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"}, &(0x7f0000002240)=0xffffffffffffff41) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000200)=0x3) 2018/05/17 02:39:37 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10001, 0x8900) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000580)={0x0, 0xec, "918cfde6283c79c9e77ce187e9ce1e68df88719fd0720e3f8fd9da87c5989a8cdefc8c29a93b9b32fcc9ef2cb53c20687236880ecf847f3999b5c7d1278995cdad5412e76e5ec5dcb191a8b81367287917537c55f2b606478924a74f4e6a49098cb2c9ac0425236c643ac907e603c6cee54126142a29aab2fef0829082c11b2ee7557ad2c9156ab861fc2ec8ae2e99981d482dd4fd3596ceb6eabcbbdbf68f7cf16c71cd278e0f71b9df36e70b7dcba36d372961626be735de54692c10a91cf0caf10006f541876f05034911e3a277bc4eebbd29bcb35eeb203d09890e822259c81260fa7fb718c75804782f"}, &(0x7f0000000680)=0xf4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000008ac0)={0x1, [0x0]}, &(0x7f0000008b00)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000008b40)={0x0, 0x80}, &(0x7f0000008b80)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000008c40)=[{&(0x7f0000000040)=@in6={0xa, 0x4e24, 0xfffffffffffffffc, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000180)="0422c8c309536d6308fca8f988b8c2f865d9aad6e697047f2f193c03c5e7fc5dc9b2aafc10179d266efd35c907c8a0dd59dbcadeb63b7798878d69756a66dfd53dbc5f99fa0d05e9350d2cf8fd253bc18f8ef027221e477de6457d206c6f73672c279303a3ce80acc2b45009d580ac7b6ef496cabf585e7fb2e7cd82fc3e5f7648bfe60285ffd93db90a2b1134a71852ee8112132704a4aacfb0293af30bf43b06d4539fbb9255a2d27fa9f3922e16ff2796c1ac8ff31d7c3fd5934588038ec8f84ecde65f2ca3190632662e359333378b95c60db5c768021e7c1943dc7012052af9fc63b709", 0xe6}, {&(0x7f0000000280)="709c58947c8d902430292314c6c23107642aa05e915483e5e11c556163ab2ffdbc0fe1cf457632a0d48794366135d646864b32ceb377d004ea6b9653a27508c841aff3fa083f4e95bb263be7870c23bac4143b47f672986b440bcdbea28f4d64f8a24e7be6b026a576cf68ff4cb10fead7375a0bb2ab13176dbb9bb017a0a662b76284c25e4b3e594da31ddd92ca52b706b868faac9254c5272622c52c838b464a4a96599717d7259c4bfbf4e772bf9f241cbcd8cb3d46addeb77d5f598d6ab36f29177942059fe67410f2f560174e14b89da591cc", 0xd5}, {&(0x7f0000000380)="7381dbdd55a0fa0438753e55927ef72a5811a8933e6dc665b2c50a0af3c1b8291ef672d20247b778469c11e030ac1581d443de29abbf4fcc75f73b09d0a23439ac5125ac90b8dd065413d53699ea4de8b3c1592e81918f4d8881c1a3eb65e569bfb0c3e63ba75485aafc9933b5670661266168abf48638797c432d8a03cb70adef1a189d5c8e0fef4978b611455adb86d058f563811a4b96b7ec2dd14dd65d972ac73f927153b91518e67f31e3c475a378f1179182481c1fd67bf46549a95ba9070bf79f2df530f1c1b43c8270c34c70aea0f104d901a41b13d3b3c001c077ec15e2fce4f602ec5cf5ad5015bafd06fe", 0xf0}, {&(0x7f0000000080)="cedea07da10b50f9ec4a83e9b66dcb0d071395c4e1c411c808a77a1278a95e6817a59dadff7ab72042c051d0de6d7218f7aa193d47031fbcf01c3f", 0x3b}, {&(0x7f0000000480)="0b17a00885fa07ec6148f6c64cd43ba15187a8967de53d15f19ef5a12f9bffb834614213d23b83d55a4529a61bbe9c7916e0028f408dad34a853bbe8f0d87f991cf55576d09c030f56a42616dd0f267a0b8b205ecc62fd360dea199bc206905b94dd193e2d641fc01753731814a399ddc068edad56c62c494853c6cdfc17c408fd6bb25c75f4a729009b63184ee45b94798ee4886a33f750e461856eee6e89f7f0642d46de273a18eab5d6ef8378e25cb8b4b96eb0a6694e0914b6212fa6b2e71c63e44afb31a811d6332c085cc765111d6b91d67ff6402403", 0xd9}], 0x5, &(0x7f00000006c0)=[@authinfo={0x10, 0x84, 0x6, {0x4}}, @sndinfo={0x1c, 0x84, 0x2, {0xfff, 0x9, 0x3, 0xfffffffffffffffd, r2}}, @dstaddrv4={0x10, 0x84, 0x7, @rand_addr=0x4}], 0x3c, 0xc0}, {&(0x7f0000000700)=@in6={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff]}, 0x71868e79}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f0000000740)="e8f294785133c7ee7bb7c2b8adbee58093c299bdbd91294547a694ccab3050bfc19df2b2e2154474724e94cde2bd1671b0402e1145d00978233ae91f33af0bf55832a35e7a05778b9dc0581bec228003b4c44cb802da822b762ff7e5e72e47a1a367a2a655bf6b1d6e2b4af9d50252bb9c6c3ed144684e770762921102", 0x7d}, {&(0x7f00000007c0)="1cfecd8db2054338fb19231d25fe359b2c9fd2fa1312a6f530f648db39c3f27928795be6c35016021573140149aa30c32d4e7dd57b808acfbb15d219be00e31c143953cdc33d9e340e01b4c440186b6378eb598dd5014246b5b6976e96ed565018f7c180eea6865050f4dc5c62903792f2c007ae3c8bc585235732ce4d7230cd2e8050033aa76a6a44ebb9a23001d4b300541c1f9cd51899d80ce6489938a4ff0a845675176c666050550215bfb1529166578c6724b53523abb243d31fabb4dd4fb77543e5ad9c3ab17c2df8fd0bc53b09dc806e1d2862815812878f", 0xdc}, {&(0x7f00000008c0)="cbaaf2a385375af891b45db23bc79271c52bd3cb4da23dd851885b4924676b614838dbca6bf0bd0ade1e16492feb28dfaffdef036c2c538fb7d5e0b32c8a459e168817829188015a9ccb9c8044b225434fa442d47e810a30b550cb1d5917c7189072e94179a6802d7e7b514b979335ede83996e70368377c9f9b63d7afe35dd835b491", 0x83}, {&(0x7f0000000980)="8f24a4b72d0370928efe13dec2c2e61e4f90605f658738ff592805fe6ebc54237396716919ee5068dceb3d3c21cd3476918baaad6eb356ce5b19ec50bf702a10cf7d87f655a2621a696bf200b65f04030d8ddec56ad98071b424178c28e33fa493b4c67cd5a1c090055c838b2b199cd0ed069e0a6b906f63339b08fa4324fc70f9bf51ef50fd10d53f3c35694c3db43d43f4ec21d7fc03470873c3c184ed71bdff85531dc6fba9def1492877bae91bf97d358e14574250334e1fd7eba55621a7cba758064272a10c4877671f1a3ddcce4a8bdcddc741cc77299a538af148aa7724d7c99bd2bff66853", 0xe9}, {&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="401d234af9f4f57574758ccaca3d38448cea333fea", 0x15}, {&(0x7f0000001ac0)="19d7ff358ada6a88a7afe8da1df8de87d3c6c88479c8da97d6fdad5f5e7f67dea695037fa04dd534c2411887845e3fa7cae601ad5b2cb7d703d45a5ee26ea9fc3165a40785e01c1f6c2f1983dc6c924953488e3d233c97a6bffbed530defca7f12df3dcc3eabbe7a818051d250bd1166e53636ffdaa4475840886d80d454f86324b3047272cb8b69d2500c026528cad8b9b21e13c09935cbdb0c00fe04fc0729274b26849a5ec9e22c8ece7f2f7e5400efa344c3b8b57fee6596f8ed8c7fc7", 0xbf}, {&(0x7f0000001b80)="db3a65426a2855839ed45d4ce00c55f27221fa29bb6ce39b876f6c8a167e4f7073c1acba1e53571f2524372c28ea", 0x2e}], 0x8, &(0x7f0000001c00)=[@dstaddrv6={0x1c, 0x84, 0x8, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, @dstaddrv6={0x1c, 0x84, 0x8, @mcast1={0xff, 0x1, [], 0x1}}, @dstaddrv6={0x1c, 0x84, 0x8, @local={0xfe, 0x80, [], 0xaa}}], 0x54, 0x4040010}, {&(0x7f0000001c80)=@in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f0000004100)=[{&(0x7f0000001cc0)="8dd2e62df14f278bf83ad6f30f609620489d9ddb64dac48d2c4c6d4cfdff277a6fc0b74a7a790c21ef9e1bb70d0321a2833768e85ead667069afc7332851228798e348923558005dd1df24980f53001fddd17edbfbc466552decb126aad2b0a643b8fcef163f427ab6d55dfc45ba57b29e25e3a7b7673c89d605b18d1cf047833b573ee829d1f486a44b792a15b2fcf0f4384c3f07f0", 0x96}, {&(0x7f0000001d80)="0cc90813722ee18046915e37e2fe80cb06131a57ae36f80099110f87bc53f2e7410a68d2e0693e898e5f1cf92057275d0047355a9e53aa0865c94655582e67394982c038f7660bcc153f98fc4ce6ab9dcbb950f1bc98421db0531b85a602781bd333d3f8f5b2a4d4d6c9b9add41117b5", 0x70}, {&(0x7f0000001e00)="231ac19790ed8032abd9601e41b4468b868d1eba311c355640490fb2c99d2f95c537ba780b60c98500d46ec473011665139144d7ce5edbc7c3531b9d98bf308286c769b22c8c0f3f93316c5250dee4a4a6ec1c891bdab7b3ce2c3b5a43ce33d382b4a64a1f85da05fa15769a9e822181bc5eaaa0e70f8aa1fa3d059ad5e686086b5694a1d164a3a887576c053e86d0f794086839ee9396b334399215dfd8f01fa945dfb0d9a0fbc811b00933bb9131eb4a505689da3f59da9a7c0790a7ea4a", 0xbf}, {&(0x7f0000001ec0)="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", 0x1000}, {&(0x7f0000002ec0)="1346ddb41ce8ff71308fefdd239bde9e977aa463bbeff4a8aca3f2905552e3c722b4f98d93398788acfd6dc9e36ab9801bf1fffd63c5e062d7fdee60f1d5440ad4243179f8c37948808638fe249ec5162fedd071a69ce85227f65b84a038e01cca2442e258a0bf7039c2e6e57b5bd30464332e9b818de620694bb5c87ffa0c80af1f676836f755b34ad7f3b84dafa7f0d1f447fb60ec06231ada250fcabc2e48b6b04d59711371fe43e9d77d0324d1f57fe88a0f88d2eb0e3335bc95d2", 0xbd}, {&(0x7f0000002f80)="29a8fc03431f589da221542fc28278a43cc5c4f26e1a56928a41b67a0eafe8cdaa00d30e3b4efc5b079233fb92fe59f2522cb8c8002366bc4a7407189ec41a8b4584a373aecd43822bed669c95fe0bed7b00a0ea66c106580f90760113a1c9eb41fef1", 0x63}, {&(0x7f0000003000)="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", 0x1000}, {&(0x7f0000004000)="36bf6708f1e42d6de159094768d7a41e6889317da1f2a7c56d2db9ab16fab09cb543e24caff9c65d3518300bdc4daba973bc29d7d40e76e078d3422465c1e8310daace5a2d0d18982997b5a3590e97ab73350aef7eb64da071f3c8193022c8895dd29136a0c112ecb0a8f4a8b95056be10d9b4bd94b3e8ca791e02017dfaeada4b220df4139f44a5f7d50c51ac77887209d1cd03219446278891b422947168cdccb37e4b77a77756f8afb364333cea92d81f851ced54e89dc6fe79dfbb8ac07a6ee455d76f55c3a689599f85056ffa25", 0xd0}], 0x8}, {&(0x7f0000004140)=@in6={0xa, 0x4e21, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x40}, 0x1c, &(0x7f00000065c0)=[{&(0x7f0000004180)="717676c6a05f2bda195a1fdbc09c04a82c8e40c55eaa93d4205a59e031f52e8fd79490eb0ab200cae11d6f0a1b5e63bb2057878fb788f3a1ef076d2d7ff7ecd4086292c1f915afe8ddad38b60391a1a52f3e3484701c5f117bcccdb8ebe149113e04d158ccf5a16cb9dbc2beba7fc075ab89e132e1699e1ab4b7d63bc768693846fb46ec6c79d4554acc579ee490c9723bec4fd435608088c4a078415746da065b64b005f16cc3216c8870ccd6b21841fb91fe674110bd9929fd167b19f97b6d77b49457cad2ffe7", 0xc8}, {&(0x7f0000004280)="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", 0x1000}, {&(0x7f0000005280)="ca4b0ca75baaf871b3", 0x9}, {&(0x7f00000052c0)="fbc99496b8", 0x5}, {&(0x7f0000005300)="a4478858f341733d4e007ad74a1521f704a68c66bb400cb8016c8b8f1dc15ec16cd5", 0x22}, {&(0x7f0000005340)="abfb2c3b4124051f2d94b37ce70090c65cef24a2f42dbc3e0a9bd88e6e13a7d1d544527cb24aca6cf6cdca14064a5a543bd5212d65e895631b078f359cfb2e890b23e8dee1e4eb6692e3d08fcef899fa4d50cb4880b96edae391320a5fa81fb781e8bff44d0bdc18f60554ec65607a290fbacf2a5ab95beb6c262c2dcd120beee68267730dbf21827ceeda8b", 0x8c}, {&(0x7f0000005400)="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", 0x1000}, {&(0x7f0000006400)="05c6849f3f9672b223d88841c7980d365d17bf08f884d5dfc9902c8ea564b26218e86f56c492e4c71642a5cc6719863f84f4840a7819775ede69ffaa5a0b293a120e24a89aaa4ee89735fa88771a652326214fd794a34dca0cea0a795778542772ba26ef84d8ed3efca0ada10324928313fcab260a0aede516f36386a0014dd79e72fe10c0e415fdb5041dbcfc9e7dce70672a11d56b3cac85a3ce462d45594d408da8ae5ce874d38307dbd2a9e1746f089dcb1424e42c3172ea59ad19e785325d35b62952b0a9e5f23efbca25317d575ae199198ed22d51", 0xd8}, {&(0x7f0000006500)="534b85b32e23105884c6cb6a8df91778a60f9f542e915bace74f683a9d4be1865611d69258aae6794e56f7113b16db683e51dd693b3a1153bdb75fc45dbc45bc4333191f43b0389ab48e6b2ee541b578c0d7d4270b397423a40dfa7d652cbcd65b7dafedb75bbdf0efc2dbba53a7cb4891b4ba390e90198328db61873fe064568e60288332c28066f3d53c54821477810074fe123261517c64266d08", 0x9c}], 0x9, 0x0, 0x0, 0x20040000}, {&(0x7f0000006640)=@in={0x2, 0x4e24, @loopback=0x7f000001}, 0x10, &(0x7f00000088c0)=[{&(0x7f0000006680)="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", 0x1000}, {&(0x7f0000007680)="63bbab2eb4e6e18fab12183d3d50366fb4dfebca848c7aada44ebfb0e59010c27f572b9fd8d0a0b5fa81f8ea8f68146f5f65d955a80615b26b2b82afeebce2037b47c667681df889d2d2c5e81f650b1a116f9687c7e32a53d8e712feefe5ab94b84031736cb73bb9e273158c0b97ba58bce48d9e4a14f38760b81cfd170aa84ff1dfb0f6c65563e0f5e3cc90", 0x8c}, {&(0x7f0000007740)="fd4fd92349c6238e3bee71dfb7af6c2207202df0ae08e242c3b61592e9a81956597e338e8106ae90b107dc04", 0x2c}, {&(0x7f0000007780)="23c107725cc2949cd2581a02b5e082a7c6fd6264e0f0c6094f1d8b8de0fede7107372481bc05193ccc8a3b2ab9eaafb5c3277e7c18d7fef1f1153a50ad6cc5e7b74eca03697f95475d0d026125cad7ad5ecf90a6c39c8a871450189d70741cf55e13e11f619d0b2a54cb8c2b8d7e3f873067a448b8dc07ed8da39a2f5dd1653118ebbf068751daf8b1f422725e43287eca76c36ec729cbd4311574bbb605821e00e9ec8b68f6a6eb18a2cfa6c7e5ad3b252a58d425876428edb76659e4359ba8eb043bfb8ffe5fa4e7dc599a2062", 0xce}, {&(0x7f0000007880)="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", 0x1000}, {&(0x7f0000008880)="75ddafe7e17fbe0e46bde6", 0xb}], 0x6, 0x0, 0x0, 0x10}, {&(0x7f0000008900)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10, &(0x7f0000008a80)=[{&(0x7f0000008940)="cdea8d329f63e27d1a34dc9caa79c9c16a524cf5c466dc943a2f450fac989a49e5280e0a43e0a51082cf0a049d629b4bd598ac05298deb6e06e045f9db40ae76faed5cbe9a3b030bdac5ba4d94bff5d3d8a8ef60ee6748e582b591bbbc512a593d4f036e3a41b03ba8f3b5319bdf8a0d1a04b367ba6f82cefbc974aa10bf7115b00bd2758c5c8582288ef7c16c6fb31fe95465c50d490fe2", 0x98}, {&(0x7f0000008a00)="d8d401dabe8cdcb9571e8307d151", 0xe}, {&(0x7f0000008a40)="76f283f18f509ea94b08126e6d6ed75f65657669ff11ce309aac4ea423ac399e1579b41b03c67f515a332e504c", 0x2d}], 0x3, &(0x7f0000008bc0)=[@prinfo={0x14, 0x84, 0x5, {0x30, 0x80000001}}, @prinfo={0x14, 0x84, 0x5, {0x30, 0x1}}, @sndinfo={0x1c, 0x84, 0x2, {0x20, 0x2, 0x1ff, 0x4, r3}}, @sndrcv={0x2c, 0x84, 0x1, {0x5, 0x5, 0x1, 0x100000000000, 0x400, 0x2, 0x0, 0xfff, r4}}], 0x70, 0x10}], 0x6, 0x4000) 2018/05/17 02:39:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x2000000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x6, 0x84000) write$cgroup_pid(r1, &(0x7f0000000040)={[0x34, 0x34, 0x30, 0x37, 0x30]}, 0x5) poll(&(0x7f0000000240)=[{r1, 0x621}, {r1, 0x20}, {r1, 0x3}, {r0, 0x200}, {r0}, {r0, 0x100}, {r1, 0x8002}, {r1, 0x20}], 0x8, 0x35b800) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr-serpent-avx,md4)\x00'}, 0x58) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000080)={0x10000, 0x401, 0x5, 0x0, [], [], [], 0x80000001, 0x8, 0x1f, 0x1ff, "90f1d83229d9703535db8acfd788844c"}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100), 0x0) [ 451.449709] binder: undelivered transaction 69, process died. [ 451.455999] binder: undelivered TRANSACTION_COMPLETE [ 451.542734] FAULT_INJECTION: forcing a failure. [ 451.542734] name failslab, interval 1, probability 0, space 0, times 0 [ 451.554074] CPU: 1 PID: 29944 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #79 [ 451.561346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 451.570691] Call Trace: [ 451.573280] dump_stack+0x1b9/0x294 [ 451.576897] ? dump_stack_print_info.cold.2+0x52/0x52 [ 451.582093] should_fail.cold.4+0xa/0x1a [ 451.586147] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 451.591244] ? debug_check_no_locks_freed+0x310/0x310 [ 451.596421] ? _raw_spin_unlock+0x22/0x30 [ 451.600564] ? graph_lock+0x170/0x170 [ 451.604349] ? graph_lock+0x170/0x170 [ 451.608171] ? find_held_lock+0x36/0x1c0 [ 451.612233] ? check_same_owner+0x320/0x320 [ 451.616546] ? _kstrtoull+0x180/0x230 [ 451.620336] ? rcu_note_context_switch+0x710/0x710 [ 451.625264] __should_failslab+0x124/0x180 [ 451.629496] should_failslab+0x9/0x14 [ 451.633301] kmem_cache_alloc_trace+0x2cb/0x780 [ 451.637984] ? do_raw_spin_lock+0xc1/0x200 [ 451.642235] ? _raw_spin_unlock+0x22/0x30 [ 451.646371] binder_get_thread+0x241/0x860 [ 451.650593] ? binder_open+0x920/0x920 [ 451.654472] ? check_same_owner+0x320/0x320 [ 451.658795] ? rcu_note_context_switch+0x710/0x710 [ 451.663721] ? __might_sleep+0x95/0x190 [ 451.667693] binder_ioctl+0x255/0x13fd [ 451.671572] ? binder_ioctl_write_read.isra.41+0xaf0/0xaf0 [ 451.677184] ? expand_files.part.8+0x9a0/0x9a0 [ 451.681755] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 451.686672] ? wait_for_completion+0x870/0x870 [ 451.691244] ? __lock_is_held+0xb5/0x140 [ 451.695295] ? __fget_light+0x2ef/0x430 [ 451.699255] ? fget_raw+0x20/0x20 [ 451.702705] ? __sb_end_write+0xac/0xe0 [ 451.706667] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 