa1a5ca5c0809d033f0b45d765dd3b3aa4007d768e6386d33", [[], []]}, 0x320) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:40 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:40 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:40 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a12365") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:40 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:40 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}], 0x2) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:40 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) [ 363.204548] binder: 32050:32057 transaction failed 29189/-22, size 0-0 line 3010 [ 363.242293] binder: 32050:32070 transaction failed 29189/-22, size 0-0 line 3010 2018/05/11 08:07:40 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:40 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:40 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000a9760428239a", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:40 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f00000000c0)=0x1e) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) [ 363.262167] binder: undelivered TRANSACTION_ERROR: 29189 [ 363.279476] binder: undelivered TRANSACTION_ERROR: 29189 [ 363.298305] binder: 32084:32087 transaction failed 29189/-22, size 0--7339978968048009216 line 3010 [ 363.323578] binder: 32084:32094 transaction failed 29189/-22, size 0--7339978968048009216 line 3010 [ 363.337487] binder: undelivered TRANSACTION_ERROR: 29189 [ 363.343741] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:41 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:41 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) readahead(r1, 0x4, 0x100000001) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:41 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockname$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:41 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:41 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a12365") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:41 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:41 executing program 3: r0 = socket(0x11, 0x3, 0x0) dup(r0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") setsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f00000001c0)="f8a51db2a6fa620a6fc9ddca54fc70f23fa2f9361d3c0bfebdcc9b238a514ccea32e73bae13c7b7d555d1031bbd7135d6ef1f26589625d95ce379f7c9cc24c006a7de794760583a0ed8502b4de9d6192fa4f40942f29d00152bd98a8dcb4f21e66df8907f8172ccdfce2ffd2695854801de3eb7bebeff0e72a3b3f732cca2d33c5c079569beecf624901e2368224d0ed55b452a54b93d8cb8ce585544e5fb6e1107433541393d867f4f94f9243aa529ecf", 0xb1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f00000000c0)={0x2022, 0x3, {0x0, 0x2, 0x3, 0x0, 0x7}}) 2018/05/11 08:07:41 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:41 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:41 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e24, @multicast1=0xe0000001}}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x177, 0xffffffffffffff3b) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:41 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:41 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:41 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a12365") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 364.062089] binder: 32113:32117 transaction failed 29189/-22, size 0-0 line 3010 2018/05/11 08:07:41 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0bc6fed1ae622a80595ac41d322625c29ff0d1652f9eb901dd1e5700000100540e9c2bcef7870175694c966bb3b1480e50e2e0e0cb396ba29e54b31ae9d2b82bf5cb29f19322be5fd5d1ab04e94fc5dba33df2f4f57e833518b2aa1f13652ecd6dded6b4b1d6992ff0178b738c4dde11d4c7c6a2ece126776e7476a614b6b395c9ffa879ea11564ceb0409794b33d0f27439aa1513d863c9fd9654abe150c3fa0f719858700ed55dfa2d7825d8f09680af6de8c36421a500584e43c4b60cf9fa28d6af34577079e098a8f9524ed6649e02ede49aeab99611c043d144026e3215090edb39ca6a3a3013accec19d7b71308386a3d8"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:41 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:41 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000300)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:41 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:41 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) [ 364.126428] binder: undelivered TRANSACTION_ERROR: 29189 [ 364.138215] binder: 32137:32139 transaction failed 29189/-22, size 0-0 line 3010 [ 364.166074] binder: 32137:32147 transaction failed 29189/-22, size 0-0 line 3010 2018/05/11 08:07:41 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:41 executing program 1: r0 = socket(0xa, 0x80000, 0xfffffffffffffffb) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:41 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) [ 364.180624] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 lblc [ 364.190952] binder: undelivered TRANSACTION_ERROR: 29189 [ 364.196657] binder: undelivered TRANSACTION_ERROR: 29189 [ 364.210007] binder: 32154:32158 transaction failed 29189/-22, size 0-0 line 3010 [ 364.220987] binder: 32154:32159 transaction failed 29189/-22, size 0-0 line 3010 [ 364.238787] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 lblc [ 364.246556] binder: undelivered TRANSACTION_ERROR: 29189 [ 364.246648] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:42 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:42 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:42 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f00000003c0)=0x8001, 0x4) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r2, &(0x7f0000000080)=""/98, 0x62, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:42 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:42 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:42 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x54) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="7f000001ac1414aa00b70554c6000000ac1414bbac1414aa"], 0x18) 2018/05/11 08:07:42 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40000, 0x0) connect(r0, &(0x7f0000000040)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c629000400000600000000") r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:42 executing program 6: r0 = open(&(0x7f0000000000)='./file0\x00', 0x20000, 0x80) getsockopt$netlink(r0, 0x10e, 0xf, &(0x7f0000000480)=""/4096, &(0x7f0000000040)=0x1000) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:42 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:42 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:42 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:42 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:42 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) [ 364.927830] binder: 32179:32183 transaction failed 29189/-22, size 0-0 line 3010 [ 364.935151] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 lblc 2018/05/11 08:07:42 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:42 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:42 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x4000000802) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x3, 0x200, 0x1, 0x9, 0x7fffffff, 0x6, 0x7, 0xfe7, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r2, 0x63, "416b3af2d223027efc2ce8f8c8815036cda725e7a69d19513685cfa9acd9c8a134c7de5788f5f0cd0623bc55e378a01522307e424e018a13e78c140176c00bc1bee382379bcd5a65c00c5aae66b062db2b82e73b6fe66ab2dcff9a4678e4f57267a461"}, &(0x7f0000000180)=0x6b) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4200, 0x0) ioctl$KDDISABIO(r3, 0x4b37) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 365.002340] binder: undelivered TRANSACTION_ERROR: 29189 [ 365.036418] binder: 32210:32214 transaction failed 29189/-22, size 0-0 line 3010 [ 365.054970] binder: 32210:32216 transaction failed 29189/-22, size 0-0 line 3010 [ 365.068362] binder: undelivered TRANSACTION_ERROR: 29189 [ 365.074649] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:42 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r1, 0x3, &(0x7f0000000040)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r3 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pktcdvd/control\x00', 0x6020c0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000180), 0x10000000000001b4, 0x10000054) 2018/05/11 08:07:42 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:42 executing program 3: r0 = socket(0x1, 0x8000f, 0x4) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x80, 0x0) r3 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000000300)='/dev/pktcdvd/control\x00', 0x8100, 0x0) linkat(r2, &(0x7f00000002c0)='./file0\x00', r3, &(0x7f0000000340)='./file0\x00', 0x1000) bind$inet6(r2, &(0x7f0000000440)={0xa, 0x4e23, 0x20, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xf}}, 0x5}, 0x1c) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @mcast1={0xff, 0x1, [], 0x1}, 0x7}}, [0x9, 0x800, 0x3, 0x80000000, 0x7f, 0x4, 0x3, 0x8, 0x0, 0xec, 0x6, 0x0, 0x2, 0x100000001, 0x8000]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={r4, 0x4, 0x20}, &(0x7f0000000240)=0xc) bind(r1, &(0x7f0000000380)=@ax25={0x3, {"a59d8cc81ef334"}, 0xa7e}, 0x80) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:42 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:42 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100011, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) 2018/05/11 08:07:42 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") socketpair(0x0, 0x800, 0xcec, &(0x7f0000000000)) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000120000000000000000000000000000000000000da00000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:42 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) pwritev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)}], 0x1, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r2, &(0x7f0000000080)=""/98, 0x62, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:42 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:42 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:42 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8a") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0xc, 0x4) r1 = socket$inet6(0xa, 0x80001, 0x0) write$binfmt_aout(r1, &(0x7f0000000740)={{0x107, 0x3, 0x100000001, 0x363, 0x90, 0x4, 0x106, 0xc0}, "b29c6edd8cae580521269ca5ec4a35561532f3926cf690426918033202e1bdd4965a9592bacade0956c0515b80b28bee46fd769723b0c280dd9f166b4d8f0688104260d582e71ae005ea2eef3de5b8bf354fb57707e51c9e1017fe478f5a61d648faf30f640456b0b296c40bde9d621cf9776d02cf3a84ff2c4cdc9768da2961bd884a7da22181c237957264f562e590214674521ec5dc0ab43bcf19f31f5a80204a2bb4f706211b50de19a02de2e93ebd213818b1329fce4f0692ee7f1bd0164c49dfbdcdda", [[], [], [], [], [], []]}, 0x6e6) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x8000000001, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x6000000000000}}}, 0x88) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x80000, 0x0) write$selinux_context(r2, &(0x7f0000000040)='system_u:object_r:systemd_passwd_var_run_t:s0\x00', 0x2e) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f00000001c0)={0x0, 