451.712189] ? fput+0x130/0x1a0 [ 451.715452] ? ksys_write+0x1a6/0x250 [ 451.719240] ? __do_page_fault+0x441/0xe40 [ 451.723462] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 451.728638] ? binder_ioctl_write_read.isra.41+0xaf0/0xaf0 [ 451.734251] __ia32_compat_sys_ioctl+0x221/0x640 [ 451.738996] do_fast_syscall_32+0x345/0xf9b [ 451.743308] ? do_int80_syscall_32+0x880/0x880 [ 451.747875] ? _raw_spin_unlock_irq+0x27/0x70 [ 451.752367] ? finish_task_switch+0x1ca/0x840 [ 451.756849] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 451.762371] ? syscall_return_slowpath+0x30f/0x5c0 [ 451.767287] ? sysret32_from_system_call+0x5/0x46 [ 451.772120] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 451.776952] entry_SYSENTER_compat+0x70/0x7f [ 451.781343] RIP: 0023:0xf7efdcb9 [ 451.784689] RSP: 002b:00000000f5ef90ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 451.792391] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00000000c0306201 [ 451.799645] RDX: 0000000020000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 451.806901] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 451.814158] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 451.821419] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/17 02:39:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfc000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:37 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0xffffffffffffddd}, 0x35) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0xffffffffffffff6e) 2018/05/17 02:39:37 executing program 5: r0 = socket(0x2, 0x85, 0x5) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000f7db7f)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x7, 0x4) close(r0) 2018/05/17 02:39:37 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x7, 0x1, 0x3, 0xf, 0x1, 0x5, 0x4}, 0x20) [ 451.942722] device lo entered promiscuous mode 2018/05/17 02:39:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x7000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 451.973841] FAULT_INJECTION: forcing a failure. [ 451.973841] name failslab, interval 1, probability 0, space 0, times 0 [ 451.985224] CPU: 1 PID: 29929 Comm: syz-executor6 Not tainted 4.17.0-rc5+ #79 [ 451.992508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 452.001869] Call Trace: [ 452.004476] dump_stack+0x1b9/0x294 [ 452.008121] ? dump_stack_print_info.cold.2+0x52/0x52 [ 452.013331] ? find_held_lock+0x36/0x1c0 [ 452.017413] should_fail.cold.4+0xa/0x1a 2018/05/17 02:39:38 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket(0x40000000015, 0x7, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) setsockopt(r0, 0x114, 0x1d, &(0x7f0000000000)="2a8e339c", 0x4) [ 452.021494] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 452.026616] ? kasan_check_read+0x11/0x20 [ 452.030783] ? kasan_check_read+0x11/0x20 [ 452.034949] ? rcu_pm_notify+0xc0/0xc0 [ 452.038863] ? find_held_lock+0x36/0x1c0 [ 452.042953] ? check_same_owner+0x320/0x320 [ 452.047294] ? rcu_note_context_switch+0x710/0x710 [ 452.048115] binder: 29937:29944 ioctl c0306201 20000340 returned -12 [ 452.052228] ? ip6_pol_route_lookup+0x1240/0x1240 [ 452.052243] ? __lock_acquire+0x7f5/0x5140 [ 452.052263] __should_failslab+0x124/0x180 [ 452.052283] should_failslab+0x9/0x14 [ 452.052299] kmem_cache_alloc_node+0x272/0x780 [ 452.052313] ? __lock_acquire+0x7f5/0x5140 [ 452.052334] __alloc_skb+0x111/0x780 [ 452.088420] ? skb_scrub_packet+0x580/0x580 [ 452.092733] ? debug_check_no_locks_freed+0x310/0x310 [ 452.097922] ? __save_stack_trace+0x7e/0xd0 [ 452.102232] ? print_usage_bug+0xc0/0xc0 [ 452.106280] ? check_noncircular+0x20/0x20 [ 452.110498] ? debug_check_no_locks_freed+0x310/0x310 [ 452.115681] ? print_usage_bug+0xc0/0xc0 [ 452.119731] ? print_usage_bug+0xc0/0xc0 [ 452.123781] alloc_skb_with_frags+0x137/0x760 [ 452.128262] ? __lock_acquire+0x7f5/0x5140 [ 452.132483] ? graph_lock+0x170/0x170 [ 452.136267] ? skb_complete_wifi_ack+0x1e0/0x1e0 [ 452.141029] sock_alloc_send_pskb+0x87a/0xae0 [ 452.145515] ? sock_wmalloc+0x1e0/0x1e0 [ 452.149477] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 452.154484] ? lock_downgrade+0x8e0/0x8e0 [ 452.158621] ? kasan_check_read+0x11/0x20 [ 452.162758] ? rcu_is_watching+0x85/0x140 [ 452.166903] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 452.172082] ? graph_lock+0x170/0x170 [ 452.175867] ? print_usage_bug+0xc0/0xc0 [ 452.179915] ? ipv6_dev_get_saddr+0x58b/0xfd0 [ 452.184393] ? __unlock_page_memcg+0x72/0x100 [ 452.188876] sock_alloc_send_skb+0x32/0x40 [ 452.193101] __ip6_append_data.isra.46+0x1f60/0x3760 [ 452.198196] ? lock_downgrade+0x8e0/0x8e0 [ 452.202333] ? ip6_setup_cork+0x1800/0x1800 [ 452.206665] ? ip6_mtu+0x1b3/0x590 [ 452.210196] ? ip6_sk_redirect+0x130/0x130 [ 452.214420] ? __local_bh_enable_ip+0x161/0x230 [ 452.219077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.224598] ? ip6_setup_cork+0x10b8/0x1800 [ 452.228910] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 452.234440] ? ip6_dst_lookup_tail+0x531/0x1b30 [ 452.239104] ? ip6_dst_mtu_forward+0x470/0x470 [ 452.243677] ? graph_lock+0x170/0x170 [ 452.247466] ip6_make_skb+0x3c1/0x620 [ 452.251252] ? ip_reply_glue_bits+0xc0/0xc0 [ 452.255559] ? ip_reply_glue_bits+0xc0/0xc0 [ 452.259875] ? ip6_push_pending_frames+0xf0/0xf0 [ 452.264617] ? lock_downgrade+0x8e0/0x8e0 [ 452.268753] ? kasan_check_read+0x11/0x20 [ 452.272894] ? rcu_is_watching+0x85/0x140 [ 452.277029] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 452.282213] ? ipv6_select_ident+0x140/0x140 [ 452.286623] udpv6_sendmsg+0x28cb/0x30f0 [ 452.290669] ? ip_reply_glue_bits+0xc0/0xc0 [ 452.294980] ? udpv6_queue_rcv_skb+0x1520/0x1520 [ 452.299724] ? find_held_lock+0x36/0x1c0 [ 452.303776] ? lock_downgrade+0x8e0/0x8e0 [ 452.307911] ? kasan_check_read+0x11/0x20 [ 452.312044] ? do_raw_spin_unlock+0x9e/0x2e0 [ 452.316437] ? __local_bh_enable_ip+0x161/0x230 [ 452.321090] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 452.326090] ? release_sock+0x1e2/0x2b0 [ 452.330053] ? trace_hardirqs_on+0xd/0x10 [ 452.334192] ? __local_bh_enable_ip+0x161/0x230 [ 452.338847] ? _raw_spin_unlock_bh+0x30/0x40 [ 452.343247] ? release_sock+0x1e2/0x2b0 [ 452.347210] ? udp_v6_get_port+0x273/0x660 [ 452.351435] inet_sendmsg+0x19f/0x690 [ 452.355221] ? udpv6_queue_rcv_skb+0x1520/0x1520 [ 452.359959] ? inet_sendmsg+0x19f/0x690 [ 452.363926] ? __might_sleep+0x90/0x190 [ 452.367889] ? ipip_gro_receive+0x100/0x100 [ 452.372199] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 452.377722] ? security_socket_sendmsg+0x94/0xc0 [ 452.383252] ? ipip_gro_receive+0x100/0x100 [ 452.387560] sock_sendmsg+0xd5/0x120 [ 452.391260] __sys_sendto+0x3d7/0x670 [ 452.395050] ? __ia32_sys_getpeername+0xb0/0xb0 [ 452.399705] ? wait_for_completion+0x870/0x870 [ 452.404277] ? __lock_is_held+0xb5/0x140 [ 452.408331] ? __sb_end_write+0xac/0xe0 [ 452.412302] ? fput+0x130/0x1a0 [ 452.415566] ? ksys_write+0x1a6/0x250 [ 452.419352] ? __do_page_fault+0x441/0xe40 [ 452.423571] ? __ia32_sys_read+0xb0/0xb0 [ 452.427622] __ia32_sys_sendto+0xdf/0x1a0 [ 452.431757] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 452.436762] do_fast_syscall_32+0x345/0xf9b [ 452.441090] ? do_int80_syscall_32+0x880/0x880 [ 452.445659] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 452.450490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 452.456018] ? syscall_return_slowpath+0x30f/0x5c0 [ 452.460939] ? sysret32_from_system_call+0x5/0x46 [ 452.465771] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 452.470612] entry_SYSENTER_compat+0x70/0x7f [ 452.475002] RIP: 0023:0xf7fdfcb9 [ 452.478364] RSP: 002b:00000000f5fdb0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000171 [ 452.486146] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00000000200000c0 [ 452.493406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 452.500682] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 452.507937] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 452.515189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/17 02:39:38 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x700], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:38 executing program 1: socketpair(0x0, 0x3, 0x4bb, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x10, 0x80000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = memfd_create(&(0x7f0000000000)='filter\x00', 0x2) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000040)={0x200, 0x1ff}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0xfffffd6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) [ 452.750798] IPVS: ftp: loaded support on port[0] = 21 [ 452.804896] device lo entered promiscuous mode 2018/05/17 02:39:38 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:38 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x500, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:38 executing program 0: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000140)=""/137, &(0x7f0000000040)=0x89) r2 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_elf32(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4600000000000000000000000002003e000000000000000000380000000000000000000000000020004e"], 0x2d) execveat(r2, &(0x7f0000000080)='\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x1000) readahead(r1, 0x7, 0x80000000000000) bind$bt_rfcomm(r2, &(0x7f0000000200)={0x1f, {0x9, 0x1, 0x8, 0xe7a2, 0x8, 0xf0d5}, 0x6}, 0xa) 2018/05/17 02:39:38 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0x2c4) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, r0}, 0x14) ppoll(&(0x7f0000000080)=[{}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f00000000c0)=@generic={0x80000001, 0xd044, 0x3}) r1 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0xe528, 0x200) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000300)=0x7f, 0x4) 2018/05/17 02:39:38 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000309000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00', 0x2) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0xc0485510, &(0x7f0000000000)=""/27) 2018/05/17 02:39:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfc00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:38 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x21}, 0x4e24, 0x0, 'ovf\x00', 0x20, 0x7, 0xb}, 0x2c) ftruncate(r0, 0x7) [ 452.951182] IPVS: ftp: loaded support on port[0] = 21 [ 452.953933] binder: 30014:30015 transaction failed 29201/-28, size 0-0 line 2971 2018/05/17 02:39:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x4], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:39 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xc0002, 0x80) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r1, 0x2000000007e3e, 0x7dc9, 0x7ff}, &(0x7f0000000180)=0xffffffffffffffce) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) 2018/05/17 02:39:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x100000000, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4004240b, &(0x7f0000000200)={0x0, 0x70, 0x0, 0x8, 0x3, 0x797, 0x0, 0x4, 0xc00, 0x1, 0x1, 0x6, 0x7, 0x5, 0x0, 0x5, 0xd800, 0x34c9363e, 0xe5d, 0x1, 0x5, 0x2, 0x4, 0x3f1, 0x5, 0x59, 0x3f, 0x5, 0xb3c, 0x2, 0x8d76, 0x6, 0x4, 0x2, 0x1ff, 0x7, 0x6, 0x400000000000000, 0x0, 0x9, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}, 0x2, 0x7ff, 0x1721ae67, 0x0, 0xfffffffffffffffe, 0x8}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000003c0)) ioctl$KVM_SET_PIT(r2, 0x4070aea0, &(0x7f00000000c0)={[{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={r3, 0x1, 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0], 0x2}, 0x20) 2018/05/17 02:39:39 executing program 2: connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) fcntl$getflags(0xffffffffffffffff, 0xb) ppoll(&(0x7f0000000080)=[{}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) [ 453.134141] pit: kvm: requested 2514 ns i8254 timer period limited to 500000 ns [ 453.166637] binder: undelivered TRANSACTION_ERROR: 29201 [ 453.193223] pit: kvm: requested 2514 ns i8254 timer period limited to 500000 ns [ 453.241780] device lo entered promiscuous mode [ 453.282075] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:39 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200003) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x30}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {0x1}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44081) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x10, 0x105}, 0x14}, 0x1}, 0x0) 2018/05/17 02:39:39 executing program 0: mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) socketpair$inet6(0xa, 0x6, 0xfffffffffffffffb, &(0x7f0000000100)={0xffffffffffffffff}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000003c0)=0x7, &(0x7f0000000400)=0x4) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000480)) mkdir(&(0x7f0000000600)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000840)="72616d66730043db73fd11d0ceabef18b3b4da96ce419c572e006586f0c439c066f931488e8a20ed3957f0e905cc0acea3849a526dd07bd885bbd0e61f2df703a966e6e3675803f18629f2852d0adc389a030c2cfd95ceb5a85638eed220a5a9842428e6854cdd6da6afd0f9c679d9086abbea", 0x0, &(0x7f00000007c0)) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000440)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) sendmsg$netrom(r1, &(0x7f00000007c0)={&(0x7f00000005c0)=@ax25={0x3, {"490c0e114b9b72"}, 0x1a}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000640)="04183f01bcd47157a0a2", 0xa}, {&(0x7f00000008c0)="6c6b03a82811a3c84377df4c2e0ecb98290c4d0ec183c57ee9d8e8c4f7a2c0a9a432d01b6f614b28c848e9ff0397587202c34f3b3415e01157337100e528def7c970203e77be31a67b27d69d045bbb15847fce8bc29cb5921f42dec1bec1c831ef70eeb55dd77f42d565c5421918196c91e047d4d0b0279c50b333f976fe81b7", 0x80}, {&(0x7f0000000700)="b9b92e8879e3327ea1137685519d7b295d05783d9b6aed936718c51ed3c83d86fe", 0x21}, {&(0x7f0000000740)="a3edb8", 0x3}], 0x2000000000000172, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x1358, 0x5}, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f00000000c0)=0x54) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) getpeername(r0, &(0x7f0000000240)=@ipx, &(0x7f00000002c0)=0x80) mkdir(&(0x7f0000000ec0)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='.