0xfe, "36ae0a497bd1aacd42b2beda1b6b70160ced5a6c8ae66fdc34a9da940e7a3e40d99f6582dc4b1d06c636ba155c91780f977ac2152a357b9f829951a7e02ed7e601cb55f110aceb829c82ad201fdbb2136b86555db0316831f3e0e97422d0dd640fe4a95e6d1484d65aca44bce1b9651309f1f53da915a58da29701d4f4ebe043afde907da7ce2284cc5e18fba16df1991979a071132cf6da90dcbc8063be1dd4d6046a42cdee97ad28ea2e7da564c18c671eda40f0e89b5246c6e4011a3cb8101d80df3a8ae23d1834bd8265dc74f2f8660520c833e8915fc8896e4dcbc40937584123d93e164c73db759da188ae01eaf339ee57927b381c607c8ad24d43"}, &(0x7f0000000300)=0x106) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000340)={r3, 0x200, 0x1f74b311, 0x401}, 0x10) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, &(0x7f0000420000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}}}, 0x108) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r4, 0x5}, 0x8) r5 = socket(0x11, 0x3, 0x0) ioctl(r5, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r6, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r6, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) [ 365.863257] binder: 32236:32241 transaction failed 29189/-22, size 0-218 line 3010 [ 365.904935] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") symlink(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) 2018/05/11 08:07:43 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x7fffe) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/validatetrans\x00', 0x1, 0x0) write$selinux_validatetrans(r0, &(0x7f0000000540)={'system_u:object_r:dhcpc_exec_t:s0', 0x20, 'system_u:object_r:v4l_device_t:s0', 0x20, 0x39, 0x36, 0x20, '/usr/sbin/cups-browsed\x00'}, 0x5e) r1 = socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0xfffffffffffffffd}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000340)={'gretap0\x00', 0x100}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x22001}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x5, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'eql\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'syz_tun\x00', r3}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'bridge0\x00\x00 \x00'}) r4 = socket(0xa, 0x2, 0x0) flock(r4, 0x6) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0xfffffffffffffffe}, 0xc, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYPTR64=&(0x7f0000000680)=ANY=[@ANYPTR, @ANYRES64, @ANYRES16=r4, @ANYPTR], @ANYPTR64=&(0x7f00000005c0)=ANY=[], @ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYRES32, @ANYBLOB="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", @ANYPTR=&(0x7f0000000600)=ANY=[@ANYPTR, @ANYRES16=r4, @ANYPTR, @ANYRES32]], @ANYRES64=r4, @ANYRES16], 0x5}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7fffffff}}}, &(0x7f0000000380)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400)={r5}, 0x3ba) r6 = syz_open_dev$tun(&(0x7f00000004c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x100, 0xa2) setsockopt$ipx_IPX_TYPE(0xffffffffffffffff, 0x100, 0x1, &(0x7f00000003c0)=0x1, 0x340e1470) close(r6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000044ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f00000001c0)=0x80000001) sendmmsg$unix(r7, &(0x7f00000bd000), 0x80, 0x0) poll(&(0x7f0000084ff0)=[{r7, 0xc1a6}], 0x20000000000000b5, 0x0) 2018/05/11 08:07:43 executing program 6: r0 = socket(0x11, 0x3, 0x1000) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x2, 0x5, 0xf92, 0x1000}, 0x10) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x8200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x215}], 0x1, 0x10000054) 2018/05/11 08:07:43 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x40000000000002c, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:43 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8a") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:43 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x17a, 0xffd2) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:43 executing program 7: openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x20200, 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:43 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000dd1ffc), &(0x7f0000eefffc)=0x4) 2018/05/11 08:07:43 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000001c0)={0x2, 0x0, 0x8, 0x2, 0xffffffffffffbc62, 0x10001}) r1 = socket(0x0, 0x4, 0x4) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r2, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x80, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000100)={r4, 0x1}) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000200)=0x4, 0x4) 2018/05/11 08:07:43 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8a") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:43 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:43 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000009fc8)={0x0, 0x0, &(0x7f000002c000)=[{&(0x7f0000000000)=',', 0x1}], 0x1, &(0x7f0000000780)=ANY=[]}, 0xc100) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x3ff) 2018/05/11 08:07:43 executing program 2: r0 = socket(0xa, 0x802, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") seccomp(0x1, 0x0, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0xfffffffffffffffa}]}) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/5, 0x5, 0x0) 2018/05/11 08:07:44 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x0, 0x401) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:44 executing program 0: r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000ef0ffc)=0x7fe, 0x220) sendto$inet(r0, &(0x7f0000000080)="01", 0x1, 0x814, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) 2018/05/11 08:07:44 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:44 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000300)="2498dc13dc5737baddc38fa53631ec088e59160ba531d1c7793b80026bc440842ce282b3b52755dd0d54974c354fc73c4b242821c255bc1e896b5d750b30203c6fed2ef2765368a23a38046802eaa5cdc86fded4d93d1a4a9ea9dcc1014b6fe6ccd4f171ffe39deafec5b0454c31b8f15f0af50919e737dcb99d7fa583f1fba60052a4fc231bd5986b8330844c79fcdfeb8cab1d4095c9a7e115bf58c254a94f9f56bf43402cbd8dda57a450258d1ee450284adfbd129a39f8a8e18a54ec49878ebc76ead27101d216c0fdbc85442e713be66ff388c504bfc8a082172d9e6989d5367e") r3 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:44 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:44 executing program 3: r0 = socket(0x5, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f0000000080)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000000580)=""/206, 0xfffffffffffffda8}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:44 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0x400, @mcast1={0xff, 0x1, [], 0x1}, 0x7ff}}, [0x3, 0x6, 0x9, 0x38a8, 0xff, 0x6, 0x0, 0xffffffff7fffffff, 0x11e, 0x0, 0x115e, 0x1000, 0x94, 0x5137, 0x6]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e22, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0xd9}}}, 0x84) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:44 executing program 7: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:44 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:44 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:44 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:44 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:44 executing program 0: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r1, 0x3, 0x0, 0x1a8) 2018/05/11 08:07:44 executing program 3: socket(0x11, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r0, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) [ 367.694939] binder: 32333:32339 transaction failed 29189/-22, size 0-0 line 3010 2018/05/11 08:07:44 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x1, &(0x7f0000000040)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000021000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000f8ffff421a52f6475cfa66f485b7b33cd6e651d23856983215634ed647784f51fa41af8c883678d249b776"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:44 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:44 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) [ 367.745938] binder: 32333:32357 transaction failed 29189/-22, size 0-0 line 3010 [ 367.758862] binder: undelivered TRANSACTION_ERROR: 29189 [ 367.764730] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:44 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4$inet6(r0, 0x0, &(0x7f0000000080), 0x80000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) [ 367.789934] binder: 32364:32366 transaction failed 29189/-22, size 0-0 line 3010 [ 367.800047] binder: 32364:32371 transaction failed 29189/-22, size 0-0 line 3010 [ 367.812659] binder: undelivered TRANSACTION_ERROR: 29189 [ 367.820397] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:45 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r2 = getpgrp(0xffffffffffffffff) ptrace$getsig(0x4202, r2, 0x7f, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:45 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:45 executing program 0: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000b80)={'bridge0\x00', &(0x7f0000000b40)=@ethtool_ringparam={0xf}}) 2018/05/11 08:07:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:45 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f0000000380)) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f00000000c0), &(0x7f0000000140)=0x10) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000040)) 2018/05/11 08:07:45 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") accept4(r0, &(0x7f0000000080)=@hci, &(0x7f0000000100)=0x80, 0x80000) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) listen(r0, 0x1) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:45 executing program 7: r0 = socket(0x0, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:45 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:45 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:45 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000040), 0x8) 2018/05/11 08:07:45 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:45 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:45 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8911, &(0x7f0000000280)="c6295e4eca6cf3b6120300") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 368.625283] binder: 32416:32418 transaction failed 29189/-22, size 0-0 line 3010 [ 368.634860] binder: 32416:32419 transaction failed 29189/-22, size 0-0 line 3010 [ 368.649010] binder: undelivered TRANSACTION_ERROR: 29189 [ 368.654582] binder: undelivered TRANSACTION_ERROR: 29189 [ 368.660378] binder: 32424:32425 transaction failed 29189/-22, size 0-0 line 3010 [ 368.661972] binder: 32424:32426 transaction failed 29189/-22, size 0-0 line 3010 [ 368.678271] binder: undelivered TRANSACTION_ERROR: 29189 [ 368.683733] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:46 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="3f2da98236a05a8f5a35282c2f16db9d44b5b6d9a8c99c63558c554c46b542aacc923c31bb5881c957cf14aeac4efd091489442f1cea30139c64e98708fcb83928e4a86f5f7b78760ab0dadecf0bafebe26b06776edec51425b4106ebd11df7467b2eab9cfea383187dd1a81a6bf34bc3785f38474b7446dc141cab4", 0x7c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x101000, 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="fc08000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) r3 = geteuid() setuid(r3) 2018/05/11 08:07:46 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:46 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x2, 'gre0\x00', 0x2}, 0x18) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0xfff}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r2, 0x400}, 0x8) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) connect(r0, &(0x7f00000000c0)=@ethernet={0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x19}}, 0x80) 2018/05/11 08:07:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") syz_emit_ethernet(0x66, &(0x7f0000148bfa)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, '\t\x00', 0x30, 0x40000000003a, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@time_exceed={0xffffff83, 0x0, 0x0, 0x0, [], {0x0, 0x6, "a97188", 0x0, 0x0, 0x0, @loopback={0x0, 0x1}, @loopback={0x0, 0x1}}}}}}}}, 0x0) 2018/05/11 08:07:46 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") fcntl$setpipe(r0, 0x407, 0x7) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:46 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:46 executing program 7: r0 = socket(0x0, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:46 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:46 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:46 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r3 = dup3(r2, r1, 0x0) fallocate(r2, 0x1, 0x0, 0x3ffffe) fcntl$setstatus(r1, 0x4, 0x4000) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x34123610) 2018/05/11 08:07:46 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) [ 369.450529] binder: 32442:32443 transaction failed 29189/-22, size 0-0 line 3010 [ 369.470653] binder: 32442:32460 transaction failed 29189/-22, size 0-0 line 3010 2018/05/11 08:07:46 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000440)=""/32) fstat(r0, &(0x7f0000000480)) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)=""/151, &(0x7f00000000c0)=0x97) r3 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0xfff, 0xde7b55a5584e8ce4) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f00000002c0)={0x7, 0x3f, 0xffffffffffffffff, 0x8d2c, 0x1, 0x9}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x22500, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000140)={0x0}) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000180)={r5, 0x3}) 2018/05/11 08:07:46 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:46 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000480)=""/191) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000040)) r3 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x94, 0x1d, 0x400, 0x70bd27, 0x25dfdbfd, {0x5}, [@generic="08af5662a29349a63d4e7b5ef59b62db332dcc2c7b75b084bf5f52280caebf954951585a8acf9ad2ef479204ed8d280396083eeb0b522b112378b0c48b6cf123fa5bf13cd8d38efab81f342bd8299256c93c09c9e64731a9ecd5fc058ab31e516511fb684e549b0c6ff84abe1f70ee6825bce651775758d65c1d1035d6d080"]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4) write$selinux_create(r2, &(0x7f00000003c0)=@objname={'system_u:object_r:systemd_systemctl_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x37, 0x32, 0x20, './file0\x00'}, 0x50) 2018/05/11 08:07:46 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = dup(r1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000000c0)={0x0, 0x70, 0x7, 0x5, 0x7, 0x7, 0x0, 0x6, 0x4000, 0x4, 0xce53c3a, 0x40, 0xd788, 0x7, 0x7e7e4759, 0xb12, 0xd7, 0x98d9, 0x1, 0x7fffffff, 0x10000, 0xc2, 0x6, 0x7, 0x80, 0x6, 0x9, 0xa5e5, 0xe1, 0x5, 0x811, 0x5, 0x800, 0x45, 0x7f, 0x80, 0x7, 0x8, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x4000, 0x8, 0x401, 0x2, 0x0, 0x7, 0x3}, r2, 0x8, r3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:46 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:46 executing program 6: socket(0x11, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) acct(&(0x7f0000000000)='./file0\x00') setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) [ 369.495628] binder: undelivered TRANSACTION_ERROR: 29189 [ 369.501448] binder: undelivered TRANSACTION_ERROR: 29189 [ 369.527346] binder: 32467:32472 transaction failed 29189/-22, size 0-0 line 3010 [ 369.541320] binder: 32467:32474 transaction failed 29189/-22, size 0-0 line 3010 2018/05/11 08:07:46 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x800}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) getpeername$packet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@mcast1={0xff, 0x1, [], 0x1}, @loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0xfffffffffffffffd, 0xe55d, 0x8001, 0x100, 0x3f, 0x40000100, r2}) [ 369.567120] binder: undelivered TRANSACTION_ERROR: 29189 [ 369.573227] binder: undelivered TRANSACTION_ERROR: 29189 [ 369.594462] binder: 32485:32487 transaction failed 29189/-22, size 0-0 line 3010 2018/05/11 08:07:46 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 369.611417] binder: 32485:32487 transaction failed 29189/-22, size 0-0 line 3010 [ 369.629613] binder: undelivered TRANSACTION_ERROR: 29189 [ 369.636402] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:47 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:47 executing program 1: getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)={@remote, @multicast2, @multicast2}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0xfffffffffffffbff, 0x5, 0x0, 0x80, 0x80000000}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r0}, &(0x7f0000000180)=0x8) unshare(0x40000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'ip_vti0\x00'}) socketpair(0x3, 0x0, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000240)={0x0, {0x2, 0x0, @multicast1=0xe0000001}, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @multicast2=0xe0000002}, 0x63, 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000040)='irlan0\x00', 0x1}) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000f4afdc)="24003a0025f2806bb4040000000000000000007fffe5b70000", 0xfffffffffffffeab) shutdown(0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x80800, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x10000, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0x0, 0x800) r5 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x900, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000000c0)={r5}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="06000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000140)=0x1c) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="00688607e81a0c6036eb2a5731cf8465896b42f40026841fdec51d305373044ed68cb43534a51bb40300000000bbc2c5fa5c85fe553e0377c1e60000000c267180976880e7d6dd2df67bcff8bb07e43a6430639a1546bb0e9b4ffdc9bd47fff5512319bad8b55b8d4832576aea1f85d9b9a452bf04a330eccdb341472622b65b51d63ecf9f2a2e9efb9ea23a32b7be44bbd3514599db04ba3bf40f6d85c0fec1cbfcae741980272d1345283137bfa1b6f75e3705188c8a147efd1c4e012345876e950214b60d30fa11955431d8889a68e165250d53e8b3c53cad45b8622d3429c573d3"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:47 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2000, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r2, &(0x7f0000e13f4e), 0x8c, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:47 executing program 7: r0 = socket(0x0, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:47 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:47 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) request_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140)='{lovmnet0\x00', 0xfffffffffffffff9) getsockopt$inet6_tcp_int(r0, 0x6, 0x80000000001c, &(0x7f0000000000), &(0x7f00000003c0)=0x4) 2018/05/11 08:07:47 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:47 executing program 6: recvmsg(0xffffffffffffff9c, &(0x7f0000000940)={&(0x7f0000000480)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000500)=""/216, 0xd8}, {&(0x7f0000000400)}, {&(0x7f0000000600)=""/62, 0x3e}, {&(0x7f0000000640)=""/248, 0xf8}, {&(0x7f0000000740)=""/166, 0xa6}], 0x5, &(0x7f0000000880)=""/189, 0xbd, 0x3ff}, 0x40000000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000f40)={0x0, 0x10001, 0x0, 0x8, 0x4}, &(0x7f0000000f80)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000fc0)={0x0, 0x0, 0x9, 0xcc}, &(0x7f0000001000)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001040)={0x5, 0x8000000006, 0x8001, 0xe4, 0xf2c0, 0x8, 0x1ff, 0xfffffffffffffff8, r1}, &(0x7f0000001080)=0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000010c0)={0x0, 0x1}, &(0x7f0000001100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000002840)={0x0, 0xfffffffffffffffc}, &(0x7f0000002880)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000028c0)=@assoc_value={0x0, 0x6}, &(0x7f0000002900)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000002a00)=[{&(0x7f0000000980)=@in6={0xa, 0x4e24, 0x1ff, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f0000000e80)=[{&(0x7f00000009c0)="20bef27f36ef1561c111cca164629d43a120984c51718fd7d823410fc4d57ca082660f9375d648cb3b5eaf5e8024a892ab7b00490f61023514b800abc135907d58a82e540018da7f6f55cf4ab2446db48ea05cfe2f7f4adb46d94d4792cb8ebb6800f5b3f2591300d400f015fe5d3713e6bd66d157f7ac28e98a14724d39a8d86d595072a4ab914f401bbe5251dee808d995da58c5a93b9079a693017b967d3502af", 0xa2}, {&(0x7f0000000a80)="c10a92153f7f2b57e74210368ad38225cc018592afa615bea369740a67fc3c2cec5275819335c400ee138b7823aec9d2b0c8cfd5200bd8a69a949bdc943825fd5c0336fd6786a6e83cd1081643cc4f50", 0x50}, {&(0x7f0000000b00)="c28a0192f528b9d09f872687923fdd2420267768c0662688681edff991817aee0f498c993b5ef82e9fa70d8868c9f63d478bdd62d660602ae77709d1baaaa0", 0x3f}, {&(0x7f0000000b40)="938a5bce9ec6a5e18fe322d2581f6b7e126aeb8981fd0cb1fd4a4ac03819398e0b8efe1ff8ef4d0303f9eea846fe4ae1834ae49c50ad73503845b7485bbfd7257d276d7c54f5ef869be691633efe568e5e37cb8d6c0d34d1fe24e20cc11155647fed431023ce1d59a66845194785ab74d20543ad133c0f44e2a705dc884cfb16144cadc948c94d314e42c88231f6b3e6b994a45995679468f575fad9b9efadc55bd8e429bd1a7b70d21bbba02457a32a467141563027ff32261fcce4bbea50b1c44306e6bd4a0c545ed7a040c5b836", 0xcf}, {&(0x7f0000000c40)}, {&(0x7f0000000c80)="bd9c9b5b0f848814df5450bb1c8b483cd6ca424849755468031d01d4b12486d0589ccd08965c565a60aba1a07cc18307095e171e1328f7bf990a2598e273fb8910083410e05dcff7edd300951e5b66e0ee178e2bafd2bc3ccaf6282f9a4f1d5a9f845b8c91a523913afab88e22b9a78cf461252a14d39f544bbe3208a361dcd7ccfc799e823216e6da729f008ba21738764fa19db129a652370dd9ebd5d3d4bd8ec3673bd1e747c44348c6d087bbac528a40decbcbade29db8cee15ffbeb143cc2c7a60060180ca899d929a3dbcf44a917a7ce106dd64ec56d7d6581fc0576", 0xdf}, {&(0x7f0000000d80)="7a9b03844a67f61366cd9234a4ed0442d2c7a43434d5dd1ca5c57c65f0446e5dceff5b42de315ac60dc63dc94e8e059e60060f667780", 0x36}, {&(0x7f0000000dc0)="cba6c63db0c00d3dc5ddcdc16c241e3bb4e6d1a9d22f5f77f33069e52a947c58bdaed89ee3482af04530203456f4470f344ae723e306f0b1c9d9d39807e46137cb", 0x41}, {&(0x7f0000000e40)="bb95c32646149ff7498ecb4ebd44e5377826e858b997b3fa339f2d8c5b3038ff19", 0x21}], 0x9, &(0x7f0000001140)=ANY=[@ANYBLOB="300000000000000084000000010000000000090002000000fa670000f8ffffff000000008100000021060000", @ANYRES32=r1, @ANYBLOB="300000000000000084000000010000000100ff0708000000abb40000370d0000040000000002000002000000", @ANYRES32=r2, @ANYBLOB="200000000000000084000000020000003100423eef00000006000000", @ANYRES32=r3, @ANYBLOB="20000000000000008400000002000000782500003f00000004000000", @ANYRES32=r4, @ANYBLOB="180000000000000084000000050000002200000001000000"], 