\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000080)) mount(&(0x7f0000000180)='./file1\x00', &(0x7f0000000800)='./file0\x00', &(0x7f0000000200)="6265090005af2c29daf0f7eab4babdfc0516796b77d7be1b76b6ea9d13a05b33874fc6ceb0324814f7", 0x84000, 0x0) 2018/05/17 02:39:39 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x1100000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:39 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x4d, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/05/17 02:39:39 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) socket$inet_sctp(0x2, 0x5, 0x84) fcntl$setlease(r0, 0x400, 0x2) 2018/05/17 02:39:39 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfc, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 453.399430] binder_alloc: binder_alloc_mmap_handler: 30062 20001000-20004000 already mapped failed -16 [ 453.449472] IPVS: ftp: loaded support on port[0] = 21 [ 453.469958] binder: BINDER_SET_CONTEXT_MGR already set [ 453.498369] binder: 30062:30064 ioctl 40046207 0 returned -16 [ 453.604442] device lo entered promiscuous mode [ 453.617013] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfeffffff00000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:40 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = socket$inet(0x10, 0xf, 0xffffffffffffffff) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xfffffffffffffffd, &(0x7f0000000280)=0x3e80000000, 0x4) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f00000001c0)={0x4, 0x7fffffff, 0x1ff, 'queue0\x00', 0x200000000000000b}) r5 = dup(r3) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x10000000000000, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x800) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) sendto$inet6(r5, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f00000002c0)=0x2, 0x90d254210ca146cc) r7 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x66) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x845, 0x0, 0x4, 0x7a}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000300)={0x2, 0x8000, 0x9, 0x200, r8}, &(0x7f0000000340)=0x10) ftruncate(r7, 0x80080) sendfile(r5, r7, &(0x7f0000d83ff8), 0x2008000fffffffe) 2018/05/17 02:39:40 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x301040, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) poll(&(0x7f0000000080)=[{r1}, {r0, 0x2080}, {r0, 0x10}, {r1, 0x10}, {r1, 0x403}, {r0, 0x2000}, {r0, 0xc600}, {r1, 0x4631}], 0x8, 0xff) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) 2018/05/17 02:39:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000000)={0x7, [0x9, 0x6, 0x100000001, 0x2, 0x101, 0x3, 0xfff]}) ioctl$KVM_SET_LAPIC(r2, 0xc028ae92, &(0x7f0000000180)={"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"}) 2018/05/17 02:39:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:40 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:40 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x591000, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0xffffffffffffffff, 0x10000]) getrlimit(0x3, &(0x7f00000000c0)) 2018/05/17 02:39:40 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xe803000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x8000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 454.370120] binder_alloc: binder_alloc_mmap_handler: 30095 20001000-20004000 already mapped failed -16 [ 454.384855] IPVS: ftp: loaded support on port[0] = 21 [ 454.401088] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:39:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@rand_addr=0x7, @broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x1050, 0x8000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x1000000000000166}, 0x54) [ 454.427475] binder: 30095:30099 ioctl 40046207 0 returned -16 2018/05/17 02:39:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:40 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4, 0x0) read(r0, &(0x7f0000000280), 0x1a1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb2c0) 2018/05/17 02:39:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfe80], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:40 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:40 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read(r1, &(0x7f0000000200)=""/250, 0x50c7e3e3) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000040)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) getsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000440)={@mcast1, 0x0}, &(0x7f0000000480)=0x14) sysfs$3(0x3) sendmsg$can_bcm(r3, &(0x7f00000005c0)={&(0x7f00000004c0)={0x1d, r4}, 0x10, &(0x7f0000000580)={&(0x7f0000000500)={0x2, 0x15, 0x3ff, {}, {0x0, 0x7530}, {0x0, 0x5, 0x8, 0x7}, 0x1, @canfd={{0x1, 0x8000, 0x0, 0x8000}, 0x14, 0x3, 0x0, 0x0, "610deb70032e8010a1382221f30387576a35a151549270cb5ecf19d2379433f16ada5580fe69472c304bcbdc04eef0e861a1428456353c72e82ebcaf844b364d"}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f00000000c0), &(0x7f00000001c0)=0x30) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="00000003a41414aa0100000003000000ffffffff7f000001e00010020ad6bfb456e7db2350f769ad84342334dec40917a6568065d7119cbcc174091ff13284b7fb9c35251be1ef01d6010cb8924adbae65cfed688435000000000000006381d2c97550bda92a504c858cff88d72bde3ab9f72464ac24ad4a27a6653b693b22d980eafa1c2a78c11f8e4a7d348037cd61f18d8b514a20d4de815e153a479ea8e95d35a9f2e7ed26cef8310b130f185ca86b493871"], 0x1c) [ 454.604211] device lo entered promiscuous mode 2018/05/17 02:39:40 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4, 0x0) read(r0, &(0x7f0000000280), 0x1a1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xb2c0) [ 454.654564] binder_alloc: binder_alloc_mmap_handler: 30135 20001000-20004000 already mapped failed -16 [ 454.666152] IPVS: ftp: loaded support on port[0] = 21 [ 454.694784] binder: BINDER_SET_CONTEXT_MGR already set [ 454.721800] binder: 30135:30136 ioctl 40046207 0 returned -16 2018/05/17 02:39:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xc0fe], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:41 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x49d) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000540), &(0x7f0000000580)=0xc) readv(r1, &(0x7f0000000000), 0x200000000000019c) write$evdev(r0, &(0x7f000004d000)=[{{}, 0x0, 0x10000001}, {{0x2}}], 0x30) 2018/05/17 02:39:41 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306202, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:41 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x900000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:41 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ppoll(&(0x7f0000000080), 0x1fffffffffffffc3, &(0x7f0000000000), &(0x7f0000000140), 0x8) 2018/05/17 02:39:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x3) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x5, 0x2, 0x6}, &(0x7f0000000080)=0x10) flock(r0, 0x7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={r2, 0x58, &(0x7f0000000180)=[@in={0x2, 0x4e23, @broadcast=0xffffffff}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e23, 0x3a7, @local={0xfe, 0x80, [], 0xaa}, 0x655}, @in6={0xa, 0x4e21, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0xff}]}, &(0x7f0000000200)=0xc) 2018/05/17 02:39:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) read(r0, &(0x7f0000000000)=""/152, 0x98) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060a00000081e80001040000040d000300ea1100000005000000", 0x29}], 0x1) [ 455.855548] binder: 30170:30173 ioctl c0306202 20000340 returned -22 [ 455.859966] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xff000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200000004) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xfe}]}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffff9c, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) r4 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) [ 455.898314] binder_alloc: binder_alloc_mmap_handler: 30170 20001000-20004000 already mapped failed -16 [ 455.944985] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:39:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x101002) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) [ 455.967849] binder: 30170:30177 ioctl c0306202 20000340 returned -22 [ 456.001628] binder: 30170:30173 ioctl 40046207 0 returned -16 2018/05/17 02:39:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x402c582a, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 456.044300] device lo entered promiscuous mode 2018/05/17 02:39:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfec00000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 456.106334] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) time(&(0x7f0000000340)) setsockopt$inet_group_source_req(r1, 0x0, 0x2c, &(0x7f0000000200)={0x200, {{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e22, @multicast1=0xe0000001}}}, 0x104) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffff}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='attr/exec\x00') ioctl$KVM_NMI(r3, 0xae9a) setsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000000)=0x3f, 0x4) 2018/05/17 02:39:42 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x6, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000180)={0x7, 0x8, 0x2, 0x7, 0xffffffffffffffff, 0x8}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400400, 0x20) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/105) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x2f9}, 0x3ba) [ 456.137165] binder_alloc: binder_alloc_mmap_handler: 30192 20001000-20004000 already mapped failed -16 [ 456.165497] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:39:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x3000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 456.193273] binder: 30192:30195 ioctl 40046207 0 returned -16 2018/05/17 02:39:42 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x6000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:42 executing program 0: setrlimit(0x5, &(0x7f0000a9cff8)={0x0, 0x7fffffff}) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) 2018/05/17 02:39:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000300)=""/130) [ 456.385429] IPVS: ftp: loaded support on port[0] = 21 [ 456.510687] device lo entered promiscuous mode [ 456.523598] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:42 executing program 0: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000040)=0x82, 0x0) fcntl$notify(r0, 0x402, 0x24) sendto$unix(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f00000000c0)=@abs, 0x6e) 2018/05/17 02:39:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:42 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f00000080c0)=[{{&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/22, 0x16}, {&(0x7f0000000200)=""/52, 0x34}, {&(0x7f0000000240)=""/140, 0x8c}, {&(0x7f0000000300)=""/169, 0xa9}, {&(0x7f00000003c0)=""/19, 0x13}, {&(0x7f0000000400)=""/237, 0xed}, {&(0x7f0000000500)=""/100, 0x64}, {&(0x7f0000000580)=""/247, 0xf7}], 0x8, &(0x7f00000006c0)=""/10, 0xa, 0x101}, 0xffffffffffffff01}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000700)=""/123, 0x7b}, {&(0x7f0000000780)=""/39, 0x27}, {&(0x7f00000007c0)=""/126, 0x7e}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/67, 0x43}, {&(0x7f00000018c0)=""/250, 0xfa}], 0x6, &(0x7f0000001a00)=""/30, 0x1e}}, {{&(0x7f0000001a40)=@generic, 0x80, &(0x7f0000004e40)=[{&(0x7f0000001ac0)=""/185, 0xb9}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000003b80)=""/82, 0x52}, {&(0x7f0000003c00)=""/57, 0x39}, {&(0x7f0000003c40)=""/42, 0x2a}, {&(0x7f0000003c80)=""/4096, 0x1000}, {&(0x7f0000004c80)=""/239, 0xef}, {&(0x7f0000004d80)=""/183, 0xb7}], 0x9, &(0x7f0000004ec0)=""/222, 0xde, 0x8}, 0x7a89}, {{&(0x7f0000004fc0)=@nfc_llcp, 0x80, &(0x7f0000005300)=[{&(0x7f0000005040)=""/208, 0xd0}, {&(0x7f0000005140)=""/92, 0x5c}, {&(0x7f00000051c0)=""/71, 0x47}, {&(0x7f0000005240)=""/153, 0x99}], 0x4, 0x0, 0x0, 0x3}, 0x100000000}, {{&(0x7f0000005340)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000005540)=[{&(0x7f00000053c0)=""/36, 0x24}, {&(0x7f0000005400)=""/59, 0x3b}, {&(0x7f0000005440)=""/236, 0xec}], 0x3, &(0x7f0000005580)=""/74, 0x4a, 0x7}, 0x1f}, {{0x0, 0x0, &(0x7f0000006900)=[{&(0x7f0000005600)=""/18, 0x12}, {&(0x7f0000005640)=""/4096, 0x1000}, {&(0x7f0000006640)=""/242, 0xf2}, {&(0x7f0000006740)=""/1, 0x1}, {&(0x7f0000006780)=""/208, 0xd0}, {&(0x7f0000006880)=""/68, 0x44}], 0x6, 0x0, 0x0, 0x2}, 0x9}, {{&(0x7f0000006940)=@can, 0x80, &(0x7f0000006a80)=[{&(0x7f00000069c0)=""/156, 0x9c}], 0x1, &(0x7f0000006ac0)=""/51, 0x33, 0x2}, 0xff}, {{&(0x7f0000006b00)=@pptp={0x0, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000006dc0)=[{&(0x7f0000006b80)=""/187, 0xbb}, {&(0x7f0000006c40)=""/82, 0x52}, {&(0x7f0000006cc0)=""/243, 0xf3}], 0x3, &(0x7f0000006e00)=""/4096, 0x1000, 0x9}, 0x4}, {{&(0x7f0000007e00)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000008000)=[{&(0x7f0000007e80)=""/74, 0x4a}, {&(0x7f0000007f00)=""/195, 0xc3}], 0x2, &(0x7f0000008040)=""/67, 0x43, 0x7ff}, 0xea3}], 0x9, 0x1, &(0x7f0000008200)={0x77359400}) r1 = socket$inet6(0xa, 0x100000003, 0x1) sendto$inet6(r1, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0xfc00}, 0x1c) getsockopt$inet6_dccp_int(r0, 0x21, 0xa, &(0x7f0000008240), &(0x7f0000008280)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) fcntl$setflags(r0, 0x2, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') ioctl$KVM_NMI(r3, 0xae9a) 2018/05/17 02:39:42 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x40000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:42 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, [], 0x1b}}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/05/17 02:39:42 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) 2018/05/17 02:39:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfffffffe], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 456.907267] binder_alloc: binder_alloc_mmap_handler: 30248 20001000-20004000 already mapped failed -16 [ 456.932573] IPVS: ftp: loaded support on port[0] = 21 [ 456.949215] binder: BINDER_SET_CONTEXT_MGR already set [ 456.976153] binder: 30248:30253 ioctl 40046207 0 returned -16 [ 457.106973] device lo entered promiscuous mode [ 457.118838] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfe80000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:43 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000680)='net/udplite6\x00') readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f0000000140)=""/90, 0x5a}, {&(0x7f0000000280)=""/106, 0x6a}, {&(0x7f0000000300)=""/240, 0xf0}, {&(0x7f0000000400)=""/224, 0xe0}, {&(0x7f0000000500)=""/242, 0xf2}], 0x6) getdents64(r0, &(0x7f0000000200)=""/78, 0x24) getdents(r0, &(0x7f0000000080)=""/188, 0xbc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000001c0)={'veth0\x00', 0x1000}) 2018/05/17 02:39:43 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8002, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000040)=ANY=[@ANYBLOB="01e4ffff050000000500000000000000000000e8ffff0700"]) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) tee(r0, r1, 0x42b7, 0x8) 2018/05/17 02:39:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:43 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x2000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000240)={0x80, 0x2, 0xe0b0, 0x7, 0x2, 0x5}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x11, &(0x7f0000000100), 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x800, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000080)=""/85, 0x55, 0x0) 2018/05/17 02:39:43 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x4000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:43 executing program 2: r0 = socket$inet6(0xa, 0x2000000000080006, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendfile(r0, r0, &(0x7f0000000000), 0x5) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/05/17 02:39:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:43 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280)='/dev/zero\x00', 0x400, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000002c0)={0x4, 0xfffffffffffff800, 0xf6e, 0xd9, 0x1f, 0xa0, 0x9, 0xf43, 0x3, 0x1, 0xd9, 0x1ff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00'}, 0xfffffffffffffdc1) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xe79f, 0x1) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x20, 0x4000) ioctl$EVIOCSABS2F(r2, 0x401845ef, &(0x7f0000000040)={0x8000, 0x5398, 0x9, 0x7, 0x5c7, 0x3}) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x3, 0xf5a, 0x3f, @time={0x77359400}, {0x8, 0xf9ac}, {0x4, 0x1c9b6000000}, @addr={0x1, 0x6}}, {0x100000000, 0x4, 0x4, 0x401, @tick=0x2, {0x1, 0x7}, {0x7, 0xb0f}, @note={0x0, 0x1, 0xff, 0x2c7, 0x7}}, {0x7, 0x9, 0xff, 0x4000000000, @tick=0x4, {0xffffffffffff7233, 0x1}, {0x4}, @queue={0x6, {0x5, 0x2}}}, {0x8000, 0x0, 0x10000, 0x6, @time, {0x9933b44, 0x2}, {0x4, 0x1000}, @quote={{0x3, 0x5}, 0x80000001}}, {0x5, 0x2, 0x100000000, 0x4, @tick=0x4, {0x2, 0x1ff}, {0x3, 0x762}, @time=@time={0x0, 0x989680}}, {0x100000001, 0x80000000, 0x100, 0x7fff, @time={r3, r4+30000000}, {0x1f, 0x80000000}, {0x2, 0x6}, @note={0x4, 0x100000000, 0x3, 0x1ff, 0x3dbe}}, {0x6, 0x3, 0x4b, 0x5, @time, {0x81, 0x3f}, {0x2, 0x8}, @time=@tick=0x87ac}, {0x3, 0x3ff, 0x7fffffff, 0x7, @time={0x77359400}, {0x100000000, 0x1}, {0x401, 0x1}, @raw8={"f1a3bab36576d26f30fd3bbd"}}, {0xffff, 0x3, 0x2, 0x0, @time, {0x7, 0x3}, {0x6, 0x401}, @result={0x6, 0x80000001}}], 0xfc) [ 457.226709] binder: 30282:30286 ioctl 541b 20000340 returned -22 2018/05/17 02:39:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x18000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:43 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) add_key(&(0x7f0000001640)='pkcs7_test\x00', &(0x7f0000001680)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000016c0), 0x0, 0xfffffffffffffffe) keyctl$join(0x1, &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x2}) 2018/05/17 02:39:43 executing program 5: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x1000000000000000, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x200000002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f0000000040)='./file0\x00', 0x8803, 0x0) ioctl$KDDISABIO(r0, 0x4b37) 2018/05/17 02:39:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 457.292149] IPVS: ftp: loaded support on port[0] = 21 [ 457.305372] binder_alloc: binder_alloc_mmap_handler: 30282 20001000-20004000 already mapped failed -16 2018/05/17 02:39:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x100000000) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) r1 = dup3(r0, r0, 0x80000) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'syz_tun\x00', {0x2, 0x4e23, @rand_addr=0x6}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000000)={0x3, 0x20, 0x7, {}, 0x100, 0x2f}) [ 457.376283] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:39:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xff00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 457.420963] binder: 30282:30286 ioctl 40046207 0 returned -16 2018/05/17 02:39:43 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x100000000000012f}, 0x68) 2018/05/17 02:39:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 457.461765] binder: 30282:30319 ioctl 541b 20000340 returned -22 2018/05/17 02:39:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) r2 = dup2(r0, r1) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000140)={0x5, 0xe7, &(0x7f0000000000)="53d6ac471c45540957bd999b622ae759975589bd6aa2419c48d5cda849f237d1f41b1ca9de074cac3ffb903d10c046f430d717d0cba948f555b5d003d45530f6056d25c7059d6e3282ab4c91e6cf9aa2ff608d33034a689fcbc538c9495326d89e0509c9d322f633bb8e2070a52dcafad85097469d67e0acceb65c51881e6d0d558274e925ee91325adbabc4ebf33d1ac184f15e5055a59d912acc84c5fa55ef83c92a7b5d2a4358f5c300da9d302fd51ff99052c301fef6fff1462f55f485388590844bdd045b8535a6a21d0ffd9c9e24bc01194ea2345fb7ca3a7bf56c236503e3bb2560bef2"}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x1}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r3, 0x27, "cca0d848e231e8fa4cb69028550d5055ce5ea0f2a37044514129cd91dc2f0d49bd69034a0c29ce"}, &(0x7f0000000300)=0x2f) sendmmsg$inet_sctp(r2, &(0x7f0000003740)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000200), 0x0, &(0x7f00000004c0)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x2c}], 0x1, 0x0) 2018/05/17 02:39:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x1800000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:43 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x61, 0x402) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000040)={0x10d6a7f, 0x2}) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x4, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0xfffffffffffffffe}, 0x9) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/05/17 02:39:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 457.655156] device lo entered promiscuous mode [ 457.709879] binder: 30351:30352 ioctl c0306225 20000340 returned -22 [ 457.720140] IPVS: ftp: loaded support on port[0] = 21 [ 457.753215] binder_alloc: binder_alloc_mmap_handler: 30351 20001000-20004000 already mapped failed -16 [ 457.781432] binder: BINDER_SET_CONTEXT_MGR already set [ 457.799095] binder: 30351:30352 ioctl 40046207 0 returned -16 [ 457.831809] binder: 30351:30358 ioctl c0306225 20000340 returned -22 2018/05/17 02:39:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x400) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0x5099, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@security={'security\x00', 0xe, 0x4, 0x4d4, 0xffffffff, 0x144, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0xffffff00, 0x0, 0x0, 0xff000000], [0x0, 0xff0000ff, 0xffffffff, 0xffffff00], 'veth0_to_bridge\x00', 'irlan0\x00', {}, {}, 0xfb, 0x1, 0x1, 0x1}, 0x0, 0x120, 0x144, 0x0, {}, [@common=@inet=@length={0x28, 'length\x00', 0x0, {0x1, 0x1, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d3, 0x4d6, 0x94fe, 0x7fff}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0x1}}}, {{@ipv6={@remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80, [], 0x1f}, [0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffff00, 0xff], '\x00', 'teql0\x00', {0xff}, {0xff}, 0x2d, 0x32f, 0x5, 0x10}, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@eui64={0x24, 'eui64\x00'}, @common=@frag={0x30, 'frag\x00', 0x0, {0x5, 0x32a8, 0x1ff, 0x0, 0x1}}]}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00'}}, {{@ipv6={@loopback={0x0, 0x1}, @empty, [0xffffff00, 0xffffffff, 0xff000000], [], 'bond_slave_1\x00', 'gre0\x00', {0xff}, {0xff}, 0x3f, 0x2, 0x2, 0x40}, 0x0, 0x140, 0x184, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d5, 0x4d3, 0x87, 0x1, 0x2}}, @common=@hbh={0x48, 'hbh\x00', 0x0, {0x790, 0x4, 0x1, [0x3, 0x1, 0x2, 0x4, 0x100, 0xffffffff, 0x87, 0x6, 0xfffffffffffffff7, 0x80, 0x81, 0x7, 0x115, 0x9, 0x81, 0x2], 0x3}}]}, @common=@inet=@TEE={0x44, 'TEE\x00', 0x1, {@ipv4=@broadcast=0xffffffff, 'lo\x00', 0x9}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x530) fallocate(r1, 0x3, 0x76, 0x6) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) 2018/05/17 02:39:44 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x4800, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x18000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, r2, 0x2, 0x70bd27, 0x25dfdbfd, {0x4}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3d}]}]}, 0x20}, 0x1}, 0x8000) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0xae78, &(0x7f0000001480)) 2018/05/17 02:39:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/05/17 02:39:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x700000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:44 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x4000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:44 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1c102) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x8) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/05/17 02:39:44 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000380)="636c6561725f72656673007edb") pwritev(r1, &(0x7f0000000740)=[{&(0x7f00000006c0)='l', 0x1}], 0x1, 0x0) fstatfs(r0, &(0x7f0000000080)=""/54) 2018/05/17 02:39:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x402c5828, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 458.372682] binder_alloc: binder_alloc_mmap_handler: 30363 20001000-20004000 already mapped failed -16 [ 458.387108] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x11], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 458.419412] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:39:44 executing program 5: socketpair$inet(0x1e, 0x2, 0x0, &(0x7f0000000080)={0x0, 0x0}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500)='/dev/rtc0\x00', 0x701080, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f00000008c0)=0xe8) bind$packet(r1, &(0x7f0000000900)={0x11, 0x7, r2, 0x1, 0xffffffff00000001, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}}, 0x14) sendmsg(r0, &(0x7f0000000700)={0x0, 0xffffffffffffff0c, &(0x7f00000004c0)=[{&(0x7f00000000c0)="57f55d38aaaeff6660f60892887a60b790134dd09e1ff6c599cd80facbb4d6ae5e4a98139a17e9e3860ac6b1443a673d73a92dbd4b6c3aa948f56f967feebe2b03323d14f6c6a048348d426e6eaf418b47799194746ccd5cf19ce78ee7a241c23ef5c959cda6d9a69099e35659fb134b316ae39128f1cbea3dcb9dc5a6112c41ace6eb1ef2af1f3673173a216634002aec188d4569e878338847502ffe", 0x9d}, {&(0x7f0000000180)="acc435a9e403536cba1c40de38595af61a8e611c6f3bf9312c39072b5a35e3a68967709fc84bf59c6fdd21d8c2fd679d66799082d8f06b4cb647825e6e4789010b5c68a52cdc6cb880efbc9a347aa2ceb7d7ddfd16147a78d443c238ce9c7fafc0686e8edff2c41da676273180f9195a4300a77b326ec11026a468c354a12e9213cba3f7cda15cffbe078e32bfb9d21cf6eb1334f2d09cd5ddafb95dd5b895c77471a1b5554d4d4e5269a52060bd", 0xae}, {&(0x7f0000000000)="5c6331ac9a93d8aaad60ed8ef1d9d5e89dc8cc396c00235248897c553784ec58f8cfa9e5f1ab4f6b3f639731bb40434ae5ac7c52a85d4dd17bf636741d0222556da3cb50c846b90f7cc01259533447d9e2237769b0a00bbfef0e4d87c3668858822c", 0x62}, {&(0x7f0000000240)="fed064dada9bae505c1cc204ac6ecc70bf2fc745f0e7dd6cf842de13050f7043742413b50a99c7639dd5e0102281d935c5f29ac0b776db39b4fe1f2f575e791460c874d6ec12b8c40ac59309107fd258a66a969abdf0efbf5c5326124793c0eef5246b927e6e", 0x66}, {&(0x7f00000002c0)="f267e1a607661cce40d36e8ed61b5ada341b1065fc1b4a9a50993a2384a8391b357f5621a5189a10614c7fd37e65ea8e3b486d7a9fe214791dc10ed44189c1eaf286104bb951c06a5649923f0ba36880176b3a8d79b0169cd78cf6e9ec15097721eb5a9bb74367bd80099533f24a294976f5a781bd8fda399e1497f6197165cdf40bc04e589fe1e0", 0x88}, {&(0x7f0000000380)="e60143090281c80275d3205cb50cde1d6d67b18bf5db6e66a84b9678f5ce34a5a90b6a737f05a958300d3617515d98b0fbb283bc85a2120a6e20c0ebfb8e352343492921d3e8cad2d50afd3a0e1f9fae6bce49ffc60a37ccadcbf48d085e17b4352ff22cf1f01e64bbae98729c4194a09cc3d4c41c49f540f9af7ab8338839eac0da70a0467a855905471f97e8f4be", 0x8f}, {&(0x7f0000000440)="25d65879c921bd1c1cc164c07777bd51ba1240426d96d74e0df88316b124dcc5", 0x20}, {&(0x7f0000000480)="419eb92abbf82ee20e70f46be2dfb54b68ba42e30ce0", 0x16}], 0x8, &(0x7f0000000180)}, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000540)=0x4, &(0x7f0000000580)=0x2) 2018/05/17 02:39:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/05/17 02:39:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) ioctl$PERF_EVENT_IOC_ID(r0, 0x80042407, &(0x7f0000000080)) [ 458.445161] binder: 30363:30364 ioctl 40046207 0 returned -16 2018/05/17 02:39:44 executing program 0: r0 = socket(0x10, 0x2, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0x7fffffff, 0x7ff, 0xdee, 0x4, 0x80000001, 0x3}, 0x2}, 0xa) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@gettaction={0x14, 0x32, 0x101}, 0x14}, 0x1}, 0x0) 2018/05/17 02:39:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x1f000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:44 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000140)={'syz_tun\x00', 0x200}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYBLOB="08000000f7ffbfab6e5adc96868a71c02430f768f4072e7b8e0fcba07c4d0de169681c64e25c715ce58daab231158cd354ffbfeafba7ac4da0cb733703e34f666a27c9f9cdaee7586cd89bb1912dc840ed747b3a78213feb933ecdca054c3229e15e8dcadcbd1bbb7782450500fa0c51cd3fc1a2fc6518d7755d2303f1acaac5b2e7ba68300dc647a630d33f4e9bd832abfa69a3b8f97d7758105d2a967d498714ad6922dbd9a70df05dd7cd3ae2486f855dfd06d862f295c0a47321aa844d9aee276e72f5a2c5055e4538c9b1af5f952b65c3b2896dae03eb5ccbfaa50319baf775e481fddef00fb70433984c1b30ec6e5fa495eb080e52dd9be80f8624ad6684b87ba56c8252bbf077ca0cbc432993e5cc14e38183dc2d131fe6d272f5f1190bbba8ed3728add886f9834aa526a53dee9f7f6dc27b0c6c0e69492f55431ffaf314eaba7831cbf097c9ec4720cdb624706862d8196c5d5326b6d762bcc9f9750be101839990d5741b866abfba24b1eed779d02a0c705db87e4b47614ff63a060048f7f42b3650d9b1e5fd6a7e7606af0dd27fa35deebae76c7c884d087059f44e6c5f2a1a2fb7cf326a509f982c5497950d317fd3ffb56c61069e7686649e409d686b6efb4444d14a0b0d2d648e902dee3a893b65cdba1fbe43b99e87d3f55de384826c96c7a239b8ddd713c4d6f6210b7f405cdb8afacf8199b0db974e27ee0860bfe9c572f4713c3d5a7ad610c71a823643c721e0a18c4f52a8620017e114a682b9a9048e864ce3044dc7ffd251afba26fb05d4b1acbec1f5fb2885eb134853a951e9677d628ee3b82279d1fa787ed6b7a1267d4d21feb0a104676e3ddf61dc9edd0797d817cbad034c5eed2d891ea6034af58bc70b6384e627e70dc8051a56f3ddb3867dcd434528fe7876dbca8e05c09cd883f0a4241c014dcddc71d6d6cc4c52454726bf082e197bd1b04768caa7d84b5a1b4a0d003455eccb5635f623d70e3ceeba2cefa60c9f7093b56b805f0b67d4131bb92e6d0ffeda0f534315a9a3b9492c14614f9282083a5f06a1584d283b65143ffa4915086d900d5e0bcf75a11b358398ea2c5966eabedfbdad4b0567984bb707b416af5f04fe23abb542f1a8386ae7e500d2871c5a1260ad0c7969354317b39171a8affef3cb188d49259fa7f9e3c5c063c3f58d4843b6d881a7f73e3df175cf3f29cbc7a89e7e61fd37525d0ea8d00811757baec0aa97d1c52df0825f8a74062aeb93d5be54de4795da4ef1811e389f925c0730cc0db306f3b9d661a02e93eadcac8e5854bc95d6bda3f07aac2567c91ab9916c3dce04f24dd939afe5b9af986edd976aeae27447bc286a4d406821cf36d178c0ef799dba2dafc64de47f9aa6397836075c96ab99b6b47854369e24edcd9f2cd78d74e1be6015944c01a8031381ddd8e08b789353550db777436a1de372659ab5a09ae5a5f31901f4741bebeffaf1cbcfed4e5c205a15b77362dc908851c023ddc4928e5099f0cb2c0e052507a4438b26a32d07be9091fcd6cb0abaec494f7fc2c3cac13a98c866fb8384de9442fd73d025966ba4e0e267e003afe5e70c7c84459db96599e4337a1a7fee4a5d57641dddafd88cac7747e79a87ed10c1e92f395bd591a58e02bbd654c533caf76187582fb6b821fb599d0bbfc91d9021cd94ce08294f3513ad754416f8f946657abcbef9da7bae65cfecb74047bed07b467129f558186c93edc0735fd9087384531df860cdb77eb710218d7ad4614cddec6277af7d38603a9f76e76cf00f211492f2bc2e255b51529537e2e09e47ef2ad3890cf15b5c29dabc1fb58fc39d8667f17299f0a26cf01b9b16f00f3163d617dea1fe6b408004c7a0ba201f4776f84ab7bed022b7d3e6d165439485763b1a865737c694600234a816ddb9373ce049b5365f57ed53d028cd090d698131061cc9c09c635d8e055318f