0xb8, 0x880}, {&(0x7f0000001200)=@in6={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x793d}, 0x1c, &(0x7f00000027c0)=[{&(0x7f0000001240)="7979d67db8479f0a2557383f5eb37fe1b714bd71791009a310635d10eac4d0b462fa5e94aac962c902a364b0e92a804868b9fa258d0a56395fb22d84e28699bb5a1a4b1121b7c28dc9b5e4ef686069a89cd5a7d74b214169dcf1b1d3c8046999fc118c72dcf64aadb96a79f28047c89cc8a6ee61d55e287c49b52d408db4609c7c3b080a8f6a16634452a1ded7e2b2757198adcb64665bc49907d33a2a0f258bb4051f56585644289865e1131efebf7350e15047fee7969464b066bd42d30534375d196024935c8b5fd8e45d905d4ec4c36d110e5fce561f5590bb33835290c1698b5f6e3425ef8573eb06524ae6d570980ac7f76b0d25a7f52ae1ec", 0xfc}, {&(0x7f0000001340)="0ba7697b8768968d7d3b8a9c5f940eb3604a923ca01d91583ee999f1a6f58343eaf8089f6d77092c0b3c423defb84122c4e9b37e794ce935d604e7a7fc639c8c2c1b7624656fb92f65849fb49c6c7ec1a4acb2e8bb04867c0a5e883e1c6f40afc7610c6ec95d545c8c8034b1e1bc155badbc6b9c5a2faa90254fbe1f95726a264fa5bf213780198d8bc4c3f32513d8bd6b63af170d1e2f6a0a24f4fdad285dababb260ba1f67d1fb5a05b0288811", 0xae}, {&(0x7f0000001400)="508ac59ca036d53a62cb04d217467cbfda5125efef086f1a183f190a64f17a0381fc932a45b4661a026066d132628e09c970da5857dc669f1df6fc7d", 0x3c}, {&(0x7f0000001440)="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", 0xfd}, {&(0x7f0000001540)="0a44407f3a088724bb42c263b6fed0b7800dea6717adfbd36a45524f21e56b7d833d55ca9753a2ca3897c851f7551aaaa2c3b913cf38d58c63a81146d6ad4004f0726b588a796173355ffd0f963b42c44464455e44d1576e1588ed2ee94dcd8f150d8b836e904eb210647703c83680b2580f92c97c1d3a9587a797983cb9e192050c0c57505ac6a5f7cb8a0f1f215cb601be0db8981fe341e96f789b42dad24a03ed45cfc38e30161939cf1141ceef86", 0xb0}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000002600)="3741d739f75ef97992dea2520caaeca6a0013aa62ba452d9ef2850b3470b0cb7574daf42526464670d87de2ea2223db0a7d6725d7a0bd4e2fd04a0558c1954c57992ef06d4c8776773b8953a42e4847c3b56fdbad535bcfa4d85705f9fe9dbdc5e260c9b98f2f6c353b5516c9d0afa893926b60a54458ceb7a9b7071882ab8958d832d00bd76bb8fafdb4150e23cab0fc44667fe85f8ada6d55c953e1c4dc494361df3d09b3c90cabd347c577b7eaae892321255a26349da3b4a37908f19a9f22c33ae56245c2fc3f66f181166105f5dd4424aec5db9b029a3d0a9078f9989083633a10169233211072a0babbc9d4e7ae5d2d8e1cf79de", 0xf7}, {&(0x7f0000002700)="5177524771705f2cb9073b37e308c6f8170240f53c8929c54f8a8fef9faa5b75a54582be555bb2a350a5fbdad95bafb700f675a242c084bdb744aac27ebfe6dd4b6858718bf5148d4eded182b18d688166daa9f80da01fe99fd8050f51dbae7b0ab0842882a207bd7da546e32c7739a51d7d4febc60621f67bc5cf0f7d836af6a3057705bbc3", 0x86}], 0x8, &(0x7f0000002940)=ANY=[@ANYBLOB="18000000000000008400000007000000000000f00000000020000000000000008408000100620600002000000000000000000000", @ANYRES32=r5, @ANYBLOB="18000000000000008400000007000000000000000000000020000000000000008400000002000000090003800900000002000000", @ANYRES32=r6, @ANYBLOB="18000000200000008400000006000000ff00000000000000"], 0x88, 0x8000}], 0x2, 0x0) r7 = socket(0x11, 0x3, 0x0) ioctl(r7, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r9 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r9, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x401, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}, 0x0, 0x2}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000300)={r10, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1, 0x7, 0xf7d, 0x41}, &(0x7f00000003c0)=0x98) connect$ipx(r9, &(0x7f0000000000)={0x4, 0x9, 0x7, "366e491d7265", 0xa7a}, 0x10) 2018/05/11 08:07:47 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:47 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x0, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:47 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:47 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:47 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:47 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) [ 370.352822] IPVS: Creating netns size=2536 id=9 [ 370.387867] binder: 32512:32524 transaction failed 29189/-22, size 0-0 line 3010 [ 370.399292] IPVS: Creating netns size=2536 id=10 [ 370.426130] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:48 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:48 executing program 2: socket(0x11, 0x3, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:48 executing program 3: r0 = socket(0x11, 0x3, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/77, 0x4d, 0x20, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0xdf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:48 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:48 executing program 7: r0 = socket(0x11, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:48 executing program 6: r0 = socket(0x10, 0x3, 0xfffffffffffffffe) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x4000004e23, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}}, {{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x16}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:48 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000d11d1726eff58e426729ea12fb4d79c10bde11895e549f99a2ecb96de7275f990719ce286f2b2ef1f2135dbe47a3d88e470eea02f90671dbe041fd3a75b25f4d24d730311aa3018f506bfcf7ad450ed7f3cf681ab22171d2dc664fd21e1ee58860c18c6ccc65d91c1724041b8c57f13ac0da418181a055f3bb2cf1163f818e8af8f007f6a292317bc661658f04ed40e5246612f430271b762add036fb3a8f0f57e7915666059e22ca2fba99a"], 0x0, 0x0, &(0x7f00000003c0)}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)) 2018/05/11 08:07:48 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x0, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:48 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) r3 = syz_open_procfs(r2, &(0x7f00000000c0)="6e65742f6d6366696c74657236007715b65f48c17f74c9fc8491b80000c3dd5a00000000000000000000000000000000000000") setsockopt(r1, 0x4, 0x96b, &(0x7f0000000300)="d4d1a799436c6aaf5870053103159b27b95403ac2084f88cb56f93fdc2385d61d611a59c4569a0d0f56bedd20f00ca28b2d4027d662a2c91bee95f852be9b91229efe5031222769924e6bcd40ba91f26d81ce542268d7eac67244bf074b467421a85c11fb8ed0aa5844816b3054f462ca546253409370a278868827e64c1994e33c9fcf320565cefc0763fca4b947f037dff518ff98ce909bcd3e9747fc7819378e30968e97de18d90a8df669def72515f2eedd6a0755b1b7a9b3d7b2f350b2c307b301a5f7f2dfaaccf15558d601b2e8895a40e1db9912528b311a9b44d936cff6708cadcc1ca26ec51c86f0e644013d2a0", 0xf2) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x101, 0x4) preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:48 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) close(r1) 2018/05/11 08:07:48 executing program 2: socket(0x11, 0x3, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:48 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:48 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x0, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:48 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) close(r1) 2018/05/11 08:07:48 executing program 1: r0 = socket(0x10, 0xb, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="116348400000000010160000000000000000000000000000010099680000000000000000000000000000000000000000000000002fa9a824049a922b46d1807f15749a47cb3edd7584", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="4498dfb45ad0d626a97ef69138124915d0686a8e94ec43000000000000000000000000000000fff0bbddbe5200051ef11485dceb67fa9103712b1f00782b4c608d8c5cc858168d691c4f0eb9c05f20a7f2794260b190"], 0x0, 0x0, &(0x7f00000003c0)}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x2800, 0x0) ioctl$TCFLSH(r2, 0x540b, 0xe3c0) [ 371.212840] binder: 32574:32576 transaction failed 29189/-22, size 0-0 line 3010 [ 371.231809] binder: 32574:32597 transaction failed 29189/-22, size 0-0 line 3010 [ 371.249798] binder: undelivered TRANSACTION_ERROR: 29189 [ 371.256497] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:48 executing program 2: socket(0x11, 0x3, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) [ 371.259474] binder: 32609:32610 transaction failed 29189/-22, size 0-0 line 3010 [ 371.261097] binder: 32609:32611 transaction failed 29189/-22, size 0-0 line 3010 [ 371.290885] binder: undelivered TRANSACTION_ERROR: 29189 [ 371.296356] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:49 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="e8463ee12e166d538faf65206ac6e0ce199d61d49ab1e32699a3d027888d50f767aec1b18eaf1029622082a35afb09ddcd539482b4073a1a91c77a9471d924db96cad67b5645e52f9753cb2f14f22399f97075f9626fac5d1308b8640b1224229bcd60ffde8d74c99734f25d48982143e9f5f75e1122342a113653a5f7d7eae74eba169a7042fd14d68b9fb094ec831d613bbf3475c28128daced90ccbc111fc039ee4308a009c7ebdde1246601133662fb6fb88f74908a1c7da96b1914ea72f92f57248d28c71209311d9344a237de8585ec9613a8d675e69cbf954660c74c2e20000000000000000000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:49 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) close(r1) 2018/05/11 08:07:49 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:49 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:49 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x1c267051, 0x4) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:49 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x0, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:49 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xfffffffffffffc76}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:49 executing program 7: r0 = socket(0x11, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:49 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:49 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x0, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:49 executing program 2: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:49 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:49 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(0xffffffffffffffff) 2018/05/11 08:07:49 executing program 2: r0 = socket(0x0, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:49 executing program 0: socket(0xa, 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r0, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r0) 2018/05/11 08:07:49 executing program 2: r0 = socket(0x0, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) [ 372.208152] binder: 32634:32651 transaction failed 29189/-22, size 0-0 line 3010 [ 372.235139] binder: 32634:32661 transaction failed 29189/-22, size 0-0 line 3010 [ 372.255964] binder: undelivered TRANSACTION_ERROR: 29189 [ 372.261741] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:50 executing program 0: socket(0xa, 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r0, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r0) 2018/05/11 08:07:50 executing program 1: r0 = socket(0xb, 0x3, 0x800) r1 = dup(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x40, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f}, @exit_looper={0x630d}, @acquire={0x40046305, 0x2}, @decrefs={0x40046307, 0x1}, @increfs={0x40046304}, @register_looper={0x630b}, @clear_death={0x400c630f, 0x3}], 0xf7, 0x0, &(0x7f00000000c0)="3fa8c2a4f3bfab3e6721cf547126819bf432adb5c5270ff8c0cf43e65d4ce14de3f9c943e11ff77cef8fbea341cecabfd1fb920ad44649164a66f88f635f215e790388965fc9cd1c0dc4e86d47a76ae15d9643f295987ed76b680eb911bd94619aeb65b53d9cc5ed25f6eb76f18ca140b87848ce997b3218afe981098f29f767c864f386ddf4e5d129b22fbd203cda6a386a7f48589fc0b4266ae74a6d92b89846497b397d229b15988a82e4cdece74d433a06ae62daf61855df38c12370f884065d9670177924f2b88f88cf6b66692e0d137083a444cc0291d59d051111967b18e7e864052babefd7b737f3592867cbb8593e54ba5e08"}) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:50 executing program 2: r0 = socket(0x0, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:50 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:50 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x7, 0x0) ioctl$TTUNGETFILTER(r2, 0x801054db, &(0x7f0000000240)=""/1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x6) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000340)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x13c, 0x28, 0x108, 0x70bd2b, 0x25dfdbfe, {0x1}, [@typed={0x8, 0x8b, @fd=r2}, @generic="5d16844abc3aaf5e3e9d02e69a895b7a4b9782d844a63cf78f42b1701449eea56197c27c4dde544eeda50ee160631bef660743a32d044596902741692a1690cb2529b901315e51ec4fb49199136944410101082fdc49f949781e6894227f510db110655f1487dc081d9cae3d25352788e0da8d41bd20addb6ae5ac6383ac71d3717aa34c9455b60a167223f7a08980b5d288739d22c463386f5446d42e37057a431d9f986fc08e10209209859c48c11d20feafe4f3005a596e761d540c92d9e7b464c4e36884148e0bf52bd825072de4bc036a8905b8f67b160893671714c2e67e6d7d369758f2", @nested={0x28, 0x2c, [@typed={0x14, 0x40, @ipv6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @typed={0x8, 0x88, @uid=r3}, @typed={0x8, 0x27, @fd=r1}]}, @typed={0x8, 0x39, @ipv4}, @typed={0x8, 0x12, @pid=r4}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x7, &(0x7f0000000080)=[{&(0x7f0000000740)=""/4096}], 0xffffde1, &(0x7f0000000580)=""/206, 0xce}}], 0x296, 0x203f, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000001740)=""/96) 2018/05/11 08:07:50 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:50 executing program 7: r0 = socket(0x11, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:50 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x0, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:50 executing program 2: r0 = socket(0x11, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:50 executing program 0: socket(0xa, 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r0, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r0) 2018/05/11 08:07:50 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:50 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r0, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r0) 2018/05/11 08:07:50 executing program 2: r0 = socket(0x11, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:50 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x0, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:50 executing program 2: r0 = socket(0x11, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:50 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r0, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r0) 2018/05/11 08:07:50 executing program 0: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r0, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r0) [ 373.074025] binder: 32688:32704 transaction failed 29189/-22, size 0-0 line 3010 [ 373.107281] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:51 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:51 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000001c0)={0x20, 0x2, 0x1, 0xffffffffffffff9c}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000200)={0x6, 0x8, 0x1, r0}) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000300)) r4 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x78, r6, 0x20c, 0x70bd28, 0x25dfdbff, {0xc}, [@IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfd}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x1) getsockopt$IP_VS_SO_GET_INFO(r5, 0x0, 0x481, &(0x7f0000000240), &(0x7f00000002c0)=0xc) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348400000000000000a596dc07c23481a0855d675192a000000000000000000000000000001000000000000000000000000000040000000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r5, 0xc0184908, &(0x7f0000000340)={0x1d, 0x2, 0x1, r2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f00000000c0)={0x4, 0x3}) 2018/05/11 08:07:51 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:51 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f00000000c0)=""/24) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r2, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:51 executing program 0: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:51 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:51 executing program 7: r0 = socket(0x11, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:51 executing program 0: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:51 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:51 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000005000/0x11000)=nil, 0x11000, 0x1000000, 0x14, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x134, 0x0, &(0x7f0000000440)=[@increfs={0x40046304, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000040), &(0x7f0000000080)=[0x0, 0x48, 0x78, 0x28, 0x0, 0x0, 0x0, 0x0]}}, @transaction_sg={0x40486311, {{0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x10, &(0x7f00000000c0), &(0x7f0000000100)=[0x48, 0x48]}, 0x6}}, @increfs_done={0x40106308, r2, 0x4}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x48, 0x20, &(0x7f0000000180)=[@ptr={0x70742a85, 0x0, &(0x7f0000000140), 0x1, 0x0, 0x32}, @fda={0x66646185, 0x2, 0x1, 0x3}], &(0x7f0000000200)=[0x28, 0x30, 0x38, 0x38]}}, @transaction={0x40406300, {0x4, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x48, 0x30, &(0x7f00000002c0)=[@fda={0x66646185, 0x1, 0x3, 0x18}, @ptr={0x70742a85, 0x0, &(0x7f0000000240), 0x1, 0x4, 0x3e}], &(0x7f00000003c0)=[0x78, 0x78, 0x78, 0x0, 0x70, 0x58]}}], 0xc6, 0x0, &(0x7f0000000580)="bbb69c6cd7af344fae096472bb7000240e1723a4c77256078b66be43849a3ea49846741e73c9798551da4a843604d084ae5f73820df8b30f81c8df283474bf2f269df6efac6d63c96c3bf4738627acc4503666888f347b1dce72b655ee4b6232936e0c82643285089793b182af3a3b1e2bbd3ec7f6c9741bd01f0cdd3c428bf716378b8436a7c1b16ab18bef164563d8eb944d6b8b2a73a520a4b2ca162fc1cb1eead60fc3a0290d3912c7b386fd97e4d029fd19b05022e3780678c76035671a785715320b73"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000003831824a428c6bd000000000000000000000000000000000000000000000000000008b8a7807e6c6e68f4a6a2f61d8558e110336bb270b9522fd9b0b41d448c20353e3d3c0d122e0454f81769e696c1a6a522dd44c3542273394adf3ea8825b9bfc947d067b303c8aaca0a2299bc3ba7206c2ec96ac3d597ddc22fccb690bb0a6fa748f68d3b2a91abffcd615a382237b2487184bcb0f1de759847bcf4c01d039c51ab27ff72c852cc7b1bbbfb951b5d63788612d438dc3abceb08c64e48000e400ee1691789da14949a1e744c84c5e31", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20a800, 0x0) ioctl$TIOCSBRK(r3, 0x5427) 2018/05/11 08:07:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:51 executing program 0: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:51 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:51 executing program 0: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:51 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") connect$vsock_stream(r2, &(0x7f0000000800)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000000)=""/138, 0x8a}, {&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f0000000480)=""/239, 0xef}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000140)=""/31, 0x1f}, {&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000580)=""/165, 0xa5}, {&(0x7f0000000400)=""/33, 0x21}, {&(0x7f0000000640)=""/231, 0xe7}], 0x9, 0x0) [ 373.936579] binder: 32767:301 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 373.944214] binder: 32767:301 got reply transaction with no transaction stack [ 373.953133] binder: 32767:301 transaction failed 29201/-71, size 0-64 line 2926 [ 373.965058] binder: 32767:301 transaction failed 29189/-22, size 0-0 line 3010 [ 373.979434] binder: 32767:316 IncRefs 0 refcount change on invalid ref 3 ret -22 2018/05/11 08:07:51 executing program 0: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:51 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000340)="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") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) r2 = request_key(&(0x7f0000000080)='.dead\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)='[\x00', 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$search(0xa, r2, &(0x7f0000000140)='ceph\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, r3) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000280)=@generic={0x7, 0x7fffffff, 0xc952}) r4 = dup3(r1, r0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f00000002c0)=0x1) sendto$inet6(r1, &(0x7f0000e13f4e), 0x0, 0xfffffffffffffffd, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x80}, 0x1c) recvmmsg(r1, &(0x7f0000000680), 0x0, 0x203f, 0x0) 2018/05/11 08:07:51 executing program 0: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) [ 373.987945] binder: 32767:316 got reply transaction with no transaction stack [ 374.003644] binder: 32767:316 transaction failed 29201/-71, size 0-64 line 2926 [ 374.013919] binder: 32767:301 transaction failed 29189/-22, size 0-0 line 3010 [ 374.025156] binder: undelivered TRANSACTION_ERROR: 29189 [ 374.036319] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:51 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:51 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:51 executing program 1: r0 = socket(0x1, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x2}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/11 08:07:51 executing program 6: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r3 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:51 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:51 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in=@multicast2}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:51 executing program 7: r0 = socket(0x11, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:51 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:51 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:51 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:51 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="c6295e4eca6c09b612ec6f") r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000000100000000000000000000000000000000000010000000000000000031a53cd4a1cb8b0c6c370900b9ed831796e1369cca9e322df87467d71444", @ANYPTR=&(0x7f00000002c0)=ANY=[], @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYBLOB="0200000000000000"], 0x0, 0x0, &(0x7f00000003c0)}) [ 374.809802] binder: 354:358 transaction failed 29189/-22, size 0-0 line 3010 [ 374.834636] binder: 354:371 transaction failed 29189/-22, size 0-0 line 3010 [ 374.849395] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:51 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:51 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:51 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:52 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:52 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) [ 374.855185] binder: undelivered TRANSACTION_ERROR: 29189 [ 374.876306] binder: 377:380 transaction