0e549ff2cbab69afebbdc8843c0641adcd5dbb28466d44a2fdf8178ef0f859926e17d2ab23a7f826a982d2d26ee1eeeb3a263cf388bf42eba5715a0736c90a3a351db49b13eedd04a995b77a6a8b0324affd253bfc80158dbf56a7fa4724c7493bf6e16cbbcc4fb67d946e8493660016d3bb1f47d11a706e15a4d05030d82442be5882da9674b288a7abacb6b130e1ddd8ff1939158d83cce245ef9fd294d9f2bcee6c7994edf5d076af4f7d4cfa3e603266df5f7e56dbd396a3389693f261eca6264d48ecb0a0f9015a95a01ec1aba7c190e57bd6c64c6e9e4965d97989146e7fa8f962d794f9c642f17510cf45689b6ce55fca259c4bb1ad114f78839751ce60a02dd9d1cf617bb8c6c51aceb26ae2da759abdcbc43075b2298a01bd211fe0ba702eab8aa6e788ebb0524a5f7cd162a22b748356c27c9d1ea5bf0f7e828b7b71a9de753171f362b2d273a37de1170850a31dff89626f94dcedef8300b429465c51a5241092559bdf9d21957301fc3bc7b5af504db7dad2aa0351c79efc463bd439077284808098e3a8a047d8f7c170f7da64b4b3a8819bc5983e41aa027bc9322a6ea8cd8be52f98c1d3974ac8f1d8ce20f2e856aca26ce31604c10416290a6768646fe6b69c1da31ca0040e8f7373f58dc3836dba9f67107c427936126b9316385fe66df81f6b8a512bbb8e8ea277ec9da2edd1ca42225702172ad36cf12a86b5e199a28c1b52eb3c1b66478541132d71a34417334d4b8baf7acd2b0b3c7684ec6a122d406fac62b44507401a376419f2d7826d230c5af544f6627d9a0e4f3e35af3297e215d2828d8aec11fb632c5209bcfee70e0e0d38f8bb6408af60256ce095e9aaf3125b4295722b995261e6941779fb8155355393e71c229ddc945a439a50c30835ee84658cd5b0a98de78052013c8021c76c260a3dbfd710d321f68ebc6578a380ad3b218d1298ccbd272bc667565b38e319947640bc1abc02022ddfbf9daea4a6631ff1519aa827043d0cc586b0457a5724b1c28f63781fe5b691ec18585a0820334712cd32f3aa17f044923f717573e1b4f1a169e0fe4068816f56590747cbd7aac8d1967f641511cd339166155fe07e6fa1f623c2bf68a961f7397aca9ff4b83c4e96115f998ec6b2fe076a6830e869aefde5c88dbe806488a71d1355af2756f94f5c6a55c5b7d6357b249dffc4ded3a3b2f3d2060e7373b9d3dc8fe39ebe4879c6c3fe037a1663924aab07ae51addb78c474dca72f5ca9331c66b2b2f49278ee2103e6217b9f6f3f4685c82da79574d2fd2a149c54432509592a30867df2253a1ef88de12dc837eb72a9acabfeeb13258a191110134cf5f3737d6b8b76ed9e8ee931a7e63f1ca84dd9d37f1fdb567f891d13531939947d300145cd0934c5faf0085a62c73c7fe166be6c40dd1c0289bc08df410eed0615e1227f00d84ef159115dc385013bb742314f9049316df46e349ddee657837a4e2c34abf5c5fc168c9c02bea627d13eec1d6774fd0e284a941f5ccae88a85abfa69d9365750c628f7c5394f11741c4d32dc6534cff137696989405173853922b900bc2106379250ea369eff0f485d93c486e7457fc3fac20b93f5664ebb2e8542da17370529cba20d87db78c9d3e739841d5d1f3e4520279ec3e365fa589f15adae7d7c24fab599bb57558aa4f0be4fa6415b52e72f6d7c00226307b3e1e9dd285d58533f8656e1fd6e781f9b4ca975bedc979ae7570ccc22e212c04dca740bb1029164344218114503ee99f903c2b78c0d8212725d2afc2220fa361a49d81f91e7e56ad1b9809cafb4dd85e1d9db9a2d31a789d55c01321afd879e8f9fbd4dc96000ff3df7d604578e35ff698e8e87a75af1bb5c4b40533b4e5e82122e47c6f57df97fdd5706588ddb221a0ddc24ad9c3efc08a7dcc4b7edf97693301fc484cea232ce4c07cd0f14226ad6d0d7aa4afffca21246662810b08c3cb2c1beb0f705cbc052100fc8a2fe5a3a16c5d849e54840e1719f46022550fb7da3f68860754b18d31b7bf9d9993d6e4b3790b37422097a2deb4675edb5f5d6f6511b2e085d6f730850019124326ab1e344c6ba9942a8cb335a5debe985ba43e608f1b969d33af7885991ebd78ce4422df3364d56e7b0d537b298e05f5036412978173802100b04819216c0a493c239ddfea60526c19da0af13054c499fb0f42f2f74bebc658ba343800f194e558d74a189189322fbc7b890ceb491014b4343a8b1595e9e393da3da4a5ce969800486aa6328eae23a8ebebdfce0e6de2dc94bbd0b946bd706c61e428bffba0c3b43a1f1413e5441f8772498a7e8428cb4acc34ad2eaa2fd9d146d40cd50385a5cb25b2512914b74445f217748d2657ef9fa8a4a8f2812c59728277fea51ac46c5f0513f93e304e2c9860749e9430e4ab3cfdc6d4a8fee4748b8f0cf9daf3147e949fb4d451c39b35b2776aa1d79cd3321ba362aad18bdf41d5ff5ea719f7e0388499db9e06190cf1781a873bd54577582d449ccd2f3e49cfd391c381ee2066c6f729958dd6a01053a7d5367c1187db291f23a49693b4f7ad5ae254b967a12186c81d3c46cf9e8ba7d781d0787c2273a93597c1e9a9cdb5abf0959cb131bef9d336c4d79b30b317e2011131eac03dd861944e21c9c4d04850f7c36488358f218e91b50da4c9b51a99076c71d7073d5be63b979916adfbcebf94368eff4e328a5c7f2fb556cf13269e30b1ded2e246690d827e46522fec5e910834b2a1f15a72d6ce3712d8aaeec9794495af5bbf21ebb5af86b38006b8d5fd2b62829904f6b1f0b4ffc8f2f0930e54d048952dfad67e446338402031d662efbac08f849637bf2942d27ea21257d09b6588a565f5efbe5246679eb75a072161a2064b3efa72df0b2f11f816d866816a67756f77e94cfcc523678fa640b625e64ad75a369524ca01d43d57f1023c49223a0e17f99726397c2b067ecb62653cbf5650066a963a9a42ed5876f44e7e3b31b84311c63f36b3fc37485b590eb0d41792492a5257ca861484322e0b29173c612b01b495dcf9281d9dd3a805efb57c73533ca572c89c23b4bd85b02a9fe02b8a3b1e427a485e463f90b9bbcaebb8f6b9796d5683a078de6a56ed2579e1dd10077df31481b05e3d4f6a8a07cc1f675f35db28be6e565fe5a0f0ce9bc6664bd85c6f75ed001d2dc2fcbce8adf79c206ce09ba5546b317f7c4a6915896a34e91aa7e1d1341caaed275ed1e77b70233fb1431edc864b80b95c1e585960dce7a834b9c116a4e06edf1d1b08f5e6a014bddb0df9736f4a6bfdca9164d73be06adbecd85eb57832d26957e5a537e8297ce27e1e2199b531f0785ebe1606a484e46f57b5dade8bdcb00d93c7868926a533984e0fc27cc5ffe7a6fdab25cdd631fa1f037becc8c53cd932f3a63729c9c1c021c597447fbb1c36fd80f13ad91a77a47b5c53f424b521943c45594b7e6f59f7558b1b20d7cf733842317d036854eb7e029af7cbaa5816c179d973b878b7e9492a2e07cae17b4910d1ecce04782ed082390167a24c00c5acb245203789e548c2340b6c92fd743b32a889412c723e7c0ac3be9c91797736b19a8dfec8b068b956937b23dc947326771dc4f696e4bf255fedb8f6d8cd37456d6c6f0ba40bda6695bca5601c43b0a9d720d0d11bd1e8d7332312ac558ea06920e9422ec9a5f76cb7cdcba699ed390e6a919299b823d9fb814d7ee3a7c7ffaa20aecba425b4beff8c05d0f9bc261c864e8f19c3d97fa0ff0cb402b58432f4ae4be36b2012b57316e820064e5247ff5b60a434c8e48f00000000000000000000000000000000"]) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DRM_IOCTL_VERSION(r0, 0x80044dfb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xc7, &(0x7f0000000040)=""/199, 0x88, &(0x7f0000000200)=""/136, 0xffffffffffffff52, &(0x7f00000003c0)=""/200}) 2018/05/17 02:39:44 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xfffffdf1) getpgid(0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) r2 = getpgrp(r1) ptrace$getsig(0x4202, r2, 0x8, &(0x7f0000000040)) [ 458.629290] binder: BINDER_SET_CONTEXT_MGR already set [ 458.651299] binder: 30403:30405 ioctl 40046207 20000340 returned -16 [ 458.663781] tc_dump_action: action bad kind 2018/05/17 02:39:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfe800000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 458.679792] binder_alloc: binder_alloc_mmap_handler: 30403 20001000-20004000 already mapped failed -16 [ 458.709236] device lo entered promiscuous mode [ 458.781322] binder: BINDER_SET_CONTEXT_MGR already set [ 458.788359] binder: BINDER_SET_CONTEXT_MGR already set [ 458.794488] IPVS: ftp: loaded support on port[0] = 21 [ 458.809312] binder: 30403:30405 ioctl 40046207 0 returned -16 [ 458.815692] binder: 30403:30411 ioctl 40046207 20000340 returned -16 2018/05/17 02:39:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/05/17 02:39:45 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x16, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xd2, "40b26d1915d60943ced6991d8dbac8c984f79f03ad51a9f9d2e99d34ab44530f2c56d275ad78ce0ae4fc92f064813494fd3a33909dbf2d137f647ccd23fe8691a5a7c0bf921060068b666bab22b9c01fb4bce7c1fc29f47d5fac1674d0f74d96def1d5f86403cb7ad2c4b78adaffccb897ae7b2865995a8d68cba02f90b19c3c8aec349614912fd73f59eff605bcd867a657264249c0243086b4a79864369c90bc839fce06f50632d6e2d4eec6866fa84402c51dd0d9c49bad56c32a2964bd242199e252a27959695305a629b3811641acda"}, &(0x7f0000000280)=0xda) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x3f, 0x80000000, 0x0, 0x10001, 0x1ff, 0x2, 0x8, 0x0, r1}, &(0x7f00000002c0)=0x19) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r2, 0x10000}, &(0x7f0000000140)=0x8) mkdir(&(0x7f00000000c0)='./file0\x00', 0x2) r3 = socket(0x11, 0x2, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000001a00)=[{&(0x7f0000000080)=@in6={0xa, 0x4, 0x4, @loopback={0x0, 0x1}}, 0x1c, &(0x7f00000002c0), 0x0, &(0x7f0000000540)}], 0x1, 0x0) 2018/05/17 02:39:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2040, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbff}, 0xc) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000240)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000040)={0x10f004}) 2018/05/17 02:39:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e22, @multicast2=0xe0000002}, {0x7}, 0x18, {0x2, 0x4e21, @loopback=0x7f000001}, 'gretap0\x00'}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 2018/05/17 02:39:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x300], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:45 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ppoll(&(0x7f0000000180), 0x0, &(0x7f0000000040)={r1, r2+10000000}, &(0x7f00000001c0), 0x8) 2018/05/17 02:39:45 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfe80, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 459.425634] binder_alloc: binder_alloc_mmap_handler: 30446 20001000-20004000 already mapped failed -16 [ 459.454520] binder: BINDER_SET_CONTEXT_MGR already set [ 459.458395] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0xff66) 2018/05/17 02:39:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xff00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:45 executing program 5: r0 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x4) fsetxattr(r0, &(0x7f0000000380)=@random={'trusted.', "020000001000000000000000f51b3412a4131c9aa78c5c850870ddd72c53715c7eabc23117febd9563a4b9e1473e896da61fe04c68547b732b425d4ffc0eb36a643b893d7f0001813c562dbc65f3b14b23979f2fbc3b2ea9ac14b8715836008b1502c54dcc6c47f311b697e78a5c0c86"}, &(0x7f0000000300)="020000001000000000000000f51b3412a4131c9aa78c5c850870ddd72c53715c7eabc23117febd9563a4b9e1473e896da61fe04c68547b732b425d4ffc0eb36a643b893d7f0001813c562dbc65f3b14b23979f2fbc3b2ea9ac14b8715836008b1502c54dcc6c47f311b697e78a5c0c86", 0x70, 0x4000000) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x6, 0x440202) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000100)={0xa, 0x0, [{0xc000000d, 0x6, 0x3f, 0x13f, 0x1}, {0x8000000f, 0x7ff, 0x9338, 0x8001, 0x1ff}, {0x6, 0x7f, 0x0, 0x4, 0x40}, {0x40000001, 0x7, 0x8, 0x9, 0x4}, {0x80000019, 0x2, 0x40000, 0x6, 0x1a}, {0x40000007, 0x24, 0xed0a, 0x7fff, 0xffffffff7fffffff}, {0x80000001, 0x2, 0x7, 0x4771, 0x2}, {0x7, 0x4, 0x726, 0xff, 0x401}, {0x2, 0x2, 0x7be, 0xc88, 0xe5d}, {0x40000000, 0x5, 0xa8, 0xa8, 0x8}]}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x210001, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000040)=0xfffffffffffffff8) [ 459.487207] binder: 30446:30447 ioctl 40046207 0 returned -16 2018/05/17 02:39:45 executing program 4 (fault-call:4 fault-nth:0): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:45 executing program 0: unshare(0x64000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, 0x1c) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x0, 0x3}) [ 459.696111] IPVS: ftp: loaded support on port[0] = 21 [ 459.696989] FAULT_INJECTION: forcing a failure. [ 459.696989] name failslab, interval 1, probability 0, space 0, times 0 [ 459.713094] CPU: 0 PID: 30475 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 459.720385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 459.729758] Call Trace: [ 459.732372] dump_stack+0x1b9/0x294 [ 459.736038] ? dump_stack_print_info.cold.2+0x52/0x52 [ 459.741269] should_fail.cold.4+0xa/0x1a [ 459.745363] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 459.750498] ? perf_trace_buf_update+0x66/0xb0 [ 459.755100] ? graph_lock+0x170/0x170 [ 459.758936] ? find_held_lock+0x36/0x1c0 [ 459.763035] ? __lock_is_held+0xb5/0x140 [ 459.767141] ? check_same_owner+0x320/0x320 [ 459.771482] ? tracing_generic_entry_update+0x18e/0x200 [ 459.772397] device lo entered promiscuous mode [ 459.776888] ? rcu_note_context_switch+0x710/0x710 [ 459.776919] __should_failslab+0x124/0x180 [ 459.776945] should_failslab+0x9/0x14 [ 459.794567] kmem_cache_alloc+0x2af/0x760 [ 459.798758] mmu_topup_memory_caches+0xf7/0x3a0 [ 459.803459] kvm_mmu_load+0x21/0x10e0 [ 459.807283] ? memset+0x31/0x40 [ 459.810591] vcpu_enter_guest+0x3a83/0x6060 [ 459.814927] ? perf_trace_lock+0x495/0x900 [ 459.817466] IPVS: ftp: loaded support on port[0] = 21 [ 459.819189] ? kvm_set_msr_common+0x2680/0x2680 [ 459.819206] ? __lock_acquire+0x7f5/0x5140 [ 459.819227] ? vmx_vcpu_load+0xadd/0xfe0 [ 459.819253] ? graph_lock+0x170/0x170 [ 459.841160] ? perf_trace_run_bpf_submit+0x246/0x370 [ 459.846295] ? perf_tp_event+0xc30/0xc30 [ 459.850394] ? __lock_is_held+0xb5/0x140 [ 459.854479] ? lock_acquire+0x1dc/0x520 [ 459.858472] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 459.863691] ? lock_release+0xa10/0xa10 [ 459.867684] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 459.872980] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 459.877511] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 459.882367] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 459.887417] kvm_vcpu_ioctl+0x79d/0x12e0 [ 459.891500] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 459.897238] ? lock_downgrade+0x8e0/0x8e0 [ 459.901423] ? rcu_is_watching+0x85/0x140 [ 459.905593] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 459.910819] ? __fget+0x40c/0x650 [ 459.914314] ? expand_files.part.8+0x9a0/0x9a0 [ 459.918919] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 459.923963] ? wait_for_completion+0x870/0x870 [ 459.928583] ? __fget_light+0x2ef/0x430 [ 459.932583] kvm_vcpu_compat_ioctl+0x208/0x480 [ 459.937188] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 459.941525] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 459.947071] ? fput+0x130/0x1a0 [ 459.950623] ? ksys_write+0x1a6/0x250 [ 459.954452] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 459.959652] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 459.963997] __ia32_compat_sys_ioctl+0x221/0x640 [ 459.968796] do_fast_syscall_32+0x345/0xf9b [ 459.973143] ? do_int80_syscall_32+0x880/0x880 [ 459.977741] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 459.982606] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 459.988165] ? syscall_return_slowpath+0x30f/0x5c0 [ 459.993123] ? sysret32_from_system_call+0x5/0x46 [ 459.997993] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 460.002869] entry_SYSENTER_compat+0x70/0x7f [ 460.007299] RIP: 0023:0xf7fdbcb9 [ 460.010666] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 460.018394] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 [ 460.025678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.032964] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 460.040242] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 460.047501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/17 02:39:46 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = dup3(r0, r0, 0x80000) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x5, 0x401, 0x1000, 0x5}, 0x8) rt_sigsuspend(&(0x7f0000000040)={0x8}, 0x8) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x410c40, 0x0) 2018/05/17 02:39:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x1800], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:46 executing program 5: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'ip6tnl0\x00'}, 