failed 29189/-22, size 1152921504606846976-0 line 3010 2018/05/11 08:07:52 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:52 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") pwrite64(r0, &(0x7f0000000000)="467391aaaa0af203bc6f35574aed7eada4f09ee41c2e4e9713d1cf9a46a68af0fee53ecbf3c80eea41031634d9ad660f57f129d7280786a8993d8e3e8f1a67710fb8893772a1656607f123ad490b8ddbd47c78504350295d8fff", 0x5a, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:52 executing program 1: r0 = socket(0x11, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:52 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) fchmodat(r2, &(0x7f00000000c0)='./file0\x00', 0x84) [ 374.903344] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/11 08:07:52 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:52 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='maps\x00') write(r0, &(0x7f0000000080)="4f508156204146268520b1aa9cb86b5db746e3f6c6666fc06cc29a88b42ebf3b370d319b61fb2a7b18050d557b73a0170929b9ad0a56fd9b33543780cd4f4a6e8b182402da26acf3aa1efbd1449091b5379e2e06a7404ea0c9929dd4c30c7d31f3b6a62ce91e132400a790fcd44747d794d7ffcf2e32e22700c39327ba3d347baad4b8ee1e7434ff05d7", 0x8a) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) 2018/05/11 08:07:52 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r2 = syz_open_procfs(0x0, &(0x7f0000865ff5)='clear_refs\x00') mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x266b084257ded2f2, 0xffffffffffffffff, 0x0) sendfile(r2, r1, &(0x7f0000000080)=0xf, 0xd) r3 = socket$inet6(0xa, 0xf, 0x2000000000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r3, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:52 executing program 7: r0 = socket(0x11, 0x3, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:52 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:52 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:52 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:52 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:52 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:52 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000400), &(0x7f00000003c0)=0x4) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000200)=0x7ff, 0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xee, "6657f827287ffd8f1cc0749964bfeffde912c80981a09f6686fefbf0eba5d377e55a8eed03a281f2d8ad6445cf3941fceb223c3502885d96be7dffbbe14a5a9325bc1d62a32414361500d0b793d2f9052063f599c1a4cf4d106f7b0b0448abb500707898a3c4d1f79521e27d1c645f5271fd842536e56ebcfba9b742a51a3d96d44335e2152830f7d6c328c61f56128ab9b24143ac6161317038968b24bc586e745e49f3c806b79318ece3a4a38a0f6501f9e3de140fba803f853d384380b5c03e0c82da65857fa2c20aba70a01805dfc9c63c34ee05f097c4a8dcf0e67143e27928ad03af68bdc207a1a80bfd92"}, &(0x7f0000000340)=0xf6) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r2, &(0x7f0000000140)=0x4) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0x400}, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r2, 0x9}, &(0x7f00000000c0)=0x8) 2018/05/11 08:07:52 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:52 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec6f") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) [ 376.521768] INFO: trying to register non-static key. [ 376.526884] the code is fine but needs lockdep annotation. [ 376.532487] turning off the locking correctness validator. [ 376.538086] CPU: 1 PID: 442 Comm: syz-executor7 Not tainted 4.9.99-gc462abb #23 [ 376.545503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 376.554831] ffff8801bfc6f790 ffffffff81eb0f09 0000000000000000 ffffffff85b2d700 [ 376.562810] ffff8801c5b438a0 ffffffff85581838 0000000000000000 ffff8801bfc6f810 [ 376.570796] ffffffff81230b40 ffffffff8558c640 ffff88019cbeb080 000000000000377a [ 376.578772] Call Trace: [ 376.581331] [] dump_stack+0xc1/0x128 [ 376.586667] [] register_lock_class+0x1460/0x1470 [ 376.593045] [] __lock_acquire+0x169/0x4070 [ 376.598924] [] ? check_preemption_disabled+0x3b/0x170 [ 376.605736] [] ? debug_check_no_locks_freed+0x210/0x210 [ 376.612728] [] ? _raw_spin_unlock_irq+0x27/0x50 [ 376.619014] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 376.625830] [] ? _raw_spin_unlock_irq+0x38/0x50 [ 376.632128] [] ? finish_task_switch+0x1ed/0x640 [ 376.638415] [] ? finish_task_switch+0x1c1/0x640 [ 376.644706] [] ? __schedule+0x61f/0x1bd0 [ 376.650388] [] lock_acquire+0x130/0x3e0 [ 376.655983] [] ? tun_do_read.part.42+0x74d/0x1250 [ 376.662464] [] _raw_spin_lock+0x36/0x50 [ 376.668057] [] ? tun_do_read.part.42+0x74d/0x1250 [ 376.674517] [] tun_do_read.part.42+0x74d/0x1250 [ 376.680807] [] ? tun_cleanup_tx_array.part.39+0x1f0/0x1f0 [ 376.687975] [] ? check_preemption_disabled+0x3b/0x170 [ 376.694788] [] ? wake_up_q+0xe0/0xe0 [ 376.700125] [] tun_chr_read_iter+0x161/0x1f0 [ 376.706159] [] __vfs_read+0x3dd/0x570 [ 376.711583] [] ? do_iter_readv_writev+0x4b0/0x4b0 [ 376.718050] [] ? __fsnotify_update_child_dentry_flags.part.1+0x300/0x300 [ 376.726509] [] ? fsnotify+0x1100/0x1100 [ 376.732105] [] ? avc_policy_seqno+0x9/0x20 [ 376.737966] [] ? selinux_file_permission+0x82/0x470 [ 376.744775] [] ? rw_verify_area+0xe5/0x2b0 [ 376.750629] [] vfs_read+0x120/0x380 [ 376.755876] [] SyS_pread64+0x145/0x170 [ 376.761383] [] ? SyS_write+0x1c0/0x1c0 [ 376.766893] [] ? do_syscall_64+0x48/0x490 [ 376.772661] [] ? SyS_write+0x1c0/0x1c0 [ 376.778168] [] do_syscall_64+0x1a6/0x490 [ 376.783860] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb 2018/05/11 08:07:54 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:54 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:54 executing program 6: r0 = socket(0x10, 0x800, 0x4) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:54 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r2 = syz_open_procfs(0x0, &(0x7f0000865ff5)='clear_refs\x00') mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x266b084257ded2f2, 0xffffffffffffffff, 0x0) sendfile(r2, r1, &(0x7f0000000080)=0xf, 0xd) r3 = socket$inet6(0xa, 0xf, 0x2000000000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r3, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 7: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:54 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:54 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) write(r1, &(0x7f0000000080)="82fe8eeb0658ee4060c01c1d126a7774d41ecc11d79bfb31939004f2fa1304f8fbdd479e5ac69d3e08bc12d3e043d6ad27daf0a6304b71bbf4f6457f66c8e7954d4d1158e925f2693068f508028f2d780eb22fe8b631852c96d213fe2f605de4954c2c81156193d3308b5bb7e8627c5afea7b498f3c742919d6a819673e50d3961ac9b0964ceffcce4556dea1e5c19902ddc9307716cff716a4020c1bdc8370ceee7181e0b3bbf0ad92908a5f17eef65e969c53d5b5c56faf4deb4346c09906dc2900f1cbf8afd25de7cf7dd505d440c3bcb9c94bd9814a6e741d860b04d5b89527076c8", 0xe4) sendto$inet6(r0, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x80022a}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:54 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x0, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:54 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:54 executing program 6: r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, @in={0x2, 0x4e22, @broadcast=0xffffffff}], 0x30) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000040)='veth1\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r2 = syz_open_procfs(0x0, &(0x7f0000865ff5)='clear_refs\x00') mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x266b084257ded2f2, 0xffffffffffffffff, 0x0) sendfile(r2, r1, &(0x7f0000000080)=0xf, 0xd) r3 = socket$inet6(0xa, 0xf, 0x2000000000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r3, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:54 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x0, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 3: r0 = socket(0x11, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x200000, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(0xffffffffffffffff, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x203f, 0x0) socket$l2tp(0x18, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000002e00)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000002d00)=[{{&(0x7f00000001c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000300)=""/82, 0x52}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x3}, 0xfff}, {{&(0x7f00000013c0)=@ll, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001440)=""/70, 0x46}], 0x1, &(0x7f0000001500)=""/4096, 0x1000, 0xfffffffffffffc00}, 0x1}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002500)=""/228, 0xe4}, {&(0x7f0000002600)=""/67, 0x43}, {&(0x7f0000002680)=""/33, 0x21}, {&(0x7f00000026c0)=""/199, 0xc7}, {&(0x7f00000027c0)=""/211, 0xd3}, {&(0x7f00000028c0)=""/232, 0xe8}, {&(0x7f00000029c0)=""/153, 0x99}], 0x7, 0x0, 0x0, 0xff}, 0x7ff}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b00)=""/163, 0xa3}, {&(0x7f0000002bc0)=""/124, 0x7c}], 0x2, &(0x7f0000002c80)=""/96, 0x60, 0x3f}, 0xfffffffffffffff7}], 0x4, 0x40000020, &(0x7f0000002e40)={r2, r3+10000000}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e21, @multicast2=0xe0000002}, {0x306}, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, 'bpq0\x00'}) 2018/05/11 08:07:54 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f0000000000)="6e65742f6465765f6d6361737400c087ea55011e14c9e347dd1f55a6026a1cb7e067f3c577981c0994a1e80d90d49d68bdbc91fab9c1c7f063e676e83c740e2d647534a1045850a23665d81ca07270193f5d003c10e34239844c5b6e8d1721c0b53a91c2f6ec1e5484645db3df") r2 = syz_open_procfs(0x0, &(0x7f0000865ff5)='clear_refs\x00') mmap(&(0x7f0000e00000/0x200000)=nil, 0x200000, 0x0, 0x266b084257ded2f2, 0xffffffffffffffff, 0x0) sendfile(r2, r1, &(0x7f0000000080)=0xf, 0xd) r3 = socket$inet6(0xa, 0xf, 0x2000000000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r3, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r3, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:54 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:54 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9a") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:54 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xa36}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0xb0, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0xfc2, @mcast1={0xff, 0x1, [], 0x1}}, @in6={0xa, 0x4e23, 0x200, @empty, 0x100000000}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e23, 0x3, @loopback={0x0, 0x1}, 0x1}, @in6={0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x2196}, @in={0x2, 0x4e23, @multicast2=0xe0000002}, @in={0x2, 0x4e22, @multicast2=0xe0000002}]}, &(0x7f00000003c0)=0x10) r2 = socket(0x11, 0x3, 0x0) ioctl(r2, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r4 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000000)={0x5, 0x100000001, 0x1}) preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:54 executing program 7: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:54 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:54 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x0, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0), 0x0, 0x0) close(r1) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0), 0x0, 0x0) close(r1) 2018/05/11 08:07:54 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0), 0x0, 0x0) close(r1) 2018/05/11 08:07:55 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:55 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:55 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:55 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r2, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:55 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) 2018/05/11 08:07:55 executing program 7: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x0, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:55 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:55 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e72", 0x8, 0x0) close(r1) 2018/05/11 08:07:55 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:55 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(r1, &(0x7f00000023c0), 0x0, 0x0) 2018/05/11 08:07:55 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e72", 0x8, 0x0) close(r1) 2018/05/11 08:07:55 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e72", 0x8, 0x0) close(r1) 2018/05/11 08:07:55 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bff", 0xc, 0x0) close(r1) 2018/05/11 08:07:55 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bff", 0xc, 0x0) close(r1) 2018/05/11 08:07:55 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bff", 0xc, 0x0) close(r1) 2018/05/11 08:07:55 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d4", 0xe, 0x0) close(r1) 2018/05/11 08:07:56 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:56 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:56 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d4", 0xe, 0x0) close(r1) 2018/05/11 08:07:56 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002a80)='/dev/sequencer2\x00', 0x2, 0x0) ioctl(r0, 0xb, &(0x7f0000002a40)="1ca7a4a10099328a294357e02c4275fa3a5dd932afab89aae83b6758ab120500") setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000300)={0x7, {{0xa, 0x4e23, 0x81, @dev={0xfe, 0x80, [], 0x20}, 0x9}}, {{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x16}}}}, 0x108) socketpair$inet(0x2, 0x8000f, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000440), &(0x7f0000002640)=0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000025c0)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002680)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000026c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002740), &(0x7f0000002780)=0xc) getpgrp(0xffffffffffffffff) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000002800)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'\x00', {0x2, 0x4e24, @broadcast=0xffffffff}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002600)='/dev/sequencer\x00', 0x1, 0x0) preadv(r4, &(0x7f0000002540)=[{&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/96, 0x60}, {&(0x7f0000000140)=""/35, 0x23}, {&(0x7f0000002480)=""/170, 0xaa}], 0x6, 0x10000054) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000002700)) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002840)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000002a00)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f00000029c0)={&(0x7f0000002880)={0x138, r5, 0x610, 0x70bd2d, 0x25dfdbfe, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1a}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x33d8e67c}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xae}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000000}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000084}, 0x800) 2018/05/11 08:07:56 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000140)) r1 = socket(0x11, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r2, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r2, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:56 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(r1, &(0x7f00000023c0), 0x0, 0x0) 2018/05/11 08:07:56 executing program 7: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:56 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:56 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d4", 0xe, 0x0) close(r1) 2018/05/11 08:07:56 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac11") mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) preadv(r1, &(0x7f00000023c0), 0x0, 0x0) 2018/05/11 08:07:57 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:57 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x0, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:57 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d400", 0xf, 0x0) close(r1) 2018/05/11 08:07:57 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000000)=0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = memfd_create(&(0x7f0000000040)="255bf42e00", 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000080)={0x3ff, 0x8, 0x7f}) r3 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r3, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) 2018/05/11 08:07:57 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:57 executing program 3: socket(0x11, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x101000, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:57 executing program 7: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:57 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:58 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:58 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:58 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d400", 0xf, 0x0) close(r1) 2018/05/11 08:07:58 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x0, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:58 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:58 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000440)="6e65742f6d6366696c74657236007711b65f48c17fa031e2c95938d0cc3a1c07ddf89a74c9fc050093263858898491b8") preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000100)=""/28, 0x1c}], 0x1, 0x10000054) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) 2018/05/11 08:07:58 executing program 7: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:58 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = socket$inet6(0xa, 0x80000000000000b, 0xfffffffffffffffc) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}, 0x81, 0x1ff}, &(0x7f0000000280)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)={r2, 0xe0, "4c0d32d11a359c065450dbfab6948fa3360efec778239cb2777517033c2542c7a37bfe90649cbec1e48be0fafed61551b9228cbb2264f197d4af55a1c2610122f1736115c209c5c14f9385a7206037d0b5c439d3eb830646790db79b5287f70a0d5ac1ea833d5fc55207717595673c5b88ba1ff403c68150c70a3a7baca135d61769a46252aede1e744a7db422d9e6ecb2f7665258d7a3ed02554b749172e6611ae34ab01a3a185dcf8d7ebaeb17ca0df9e74e6702bd00d766c0b9e923c8c46033f1819ea3fce3497316ba33ef6d3d677a1a223d025663ed98207db2784d998d"}, &(0x7f00000003c0)=0xe8) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) sendto$inet6(r1, &(0x7f0000e13f4e), 0x28, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000080)={@loopback}, &(0x7f00000000c0)=0x14) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x2, 0x203f, 0x0) 2018/05/11 08:07:58 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d400", 0xf, 0x0) close(r1) 2018/05/11 08:07:58 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x0, 0x100000a, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:58 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(r1) 2018/05/11 08:07:58 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(0xffffffffffffffff) 2018/05/11 08:07:58 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) 2018/05/11 08:07:58 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) 2018/05/11 08:07:58 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(0xffffffffffffffff) 2018/05/11 08:07:58 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) 2018/05/11 08:07:58 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(0xffffffffffffffff) 2018/05/11 08:07:59 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) 2018/05/11 08:07:59 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:59 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r1, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) close(0xffffffffffffffff) 2018/05/11 08:07:59 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:59 executing program 6: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) getresgid(&(0x7f0000000900)=0x0, &(0x7f0000000940), &(0x7f0000000980)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000009c0)=0x0) fstat(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000b00)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f0000000c00)=0xe8) lstat(&(0x7f0000000c40)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpgrp(0xffffffffffffffff) r10 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000d00)={0x0, 0x0, 0x0}, &(0x7f0000000d40)=0xc) sendmsg$unix(r0, &(0x7f0000000e80)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f0000000440)="07f3112b11cb1eb72a4d27a338c32cee00be2cba165ba9fb6233661479078a8e8e9d7f8ae5d467cfb781a1a92d966b6ccdc980d2214813bf2c7284923e0f2cd9da3935e734dd2315add6acc869a9d3df4358cb95cb24eaccb12e1e94cd06040d8a464a62136e2a1da9755ed269dc8dc62c7ac40d0791e7ff3c3a7a208ede8d8ad812f44eff6862f2db4a93c0a66d3c2593fa5e3c9e68762b22cbf5ebd843388e6787aaa1282f09e2215ec8ea1a88d9a2b60867075f37f3f7994b473eca7511b54d3ca01b96f7378fb48a4a1263a1e0dc5107cbc498819cc668a54c328b173859ffd75460a95f0e7e1d", 0xe9}, {&(0x7f0000000540)="c675c77fbc433247aeac9d72dc69b33d1c2ddcfbfdb8725f44c3f98a7b6f7f955e098c95f08310e155e007ad537a2bfda59f5aa0e5f7fcdcf2f78117c5db83d39750b6f9ce83f58b20dce39a84873692c83857e3786840bd40bacbdb8f3c030de1a24fd0ed11a56fcc5043fc2f8ef78309a00a285332f6905db272c98bd14b61a9bdd4d4287bfdd86daa117bc0a923d2b1130f1f586639de33e0d0a103fd5b46e19f74be5c2cbcb682dea6699f44e1a56b0318a4f57be07a1008c46af7a831ac", 0xc0}, {&(0x7f0000000600)="21f3d3881e32b6b4ab4e0c60f8b8ded4daef849672361699e5bfce211077658ada25d748bf09090697676847b3634bb3d581d40deba5c498fefa3d8a85d1ff4b0cfa2fc9e3fea9a835f6ba049734e1e1360cdb8c2c593f0c41b170498fe2c716f91e303e", 0x64}, {&(0x7f0000000680)="aca1b7eb5fdc410d791e60b2737f3f4d85f04d1a5aff39e24b447245f799eadd8a40a9a7b20afd3369d4198b62f706bbc01ef50e599f01423cac65eb8b9949047e09a2f41dc22f46fbd3fb39d8e123d180986ffa267db59bbbcdcdf829115eb1a7b85c6e2bbf375fdbb0486363c6fa87be41", 0x72}, {&(0x7f0000000700)="33414bccff477e7ced21e60cff7bf48fcd7582ee84f1cb4d999661a4ea6001bc1676f1aa0f14d6f7e84e46764634f2901c26c6c57911682e7d1ad3804625dfc8f782bfca22bb61a01bff5b803da881e5fc099b3105441765fde93d0d0972698942b3db7409b8effb15cf6b27442c0e2a1c097f71aa43839b61b6748427d9b2181818cd814f6abbd8c3e4f433b87600384bbc90cdad3c28af6c6ddfa509a3d8479fea2654711aff3c047a4a03e6078c1383004b6b6d627dcb45cfed4a87ea4e28c542cbc4a93053d6cf953fb4675d91d1770ddc1d6f18a763a3fef98dc778931e64", 0xe1}, {&(0x7f0000000800)="8d4f8868ecbde8c379b18845c375527a5b3a156eb2f025ee51a828d02149af93cfb091aa16e759521b63a2dc966869d41305572bf7e52ddf27c7cb5783ccd1836391d4c1b95f3e052ef52e5c314a0ef9fb4a193d292adedf", 0x58}], 0x6, &(0x7f0000000d80)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r1, 0x0, r2}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0xe0, 0x8000}, 0x4000) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/enforce\x00', 0x80, 0x0) ioctl$GIO_CMAP(r12, 0x4b70, &(0x7f0000000f00)) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r13, 0x29, 0x2e, &(0x7f00000001c0)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}, 0x108) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f0000000f40)={0x0, 0x7, 0x3, 0x1ff, 0x1f, 0x14e1}, &(0x7f0000000f80)=0x14) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r12, 0x84, 0x5, &(0x7f0000000fc0)={r14, @in6={{0xa, 0x4e23, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0x44d}}}, 0x84) preadv(r13, &(0x7f0000000140)=[{&(0x7f0000000040)=""/109}, {&(0x7f00000000c0)}, {&(0x7f0000000300)=""/190}, {&(0x7f00000003c0)=""/77}], 0x0, 0x10000054) 2018/05/11 08:07:59 executing program 3: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c49b612ec6f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x177, 0x1e3) flistxattr(r1, &(0x7f0000000080)=""/86, 0x56) sendto$inet6(r1, &(0x7f0000e13f4e), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x100000000000, @dev={0xfe, 0x80, [], 0x16}}, 0x1c) recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x3af, &(0x7f0000000340)}}, {{&(0x7f00000006c0)=@rc, 0x80, &(0x7f0000000540), 0x35c, &(0x7f0000000580)=""/206, 0xce}}], 0x1, 0x203f, 0x0) 2018/05/11 08:07:59 executing program 7: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c6295e46ca6c") r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'ifb0\x00', 0xe86824d2c1c833cb}) pread64(r1, &(0x7f0000000080)=""/98, 0x62, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=@dellink={0x34, 0x11, 0x405, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ifb0\x00'}]}, 0x34}, 0x1}, 0x0) 2018/05/11 08:07:59 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x0, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:59 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) close(0xffffffffffffffff) 2018/05/11 08:07:59 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c") openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) 2018/05/11 08:07:59 executing program 5: socket(0xa, 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r0, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) 2018/05/11 08:07:59 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="c6445e46ca6c09b612ec6f") getpid() r1 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') readv(r1, &(0x7f0000000740)=[{&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/128, 0x80}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x3) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) ioctl$KDENABIO(r1, 0x4b36) sendto(r1, &(0x7f00000008c0), 0x0, 0x0, &(0x7f0000000900)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x9}}}, 0x80) ptrace$peek(0x1, 0x0, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000aba000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000831000)={0x14, 0x10, 0x0, 0x5}, 0x14}, 0x1}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000980)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000700)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'gretap0\x00', r3}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x1, &(0x7f00000007c0)="ad413983dce8fda692b19ca665e8ec77fa462cd42977c0457fd5e513959b8c97ae621bb4901c4e02feb9c506bb7a185e14ce240442c0569367f41339a6de4e23d1c7ab2eec7dc1dc53ce1c19d3504046b72e65dabe993f437b12590fe45fc9a1236595beacd35ff917e5a427d696b47b636d7b8ab7a062ac1180123f81627f543e06398f178e65a5f2920a33200f49ae23b1750ee243d672a52ec9bcc307ac32ec5b8c81d340629118e2f350b2e2f6c2e23459ddb4e2be934131ffd1bc1800be84c18d84b99e09f7128265ce2298e7d06b3c15b7f3a85f00000000000000") mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) fstatfs(r1, &(0x7f00000002c0)=""/11) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000008c0)='.', &(0x7f0000000080)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)="9af576624811f8f8bf3ff31413ad09a266f00a069d096a4da9ec69c3354a2fada6") mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)="d6") preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x1}) 2018/05/11 08:07:59 executing program 0: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c6295e4eca6c09b612ec6f") close(0xffffffffffffffff) 2018/05/11 08:07:59 executing program 5: socket(0xa, 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r0, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) 2018/05/11 08:07:59 executing program 2: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c6295e46ca6c09b612ec") ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:59 executing program 0: socket(0xa, 0x1, 0x0) close(0xffffffffffffffff) 2018/05/11 08:07:59 executing program 1: r0 = socket(0x11, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x7, 0x0, 0x1, 0x49}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)) 2018/05/11 08:07:59 executing program 5: socket(0xa, 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x1, 0x0) pwrite64(r0, &(0x7f00000001c0)="c064c372b43c7e7294000bfff3d40060", 0x10, 0x0) [ 383.129702] ================================================================== [ 383.137104] BUG: KASAN: use-after-free in tun_do_read.part.42+0x1033/0x1250 [ 383.144186] Read of size 8 at addr ffff8801d8e3d500 by task syz-executor7/786 [ 383.151440] [ 383.153046] CPU: 1 PID: 786 Comm: syz-executor7 Not tainted 4.9.99-gc462abb #23 [ 383.160463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.169795] ffff8801c2f9f9d8 ffffffff81eb0f09 ffffea0007638e00 ffff8801d8e3d500 [ 383.177794] 0000000000000000 ffff8801d8e3d500 1ffff1003b1731c9 ffff8801c2f9fa10 [ 383.185804] ffffffff815652eb ffff8801d8e3d500 0000000000000008 0000000000000000 [ 383.193825] Call Trace: [ 383.196390] [] dump_stack+0xc1/0x128 [ 383.201727] [] print_address_description+0x6c/0x234 [ 383.208381] [] kasan_report.cold.6+0x242/0x2fe [ 383.214594] [] ? tun_do_read.part.42+0x1033/0x1250 [ 383.221147] [] __asan_report_load8_noabort+0x14/0x20 [ 383.227871] [] tun_do_read.part.42+0x1033/0x1250 [ 383.234251] [] ? tun_cleanup_tx_array.part.39+0x1f0/0x1f0 [ 383.242018] [] ? wake_up_q+0xe0/0xe0 [ 383.247355] [] tun_chr_read_iter+0x161/0x1f0 [ 383.253398] [] __vfs_read+0x3dd/0x570 [ 383.258821] [] ? do_iter_readv_writev+0x4b0/0x4b0 [ 383.265287] [] ? __fsnotify_update_child_dentry_flags.part.1+0x300/0x300 [ 383.273749] [] ? fsnotify+0x1100/0x1100 [ 383.279344] [] ? avc_policy_seqno+0x9/0x20 [ 383.285201] [] ? selinux_file_permission+0x82/0x470 [ 383.291943] [] ? rw_verify_area+0xe5/0x2b0 [ 383.297802] [] vfs_read+0x120/0x380 [ 383.303051] [] SyS_pread64+0x145/0x170 [ 383.308566] [] ? SyS_write+0x1c0/0x1c0 [ 383.314089] [] ? fput+0xd2/0x140 [ 383.319076] [] ? SyS_ioctl+0x66/0xc0 [ 383.324412] [] ? SyS_write+0x1c0/0x1c0 [ 383.329920] [] do_syscall_64+0x1a6/0x490 [ 383.335611] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 383.342517] [ 383.344118] Allocated by task 786: [ 383.347627] save_stack_trace+0x16/0x20 [ 383.351571] save_stack+0x43/0xd0 [ 383.354996] kasan_kmalloc+0xc7/0xe0 [ 383.358678] __kmalloc+0x11d/0x300 [ 383.362190] tun_attach+0x63c/0xa70 [ 383.365798] __tun_chr_ioctl+0x2663/0x3450 [ 383.370011] tun_chr_ioctl+0x2a/0x40 [ 383.373696] do_vfs_ioctl+0x1ac/0x11a0 [ 383.377555] SyS_ioctl+0x8f/0xc0 [ 383.380893] do_syscall_64+0x1a6/0x490 [ 383.384756] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 383.389827] [ 383.391426] Freed by task 822: [ 383.394589] save_stack_trace+0x16/0x20 [ 383.398537] save_stack+0x43/0xd0 [ 383.401967] kasan_slab_free+0x72/0xc0 [ 383.405828] kfree+0xfb/0x310 [ 383.408904] tun_cleanup_tx_array.part.39+0x16f/0x1f0 [ 383.414064] tun_detach_all+0x394/0x7e0 [ 383.418006] tun_net_uninit+0x15/0x20 [ 383.421780] rollback_registered_many+0x684/0x920 [ 383.426592] unregister_netdevice_many.part.106+0x1b/0x110 [ 383.432184] unregister_netdevice_many+0x39/0x50 [ 383.436920] rtnl_delete_link+0xdc/0x130 [ 383.440958] rtnl_dellink+0x1e7/0x670 [ 383.444728] rtnetlink_rcv_msg+0x49c/0x650 [ 383.448936] netlink_rcv_skb+0x145/0x370 [ 383.452971] rtnetlink_rcv+0x2a/0x40 [ 383.456669] netlink_unicast+0x4d8/0x6f0 [ 383.460709] netlink_sendmsg+0x78b/0xc10 [ 383.464743] sock_sendmsg+0xcc/0x110 [ 383.468425] ___sys_sendmsg+0x6fc/0x840 [ 383.472370] __sys_sendmsg+0xd9/0x190 [ 383.476142] SyS_sendmsg+0x2d/0x50 [ 383.479654] do_syscall_64+0x1a6/0x490 [ 383.483516] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 383.488587] [ 383.490187] The buggy address belongs to the object at ffff8801d8e3d500 [ 383.490187] which belongs to the cache kmalloc-4096 of size 4096 [ 383.502988] The buggy address is located 0 bytes inside of [ 383.502988] 4096-byte region [ffff8801d8e3d500, ffff8801d8e3e500) [ 383.514745] The buggy address belongs to the page: [ 383.519644] page:ffffea0007638e00 count:1 mapcount:0 mapping: (null) index:0x0 compound_mapcount: 0 [ 383.529831] flags: 0x8000000000004080(slab|head) [ 383.534555] page dumped because: kasan: bad access detected [ 383.540248] [ 383.541844] Memory state around the buggy address: [ 383.546757] ffff8801d8e3d400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 383.554090] ffff8801d8e3d480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 383.561420] >ffff8801d8e3d500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 383.569009] ^ [ 383.572346] ffff8801d8e3d580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 383.579674] ffff8801d8e3d600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 383.587001] ================================================================== [ 383.594427] Kernel panic - not syncing: panic_on_warn set ... [ 383.594427] [ 383.601771] CPU: 1 PID: 786 Comm: syz-executor7 Tainted: G B 4.9.99-gc462abb #23 [ 383.610411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 383.619747] ffff8801c2f9f938 ffffffff81eb0f09 ffffffff843c4fe5 00000000ffffffff [ 383.627766] 0000000000000000 0000000000000001 1ffff1003b1731c9 ffff8801c2f9f9f8 [ 383.635751] ffffffff8141f855 0000000041b58ab3 ffffffff843b86e8 ffffffff8141f696 [ 383.643727] Call Trace: [ 383.646292] [] dump_stack+0xc1/0x128 [ 383.651634] [] panic+0x1bf/0x3bc [ 383.656982] [] ? add_taint.cold.6+0x16/0x16 [ 383.662941] [] kasan_end_report+0x47/0x4f [ 383.668711] [] kasan_report.cold.6+0x76/0x2fe [ 383.674830] [] ? tun_do_read.part.42+0x1033/0x1250 [ 383.681392] [] __asan_report_load8_noabort+0x14/0x20 [ 383.688208] [] tun_do_read.part.42+0x1033/0x1250 [ 383.694762] [] ? tun_cleanup_tx_array.part.39+0x1f0/0x1f0 [ 383.701920] [] ? wake_up_q+0xe0/0xe0 [ 383.707266] [] tun_chr_read_iter+0x161/0x1f0 [ 383.713299] [] __vfs_read+0x3dd/0x570 [ 383.718731] [] ? do_iter_readv_writev+0x4b0/0x4b0 [ 383.725199] [] ? __fsnotify_update_child_dentry_flags.part.1+0x300/0x300 [ 383.733659] [] ? fsnotify+0x1100/0x1100 [ 383.739271] [] ? avc_policy_seqno+0x9/0x20 [ 383.745146] [] ? selinux_file_permission+0x82/0x470 [ 383.751800] [] ? rw_verify_area+0xe5/0x2b0 [ 383.757668] [] vfs_read+0x120/0x380 [ 383.762922] [] SyS_pread64+0x145/0x170 [ 383.768441] [] ? SyS_write+0x1c0/0x1c0 [ 383.773957] [] ? fput+0xd2/0x140 [ 383.778953] [] ? SyS_ioctl+0x66/0xc0 [ 383.784293] [] ? SyS_write+0x1c0/0x1c0 [ 383.789806] [] do_syscall_64+0x1a6/0x490 [ 383.795502] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 383.802782] Dumping ftrace buffer: [ 383.806296] (ftrace buffer empty) [ 383.809983] Kernel Offset: disabled [ 383.813589] Rebooting in 86400 seconds..