0x18) syz_emit_ethernet(0x1154, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@mpls_mc={0x8848, {[{0x8001, 0x3e3, 0x784b, 0x9}, {0x0, 0x5, 0x37, 0xc6}, {0x7, 0x6, 0x80, 0x9}, {0x0, 0x200, 0x7, 0xc42}, {0x0, 0x62a8, 0x10001, 0x3}, {0xf80e, 0x100000001, 0x2, 0x26}, {0x46d4, 0x8, 0x9, 0x1}], @ipv6={0x3, 0x6, "418a0c", 0x1102, 0x0, 0x10000, @dev={0xfe, 0x80, [], 0xf}, @empty, {[@dstopts={0x3f, 0x0, [], [@enc_lim={0x4, 0x1, 0x1}]}, @dstopts={0x62, 0x4, [], [@pad1={0x0, 0x1}, @jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @mcast1={0xff, 0x1, [], 0x1}}, @pad1={0x0, 0x1}, @pad1={0x0, 0x1}]}, @srh={0x3c, 0x8, 0x4, 0x4, 0xffff, 0xfffffffffffffffa, 0x0, [@empty, @loopback={0x0, 0x1}, @local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80, [], 0x21}]}, @routing={0x62, 0x2, 0x0, 0x82, 0x0, [@empty]}, @hopopts={0x2b, 0x2, [], [@enc_lim={0x4, 0x1, 0x1}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x80000000}]}, @fragment={0x7f, 0x0, 0x1, 0x7, 0x0, 0x3, 0x66}, @hopopts={0x0, 0x200, [], [@generic={0x6, 0x1000, "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"}]}], @dccp={{0x4e24, 0x4e23, 0x4, 0x1, 0x7, 0x0, 0x0, 0xb, 0xffffffff80000000, "882b85", 0xfffffffffffffc01, "ebff94"}, "4023021a29d991dd084e01c619aaaff2fd79584c07d5104a501b"}}}}}}}, &(0x7f0000000040)={0x2000000000, 0xfffffffffffffffd, [0x0, 0x0, 0x4, 0x4]}) 2018/05/17 02:39:46 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000240)=0x7, 0x4) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x385b) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000180)) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x2}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000200)=0x4) recvfrom$ax25(r0, &(0x7f0000000000)=""/192, 0xc0, 0x20, &(0x7f0000000140)={0x3, {"9120185c6e407c"}, 0x6b5}, 0x10) 2018/05/17 02:39:46 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x7, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:46 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x10000) 2018/05/17 02:39:46 executing program 4 (fault-call:4 fault-nth:1): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 460.357216] binder_alloc: binder_alloc_mmap_handler: 30493 20001000-20004000 already mapped failed -16 [ 460.380936] IPVS: ftp: loaded support on port[0] = 21 [ 460.385164] binder: BINDER_SET_CONTEXT_MGR already set [ 460.386390] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x3], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 460.410490] binder: 30493:30497 ioctl 40046207 0 returned -16 [ 460.438541] FAULT_INJECTION: forcing a failure. [ 460.438541] name failslab, interval 1, probability 0, space 0, times 0 [ 460.450020] CPU: 0 PID: 30502 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 460.457321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 460.466698] Call Trace: [ 460.469307] dump_stack+0x1b9/0x294 [ 460.473035] ? dump_stack_print_info.cold.2+0x52/0x52 [ 460.478250] ? __save_stack_trace+0x7e/0xd0 [ 460.482607] should_fail.cold.4+0xa/0x1a [ 460.486787] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 460.487080] IPVS: You probably need to specify IP address on multicast interface. [ 460.492168] ? kasan_kmalloc+0xc4/0xe0 [ 460.492189] ? kasan_slab_alloc+0x12/0x20 2018/05/17 02:39:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5310, &(0x7f0000000080)={0x84a48b125e13656b}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_rr_get_interval(r1, &(0x7f0000000040)) [ 460.492211] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 460.492227] ? kvm_mmu_load+0x21/0x10e0 [ 460.492247] ? vcpu_enter_guest+0x3a83/0x6060 [ 460.492260] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 460.492275] ? graph_lock+0x170/0x170 [ 460.492290] ? entry_SYSENTER_compat+0x70/0x7f [ 460.492322] ? find_held_lock+0x36/0x1c0 [ 460.492350] ? __lock_is_held+0xb5/0x140 [ 460.500643] IPVS: Error connecting to the multicast addr [ 460.504172] ? check_same_owner+0x320/0x320 [ 460.504200] ? rcu_note_context_switch+0x710/0x710 2018/05/17 02:39:46 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) sysfs$2(0x2, 0x0, &(0x7f0000000000)=""/149) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@mpls_getnetconf={0x14, 0x52, 0x0, 0x0, 0x0, {0x1c}}, 0x33fe0}, 0x1}, 0x0) [ 460.504233] __should_failslab+0x124/0x180 [ 460.547708] IPVS: ftp: loaded support on port[0] = 21 [ 460.548683] should_failslab+0x9/0x14 [ 460.548704] kmem_cache_alloc+0x2af/0x760 [ 460.548736] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 460.580155] mmu_topup_memory_caches+0xf7/0x3a0 [ 460.584855] kvm_mmu_load+0x21/0x10e0 [ 460.588676] ? memset+0x31/0x40 [ 460.591993] vcpu_enter_guest+0x3a83/0x6060 [ 460.596331] ? perf_trace_lock+0x495/0x900 [ 460.600534] IPVS: You probably need to specify IP address on multicast interface. [ 460.600590] ? kvm_set_msr_common+0x2680/0x2680 [ 460.612888] ? __lock_acquire+0x7f5/0x5140 [ 460.617235] ? vmx_vcpu_load+0xadd/0xfe0 [ 460.621430] ? graph_lock+0x170/0x170 [ 460.625247] ? perf_trace_run_bpf_submit+0x246/0x370 [ 460.630379] ? perf_tp_event+0xc30/0xc30 [ 460.634477] ? __lock_is_held+0xb5/0x140 [ 460.638566] ? lock_acquire+0x1dc/0x520 [ 460.642557] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 460.645731] IPVS: Error connecting to the multicast addr [ 460.647594] ? lock_release+0xa10/0xa10 2018/05/17 02:39:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x1f00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 460.647617] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 460.647639] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 460.647679] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 460.647692] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 460.647726] kvm_vcpu_ioctl+0x79d/0x12e0 [ 460.653516] device lo entered promiscuous mode [ 460.657145] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 460.657173] ? lock_downgrade+0x8e0/0x8e0 [ 460.657205] ? rcu_is_watching+0x85/0x140 [ 460.657227] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 460.657267] ? __fget+0x40c/0x650 [ 460.708126] ? expand_files.part.8+0x9a0/0x9a0 [ 460.712735] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 460.715470] IPVS: ftp: loaded support on port[0] = 21 [ 460.717684] ? wait_for_completion+0x870/0x870 [ 460.717730] ? __fget_light+0x2ef/0x430 [ 460.717764] kvm_vcpu_compat_ioctl+0x208/0x480 [ 460.717787] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 460.740404] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 460.745966] ? fput+0x130/0x1a0 [ 460.749265] ? ksys_write+0x1a6/0x250 [ 460.753097] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 460.758310] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 460.762655] __ia32_compat_sys_ioctl+0x221/0x640 [ 460.767442] do_fast_syscall_32+0x345/0xf9b [ 460.771786] ? do_int80_syscall_32+0x880/0x880 [ 460.776388] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 460.781254] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 460.786809] ? syscall_return_slowpath+0x30f/0x5c0 [ 460.791764] ? sysret32_from_system_call+0x5/0x46 [ 460.796632] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 460.801505] entry_SYSENTER_compat+0x70/0x7f [ 460.805920] RIP: 0023:0xf7fdbcb9 2018/05/17 02:39:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 460.809295] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 460.817021] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 [ 460.824301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 460.831581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 460.838861] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 460.846143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 460.964151] binder_alloc: binder_alloc_mmap_handler: 30525 20001000-20004000 already mapped failed -16 [ 461.004638] binder: BINDER_SET_CONTEXT_MGR already set [ 461.027386] binder: 30525:30526 ioctl 40046207 0 returned -16 2018/05/17 02:39:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:48 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xf7ffff7f00000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:48 executing program 4 (fault-call:4 fault-nth:2): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:48 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x8910, &(0x7f0000000100)={'ip6gre0\x00', {0x2, 0x0, @multicast1=0xe0000001}}) r1 = dup(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10082008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x1f, 0x70bd2d, 0x25dfdbfc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x2000000010) 2018/05/17 02:39:48 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:48 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) getsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f00000000c0), &(0x7f0000000080)=0x86) 2018/05/17 02:39:48 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x3d, &(0x7f0000000000)=""/28, &(0x7f0000000040)=0x1c) 2018/05/17 02:39:48 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) r1 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x1, 0x10402) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0xccd, 0x6, 0x4, 0x4, 0x80, 0x3f, 0xfffffffffffffeff, 0x8000, 0x3, 0x7, 0x1, 0x8}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x9, 0x2}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000300)={r2, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}}, 0x84) rt_sigprocmask(0x1, &(0x7f00000000c0)={0x7f}, &(0x7f0000000100), 0x8) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0xc82, @loopback={0x0, 0x1}}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000040), &(0x7f0000000140)={0xfffffffffffffffd}, 0x2bd) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x101000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000180)={0x1, "e3"}, 0x2) ioctl$TIOCNOTTY(r3, 0x5422) [ 462.665475] binder_alloc: binder_alloc_mmap_handler: 30538 20001000-20004000 already mapped failed -16 [ 462.668359] IPVS: ftp: loaded support on port[0] = 21 [ 462.693494] binder: BINDER_SET_CONTEXT_MGR already set [ 462.705812] binder: 30538:30546 ioctl 40046207 0 returned -16 2018/05/17 02:39:48 executing program 5: symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) umount2(&(0x7f0000000180)='./file0\x00', 0x8) [ 462.707065] FAULT_INJECTION: forcing a failure. [ 462.707065] name failslab, interval 1, probability 0, space 0, times 0 [ 462.723219] CPU: 1 PID: 30551 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 462.730498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 462.739859] Call Trace: [ 462.742466] dump_stack+0x1b9/0x294 [ 462.746117] ? dump_stack_print_info.cold.2+0x52/0x52 [ 462.751332] ? __save_stack_trace+0x7e/0xd0 [ 462.755682] should_fail.cold.4+0xa/0x1a [ 462.759763] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/17 02:39:48 executing program 5: llistxattr(&(0x7f00000003c0)='.\x00', &(0x7f0000000400)=""/148, 0xd) r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='~', 0x1}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x14) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') r4 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0x1, 0x8000) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000500)) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r3, 0x202, 0x70bd2c, 0x25dfdbff, {0x6}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x8800) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000014250017072cbd5a00fcdbdf2500000000", @ANYRES32=r2, @ANYBLOB="ffff0a00ffff0e000d00000008000d003ce5000008000100636271001400020010000200ff060105000800007b000000"], 0x48}, 0x1}, 0x40010) dup3(r1, r0, 0x0) [ 462.764882] ? kasan_kmalloc+0xc4/0xe0 [ 462.768786] ? kasan_slab_alloc+0x12/0x20 [ 462.772951] ? kmem_cache_alloc+0x12e/0x760 [ 462.777292] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 462.782150] ? kvm_mmu_load+0x21/0x10e0 [ 462.786134] ? vcpu_enter_guest+0x3a83/0x6060 [ 462.790642] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 462.795676] ? graph_lock+0x170/0x170 [ 462.799489] ? entry_SYSENTER_compat+0x70/0x7f [ 462.801129] device lo entered promiscuous mode [ 462.804086] ? find_held_lock+0x36/0x1c0 2018/05/17 02:39:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x2000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 462.804110] ? __lock_is_held+0xb5/0x140 [ 462.804141] ? check_same_owner+0x320/0x320 [ 462.821135] ? rcu_note_context_switch+0x710/0x710 [ 462.826083] __should_failslab+0x124/0x180 [ 462.830344] should_failslab+0x9/0x14 [ 462.834179] kmem_cache_alloc+0x2af/0x760 [ 462.838349] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 462.843217] mmu_topup_memory_caches+0xf7/0x3a0 [ 462.847905] kvm_mmu_load+0x21/0x10e0 [ 462.851724] ? kasan_check_write+0x14/0x20 [ 462.855972] ? __mutex_lock+0x7d9/0x17f0 [ 462.860042] ? debug_check_no_locks_freed+0x310/0x310 [ 462.865249] vcpu_enter_guest+0x3a83/0x6060 [ 462.869585] ? perf_trace_lock+0xd6/0x900 [ 462.873750] ? kvm_set_msr_common+0x2680/0x2680 [ 462.878428] ? __lock_acquire+0x7f5/0x5140 [ 462.882673] ? vmx_vcpu_load+0xadd/0xfe0 [ 462.886743] ? debug_check_no_locks_freed+0x310/0x310 [ 462.891937] ? print_usage_bug+0xc0/0xc0 [ 462.896010] ? graph_lock+0x170/0x170 [ 462.899826] ? debug_check_no_locks_freed+0x310/0x310 [ 462.905023] ? perf_trace_lock+0xd6/0x900 [ 462.909191] ? __lock_is_held+0xb5/0x140 2018/05/17 02:39:48 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x2e0440) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x6) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) fcntl$setstatus(r0, 0x4, 0xf000000000000003) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x10d, 0x2, &(0x7f0000000000), 0xdf) 2018/05/17 02:39:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfec0], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 462.913276] ? lock_acquire+0x1dc/0x520 [ 462.917269] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 462.922308] ? lock_release+0xa10/0xa10 [ 462.926302] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 462.931594] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 462.936109] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 462.940963] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 462.946005] kvm_vcpu_ioctl+0x79d/0x12e0 [ 462.950084] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 462.955818] ? lock_downgrade+0x8e0/0x8e0 [ 462.959980] ? rcu_is_watching+0x85/0x140 2018/05/17 02:39:49 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="118a9e634c40", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12634840000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000", @ANYPTR64=&(0x7f0000000080)=ANY=[], @ANYPTR64=&(0x7f0000000180)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper={0x630c}], 0x26, 0x0, &(0x7f0000000040)="04bf68548fdf66482a449298d0a528d320049d508fa79a522588e6b5077d92748fb4b67e0eed"}) finit_module(r1, &(0x7f0000000140)='/dev/binder#\x00', 0x2) [ 462.964135] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 462.969342] ? __fget+0x40c/0x650 [ 462.972817] ? expand_files.part.8+0x9a0/0x9a0 [ 462.977443] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 462.982385] ? wait_for_completion+0x870/0x870 [ 462.986990] ? __fget_light+0x2ef/0x430 [ 462.991068] kvm_vcpu_compat_ioctl+0x208/0x480 [ 462.995666] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 463.000006] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 463.005557] ? fput+0x130/0x1a0 [ 463.008848] ? ksys_write+0x1a6/0x250 [ 463.012654] ? __do_page_fault+0x441/0xe40 2018/05/17 02:39:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfc00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 463.016910] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 463.022111] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 463.026446] __ia32_compat_sys_ioctl+0x221/0x640 [ 463.031219] do_fast_syscall_32+0x345/0xf9b [ 463.035557] ? do_int80_syscall_32+0x880/0x880 [ 463.040148] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 463.045175] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 463.049950] ? sysret32_from_system_call+0x5/0x46 [ 463.053490] binder: BINDER_SET_CONTEXT_MGR already set [ 463.054806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 463.054831] entry_SYSENTER_compat+0x70/0x7f [ 463.054843] RIP: 0023:0xf7fdbcb9 [ 463.054856] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 463.079898] binder: 30585:30586 ioctl 40046207 0 returned -16 [ 463.080404] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 [ 463.080414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.080421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 463.080434] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 2018/05/17 02:39:49 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) 2018/05/17 02:39:49 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xf4010000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 463.103686] binder: 30585:30586 unknown command 1671334417 [ 463.108095] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/17 02:39:49 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r1, 0x201, 0x70bd2a, 0x25dfdbfd, {0xd}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xcc8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffffc}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) [ 463.219717] binder: 30585:30586 ioctl c0306201 20007000 returned -22 [ 463.238273] binder: 30585:30586 got reply transaction with no transaction stack [ 463.245900] binder: 30585:30586 transaction failed 29201/-71, size 0-8388608 line 2763 [ 463.256464] binder_alloc: binder_alloc_mmap_handler: 30585 20001000-20004000 already mapped failed -16 [ 463.275750] binder: 30585:30604 unknown command 1671334417 [ 463.287978] binder: 30585:30604 ioctl c0306201 20007000 returned -22 [ 463.297676] binder: 30585:30586 got reply transaction with no transaction stack [ 463.305332] binder: 30585:30586 transaction failed 29201/-71, size 0-8388608 line 2763 [ 463.306375] binder: 30604 RLIMIT_NICE not set [ 463.338353] binder: undelivered TRANSACTION_ERROR: 29201 [ 463.344105] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/17 02:39:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x18], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:50 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306254, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @in=@rand_addr, 0x4e23, 0x100000000, 0x4e21, 0x1f, 0xa, 0xa0, 0x20, 0xbd, r1, r2}, {0x2, 0x3ff, 0x56, 0x4, 0x7f, 0x4, 0x80000001, 0x4}, {0xffffffffffff8001, 0x2, 0xfff, 0x7}, 0x6, 0x6e6bb2, 0x1, 0x0, 0x2, 0x3}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4d6, 0x3b}, 0xa, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x3504, 0x3, 0x0, 0xefa0, 0xff, 0x6, 0x19}}, 0xe8) r3 = socket(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x30, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_VFINFO_LIST={0x10, 0x16, [{0xc, 0x1, [@typed={0x8, 0xc, @uid}]}]}]}, 0x30}, 0x1}, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) 2018/05/17 02:39:50 executing program 4 (fault-call:4 fault-nth:3): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:50 executing program 5: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) readv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/225, 0xe1}, {&(0x7f00000001c0)=""/137, 0x89}], 0x2) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x1, 0x3f, 0x0, 0xe527, 0x9}) socket$unix(0x1, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8000000008b0f, &(0x7f0000000080)={'bridge_slave_1\x00', @ifru_mtu}) 2018/05/17 02:39:50 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x40) ioctl$sock_netrom_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = add_key(&(0x7f00000000c0)='syzkaller\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000002c0)="12e16aae216dee3b79f2318176933e212c1a5d123425374b6fca51bb986bbefec731ade5082a39fa31b832a74adba8edd01861aea5e4fe3fc832685913423ae57d1f688ded20ce32723d1073ec4cc0cc7c6d7f8b3cc40dcf21fcd32ccdfc93db82b6e9c77b7873111a2b0ddea650993009e7f51efdd2ede6be73145eee705af9c138a3dfa866e5e25a5ef5a606801f9c3945be2cec5fe70ab86a9f5eaecaf80ee48df813429f8d6f47c8e3bc0d5d5013588eeb95731085e5ab4fd10a3a1e2e99bcaa44d9618e83", 0xc7, 0xfffffffffffffffd) keyctl$revoke(0x3, r2) 2018/05/17 02:39:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x40, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x8, 0x5, 0x4a, &(0x7f0000ff9000/0x4000)=nil, 0x77}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/05/17 02:39:50 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x3000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 464.419851] binder: 30628:30629 ioctl c0306254 20000340 returned -22 [ 464.424313] IPVS: ftp: loaded support on port[0] = 21 [ 464.463140] binder_alloc: binder_alloc_mmap_handler: 30628 20001000-20004000 already mapped failed -16 [ 464.487806] binder: BINDER_SET_CONTEXT_MGR already set [ 464.498387] FAULT_INJECTION: forcing a failure. [ 464.498387] name failslab, interval 1, probability 0, space 0, times 0 2018/05/17 02:39:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr}, &(0x7f00000001c0)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000200)={@mcast2={0xff, 0x2, [], 0x1}, 0x78, r2}) 2018/05/17 02:39:50 executing program 5: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x3, 0x0) socket(0x8, 0x7, 0xff) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000000000)={'gre0\x00', @ifru_flags=0x1}) [ 464.500405] binder: 30628:30629 ioctl 40046207 0 returned -16 [ 464.509727] CPU: 0 PID: 30632 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 464.509741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.509748] Call Trace: [ 464.509775] dump_stack+0x1b9/0x294 [ 464.509799] ? dump_stack_print_info.cold.2+0x52/0x52 [ 464.543707] ? __save_stack_trace+0x7e/0xd0 [ 464.548073] should_fail.cold.4+0xa/0x1a [ 464.550548] binder: 30628:30644 ioctl c0306254 20000340 returned -22 [ 464.552161] ? fault_create_debugfs_attr+0x1f0/0x1f0 2018/05/17 02:39:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x200000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 464.552186] ? kasan_kmalloc+0xc4/0xe0 [ 464.552204] ? kasan_slab_alloc+0x12/0x20 [ 464.552226] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 464.552244] ? kvm_mmu_load+0x21/0x10e0 [ 464.580674] ? vcpu_enter_guest+0x3a83/0x6060 [ 464.585203] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 464.590242] ? graph_lock+0x170/0x170 [ 464.594062] ? entry_SYSENTER_compat+0x70/0x7f [ 464.598698] ? find_held_lock+0x36/0x1c0 [ 464.602790] ? __lock_is_held+0xb5/0x140 [ 464.606894] ? check_same_owner+0x320/0x320 2018/05/17 02:39:50 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:50 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x3}, 0x54) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f0000000680)=0xe8) connect$can_bcm(r1, &(0x7f00000006c0)={0x1d, r2}, 0x10) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)="659c8b", 0x3}, {&(0x7f0000000180)="811a2b1437482d33ac348cadc83799db3383ab91999161c163aa05cda082e62bdf32cd91e40ca802135dc4a40fd61dbabc7eaf222ce6b2f8e3920301bbe3018ff714299c24c9dd9921a5e361ee8806", 0x4f}], 0x2, 0x2) ftruncate(r1, 0x9) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x30000, 0x90) ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000040)) r5 = getgid() fchownat(r4, &(0x7f0000000200)='./file0\x00', r3, r5, 0x1800) [ 464.611241] ? rcu_note_context_switch+0x710/0x710 [ 464.616196] __should_failslab+0x124/0x180 [ 464.620448] should_failslab+0x9/0x14 [ 464.624270] kmem_cache_alloc+0x2af/0x760 [ 464.628448] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 464.633311] mmu_topup_memory_caches+0xf7/0x3a0 [ 464.638004] kvm_mmu_load+0x21/0x10e0 [ 464.641865] ? memset+0x31/0x40 [ 464.645194] vcpu_enter_guest+0x3a83/0x6060 [ 464.650401] ? perf_trace_lock+0x495/0x900 [ 464.654675] ? kvm_set_msr_common+0x2680/0x2680 [ 464.659359] ? __lock_acquire+0x7f5/0x5140 [ 464.663610] ? vmx_vcpu_load+0xadd/0xfe0 [ 464.667713] ? graph_lock+0x170/0x170 [ 464.671536] ? perf_trace_run_bpf_submit+0x246/0x370 [ 464.676667] ? perf_tp_event+0xc30/0xc30 [ 464.680761] ? __lock_is_held+0xb5/0x140 [ 464.684851] ? lock_acquire+0x1dc/0x520 [ 464.688840] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 464.693879] ? lock_release+0xa10/0xa10 [ 464.697869] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 464.703167] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 464.704667] binder: 30652:30653 ioctl 2 20000340 returned -22 [ 464.707695] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 464.707712] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 464.707751] kvm_vcpu_ioctl+0x79d/0x12e0 [ 464.707776] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 464.707802] ? lock_downgrade+0x8e0/0x8e0 [ 464.737666] ? rcu_is_watching+0x85/0x140 [ 464.741810] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 464.747025] ? __fget+0x40c/0x650 [ 464.750479] ? expand_files.part.8+0x9a0/0x9a0 [ 464.755060] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 464.759984] ? wait_for_completion+0x870/0x870 [ 464.764588] ? __fget_light+0x2ef/0x430 [ 464.768570] kvm_vcpu_compat_ioctl+0x208/0x480 [ 464.773146] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 464.777463] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 464.782988] ? fput+0x130/0x1a0 [ 464.786271] ? ksys_write+0x1a6/0x250 [ 464.790060] ? __do_page_fault+0x441/0xe40 [ 464.794291] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 464.799472] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 464.803788] __ia32_compat_sys_ioctl+0x221/0x640 [ 464.808545] do_fast_syscall_32+0x345/0xf9b [ 464.812862] ? do_int80_syscall_32+0x880/0x880 [ 464.817437] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 464.822273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.827800] ? syscall_return_slowpath+0x30f/0x5c0 [ 464.832728] ? sysret32_from_system_call+0x5/0x46 [ 464.837569] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 464.842410] entry_SYSENTER_compat+0x70/0x7f [ 464.846809] RIP: 0023:0xf7fdbcb9 [ 464.850168] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 464.857869] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 [ 464.865136] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 464.872405] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 464.879667] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 464.886937] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/17 02:39:50 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)={0x5b53, 0x9, 0x96c, 0x9, 0x6, 0x6}) write$evdev(r0, &(0x7f0000000200), 0x20020) 2018/05/17 02:39:50 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0x81785501, &(0x7f0000000000)=ANY=[@ANYBLOB="512f3c85278f3e1b59bddc4d961300008000000000a1123182c9dee669e1b75b91c28655977866b6d3c0b66a5b49c456ba799a1510d97143127fb8d7227fb661524521"]) [ 464.970710] binder_alloc: binder_alloc_mmap_handler: 30652 20001000-20004000 already mapped failed -16 [ 464.998495] binder: BINDER_SET_CONTEXT_MGR already set [ 465.035505] binder: 30652:30653 ioctl 40046207 0 returned -16 [ 465.066499] binder: 30652:30670 ioctl 2 20000340 returned -22 [ 465.088536] device lo entered promiscuous mode [ 465.114392] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000008001a00030000004b94488c92d9d590369ab71ad64e0d2887ad32c1b122702419235f91cabebca7a083f6192fa40782d1f9d283643538fa78aaf07f2eb7cd43307e3b6544ed80888c8b7376fc7f0c8ef2"], 0x28}, 0x1}, 0x0) 2018/05/17 02:39:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x11000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='\x00\x00\x00\x00\x00') getdents64(r0, &(0x7f00000011c0)=""/4096, 0x1000) getdents(r0, &(0x7f0000001100)=""/188, 0xbc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x2, 0x1, 0x3, 0x401, 0x18}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000001c0)={r1, 0x10001, 0x4, 0xfffffffffffffffd, 0x4, 0x5, 0x2, 0x2, {r2, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0x3, 0x5, 0x8000, 0x0, 0x1}}, &(0x7f0000000280)=0xb0) 2018/05/17 02:39:51 executing program 4 (fault-call:4 fault-nth:4): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:51 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@ipv4={[], [], @remote}, 0x0}, &(0x7f0000000080)=0x14) connect$packet(r0, &(0x7f00000000c0)={0x11, 0x1, r1, 0x1, 0x7f, 0x6, @random="2930097ffabd"}, 0x14) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)) 2018/05/17 02:39:51 executing program 2: r0 = socket$inet6(0xa, 0x80006, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = fcntl$getown(r0, 0x9) wait4(r1, &(0x7f0000000000), 0x2, &(0x7f0000000180)) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/05/17 02:39:51 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xa00, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:51 executing program 1: r0 = epoll_create(0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(r0, 0x0, 0x281) syz_open_dev$random(&(0x7f0000000040)='/dev/random\x00', 0x0, 0x1) pselect6(0x40, &(0x7f0000000680), &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x400000000000000}, &(0x7f0000000080)={0x0, 0x8002}, &(0x7f0000000380), &(0x7f0000000000)={&(0x7f00000003c0), 0x8}) [ 465.488060] binder_alloc: binder_alloc_mmap_handler: 30680 20001000-20004000 already mapped failed -16 [ 465.521054] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x2000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 465.536211] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:39:51 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x0) r2 = dup2(r1, r1) mq_notify(r2, &(0x7f0000000040)) r3 = dup(r0) getsockopt$inet6_tcp_int(r3, 0x6, 0x17, &(0x7f0000000000), &(0x7f0000000180)=0x4) 2018/05/17 02:39:51 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x102, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) readahead(r1, 0x8000, 0x6a) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x250100, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f0000000080)=""/51) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000100)) fcntl$getownex(r1, 0x10, &(0x7f0000001580)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000015c0)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f00000016c0)=0xe8) r5 = getgid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001700)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001740)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) stat(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001940)=0x0) stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = getgid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001a40)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001a80)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}}}, &(0x7f0000001b80)=0xe8) getgroups(0x1, &(0x7f0000001bc0)=[0xffffffffffffffff]) sendmmsg$unix(r0, &(0x7f0000001d00)=[{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000001c0)="4991f95b9796870f5198fe74fc5d4dc48929702edc989d35f30112fa5484e6659de0e84840ad35785c56c423fdf74e271140a643de70bdd1f77abf999aad4cf63c74d086dc458e1ab9d588fdfe57a50eee5d7b625c737a0d43b354303943f6a4131818b2a48cac578b9dc6fdbb4fde0c3dfea82997b195e6459aaa79c1dd35d527f428bd185a0ab2adec119bef97ddd1523679584d297252408104", 0x9b}, {&(0x7f0000000280)="8a8ab72a15df5917a6d18301b044782fcf301bbcf7fe1e3b895d92270dcdbda26a7ea7300918cbcc3822a126de44e02469059f257b1ad724d924e12e73fc199700d5a425b184e323e5b272b73f9157dd242b40f44e356315", 0x58}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="ec2752b42ca2fbf63f9f2c942ec99a9a98f93dcb3ee1418bb612be30fe72bec40951b8192b3632944ac65e30bb54711786024c5bcc593a228a706fc578857379ca5d0e04678ea307", 0x48}, {&(0x7f0000001380)="bcf4a71eec72062263de1242b7a0e167a0faad7d6de91b419aed9346d26d7466a6217a9397b0547dc77382601152144e20798f1c1651cc632b6851bf0f42", 0x3e}, {&(0x7f00000013c0)="61555a0efb2458451a49a2ec5e635b6e5131af656da1c353284d1e5a0e3e7b89ef9f01ab5e37b2dee7482f5f41ceb73cb5eaa6048f0429799f89b972deaf523c9d94a7ca564208483ba07717ded0d9fab456d96b5ba9e94af7994835c9725143f9e4c3781f84342efcb92481037e072f7a856359376b90175e6184d452e02bdf606566794ed72c2badd49666a49851882eabe3dc2ceef5b38349af31ccfb40cdf84bdb7c35bcd55dd0118a51ab38cd259bc6401844dfa0451372", 0xba}, {&(0x7f0000001480)="ccca82bc95a7960445db1d27e545034bfba8a6e0c33d760a9cfaa5cead8a55dc8ca480a84d5b76e9296d285370cb51ddaf4967f87a404bb58c593bccebc0fe1e545b1207830bb795d410af09410a906aaf0291ac29e944f94fecb7498d0e6be7be3c71b36da351999b3a114db87780c0d13aef642f9b7afa54b24d8138e96936bc19968d04fa050988ee396dcbe7258d742fad72c79759c013ab55daa10187585d69c5f5a87c8e33ab253091d6925569be2ceec154904a36bbe5", 0xba}], 0x7, &(0x7f0000001c00)=[@cred={0x18, 0x1, 0x2, r3, r4, r5}, @rights={0x2c, 0x1, 0x1, [r2, r0, r1, r1, r0, r0, r1, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r2, r2, r2, r2, r1]}, @cred={0x18, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r2, r2, r1, r1, r0]}, @rights={0x10, 0x1, 0x1, [r0]}, @cred={0x18, 0x1, 0x2, r9, r10, r11}, @cred={0x18, 0x1, 0x2, r12, r13, r14}], 0xe4, 0x8051}], 0x1, 0x8001) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000001d40), 0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0405405, &(0x7f0000001d80)={{0x3, 0x3, 0x100000000, 0x3, 0x7}, 0x2, 0x1ff}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000001dc0)={0x0, 0x20, "843c007281a5d62817b1b6efda50ee1cb2cef6bf98fa9c3ea859e8e60ced4d3f"}, &(0x7f0000001e00)=0x28) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000001e40)={r15, 0x1, "e0"}, &(0x7f0000001e80)=0x9) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) inotify_add_watch(r2, &(0x7f0000001ec0)='./file0\x00', 0x80000128) socket$kcm(0x29, 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000001f00)=""/44) [ 465.574305] binder: 30680:30683 ioctl 40046207 0 returned -16 [ 465.610370] FAULT_INJECTION: forcing a failure. [ 465.610370] name failslab, interval 1, probability 0, space 0, times 0 [ 465.621729] CPU: 1 PID: 30696 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 465.629015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 465.638385] Call Trace: [ 465.640993] dump_stack+0x1b9/0x294 [ 465.644642] ? dump_stack_print_info.cold.2+0x52/0x52 [ 465.649844] ? __save_stack_trace+0x7e/0xd0 [ 465.654191] should_fail.cold.4+0xa/0x1a [ 465.658268] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 465.663385] ? kasan_kmalloc+0xc4/0xe0 [ 465.667286] ? kasan_slab_alloc+0x12/0x20 [ 465.671444] ? kmem_cache_alloc+0x12e/0x760 [ 465.675778] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 465.680632] ? kvm_mmu_load+0x21/0x10e0 [ 465.684620] ? vcpu_enter_guest+0x3a83/0x6060 [ 465.689128] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 465.694159] ? graph_lock+0x170/0x170 [ 465.697974] ? entry_SYSENTER_compat+0x70/0x7f [ 465.702574] ? find_held_lock+0x36/0x1c0 [ 465.706654] ? __lock_is_held+0xb5/0x140 [ 465.710740] ? check_same_owner+0x320/0x320 [ 465.715077] ? rcu_note_context_switch+0x710/0x710 [ 465.720031] __should_failslab+0x124/0x180 [ 465.724290] should_failslab+0x9/0x14 [ 465.728106] kmem_cache_alloc+0x2af/0x760 [ 465.732274] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 465.737134] mmu_topup_memory_caches+0xf7/0x3a0 [ 465.741823] kvm_mmu_load+0x21/0x10e0 [ 465.745638] ? kasan_check_write+0x14/0x20 [ 465.749891] ? __mutex_lock+0x7d9/0x17f0 [ 465.753964] ? debug_check_no_locks_freed+0x310/0x310 [ 465.759176] vcpu_enter_guest+0x3a83/0x6060 [ 465.763507] ? perf_trace_lock+0xd6/0x900 [ 465.767679] ? kvm_set_msr_common+0x2680/0x2680 [ 465.772357] ? __lock_acquire+0x7f5/0x5140 [ 465.776606] ? vmx_vcpu_load+0xadd/0xfe0 [ 465.780685] ? debug_check_no_locks_freed+0x310/0x310 [ 465.785893] ? graph_lock+0x170/0x170 [ 465.789709] ? debug_check_no_locks_freed+0x310/0x310 [ 465.794904] ? perf_trace_lock+0xd6/0x900 [ 465.799076] ? __lock_is_held+0xb5/0x140 [ 465.803152] ? lock_acquire+0x1dc/0x520 [ 465.807140] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 465.812170] ? lock_release+0xa10/0xa10 [ 465.816159] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 2018/05/17 02:39:51 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:51 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='attr/prev\x00') bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000000), 0x2) [ 465.821450] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 465.825968] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 465.830818] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 465.835861] kvm_vcpu_ioctl+0x79d/0x12e0 [ 465.840114] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 465.845842] ? lock_downgrade+0x8e0/0x8e0 [ 465.850007] ? rcu_is_watching+0x85/0x140 [ 465.854175] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 465.859386] ? __fget+0x40c/0x650 [ 465.862865] ? expand_files.part.8+0x9a0/0x9a0 [ 465.867465] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 465.872412] ? wait_for_completion+0x870/0x870 [ 465.877029] ? __fget_light+0x2ef/0x430 [ 465.881029] kvm_vcpu_compat_ioctl+0x208/0x480 [ 465.885620] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 465.889945] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 465.895469] ? fput+0x130/0x1a0 [ 465.898737] ? ksys_write+0x1a6/0x250 [ 465.902529] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 465.907709] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 465.912032] __ia32_compat_sys_ioctl+0x221/0x640 [ 465.916783] do_fast_syscall_32+0x345/0xf9b [ 465.921094] ? do_int80_syscall_32+0x880/0x880 [ 465.925664] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 465.930497] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 465.936031] ? syscall_return_slowpath+0x30f/0x5c0 [ 465.940950] ? sysret32_from_system_call+0x5/0x46 [ 465.945780] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 465.950611] entry_SYSENTER_compat+0x70/0x7f [ 465.955007] RIP: 0023:0xf7fdbcb9 [ 465.958360] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 465.966067] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 [ 465.973322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 465.980577] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.987829] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 465.995094] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 466.012136] device lo entered promiscuous mode [ 466.013888] binder_alloc: binder_alloc_mmap_handler: 30716 20001000-20004000 already mapped failed -16 [ 466.051567] IPVS: ftp: loaded support on port[0] = 21 [ 466.066199] binder: BINDER_SET_CONTEXT_MGR already set [ 466.090073] binder: 30716:30723 ioctl 40046207 0 returned -16 2018/05/17 02:39:52 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x8000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x208000000) 2018/05/17 02:39:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x20000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:52 executing program 0: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x40}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0x8010aa01, &(0x7f0000000000)={{&(0x7f0000600000/0x3000)=nil, 0x3000}}) 2018/05/17 02:39:52 executing program 1: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x20005) r2 = dup2(r1, r0) dup2(r0, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$binfmt_aout(r2, &(0x7f0000000080)={{0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x20) 2018/05/17 02:39:52 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:52 executing program 4 (fault-call:4 fault-nth:5): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:52 executing program 2: r0 = socket$inet6(0xa, 0x20000080006, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0xf2a2) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/05/17 02:39:52 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xff00, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 466.603385] IPVS: ftp: loaded support on port[0] = 21 [ 466.615196] binder_alloc: binder_alloc_mmap_handler: 30739 20001000-20004000 already mapped failed -16 [ 466.631966] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:39:52 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x800, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc008641d, &(0x7f0000000140)={r2, &(0x7f0000000100)=""/49}) r3 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="393a340dbe915f963d"], 0x9) [ 466.650646] binder: 30739:30742 ioctl 40046207 0 returned -16 2018/05/17 02:39:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x80fe], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:52 executing program 5: personality(0x35375d2df5f70313) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x0, 0x5}, 0x8) uname(&(0x7f00000006c0)=""/176) 2018/05/17 02:39:52 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:52 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1000000, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = open(&(0x7f00000000c0)='./control\x00', 0x80, 0x2) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000100)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000040)) pwrite64(r2, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, &(0x7f0000000080)={0x1, 0x6}) close(r0) [ 466.711367] FAULT_INJECTION: forcing a failure. [ 466.711367] name failslab, interval 1, probability 0, space 0, times 0 [ 466.722725] CPU: 1 PID: 30760 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 466.730007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.739372] Call Trace: [ 466.741985] dump_stack+0x1b9/0x294 [ 466.745631] ? dump_stack_print_info.cold.2+0x52/0x52 [ 466.750841] ? __save_stack_trace+0x7e/0xd0 [ 466.755192] should_fail.cold.4+0xa/0x1a 2018/05/17 02:39:52 executing program 5: symlink(&(0x7f0000000480)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0/file0\x00') mq_unlink(&(0x7f0000000080)='-trusted\x00') r0 = syz_fuseblk_mount(&(0x7f00000007c0)='./file0/file0\x00', &(0x7f0000000780)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@can, &(0x7f0000000140)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x200, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}, [0x1, 0x7, 0xffff, 0x1ff, 0x5, 0x6dd, 0x5, 0x1, 0x6, 0x2, 0x8, 0x0, 0xfffffffffffffffe, 0x80, 0x7f]}, &(0x7f0000000280)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000002c0)={r2, @in6={{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0xd}, 0x4}}, 0x9, 0x6}, 0x88) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000380)={0xa, &(0x7f0000000040)=[{0x1, 0x9}, {0x100000000, 0x7}, {0xf6b4, 0xfffffffffffffff7}, {0x200, 0xadf}, {0xfffffffffffffffc, 0x200}, {0x20, 0x6}, {0xae, 0x22c}, {0x80000000, 0x139781a8}, {0x2, 0x18f44000}, {0x8, 0x6}]}) [ 466.759267] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 466.764381] ? kasan_kmalloc+0xc4/0xe0 [ 466.768283] ? kasan_slab_alloc+0x12/0x20 [ 466.772436] ? kmem_cache_alloc+0x12e/0x760 [ 466.776772] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 466.781631] ? kvm_mmu_load+0x21/0x10e0 [ 466.785618] ? vcpu_enter_guest+0x3a83/0x6060 [ 466.790124] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 466.795153] ? graph_lock+0x170/0x170 [ 466.798968] ? entry_SYSENTER_compat+0x70/0x7f [ 466.803569] ? find_held_lock+0x36/0x1c0 [ 466.807648] ? __lock_is_held+0xb5/0x140 [ 466.811734] ? check_same_owner+0x320/0x320 [ 466.816076] ? rcu_note_context_switch+0x710/0x710 [ 466.821028] __should_failslab+0x124/0x180 [ 466.825282] should_failslab+0x9/0x14 [ 466.829097] kmem_cache_alloc+0x2af/0x760 [ 466.833442] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 466.838301] mmu_topup_memory_caches+0xf7/0x3a0 [ 466.842991] kvm_mmu_load+0x21/0x10e0 [ 466.846810] ? kasan_check_write+0x14/0x20 [ 466.846835] binder_alloc: binder_alloc_mmap_handler: 30770 20001000-20004000 already mapped failed -16 [ 466.851048] ? __mutex_lock+0x7d9/0x17f0 [ 466.851068] ? debug_check_no_locks_freed+0x310/0x310 [ 466.851092] vcpu_enter_guest+0x3a83/0x6060 [ 466.851110] ? perf_trace_lock+0xd6/0x900 [ 466.851131] ? kvm_set_msr_common+0x2680/0x2680 [ 466.851142] ? __lock_acquire+0x7f5/0x5140 [ 466.851161] ? vmx_vcpu_load+0xadd/0xfe0 [ 466.891205] ? debug_check_no_locks_freed+0x310/0x310 [ 466.896403] ? print_usage_bug+0xc0/0xc0 [ 466.900478] ? graph_lock+0x170/0x170 [ 466.904292] ? debug_check_no_locks_freed+0x310/0x310 2018/05/17 02:39:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x7f, 0x0, 0x0, 0x0, 0x0, 0x1ae7bb5d, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) ioctl$KVM_NMI(r2, 0xae9a) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000100)={0x800, 0x2, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000300)=""/254) ioctl$KVM_GET_SREGS(r2, 0x8090ae81, &(0x7f0000000180)) [ 466.909584] ? perf_trace_lock+0xd6/0x900 [ 466.913751] ? __lock_is_held+0xb5/0x140 [ 466.917830] ? lock_acquire+0x1dc/0x520 [ 466.921816] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 466.926849] ? lock_release+0xa10/0xa10 [ 466.930837] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 466.932336] device lo entered promiscuous mode [ 466.936123] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 466.936154] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 466.936167] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 466.936196] kvm_vcpu_ioctl+0x79d/0x12e0 2018/05/17 02:39:52 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='statm\x00') ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)) r2 = openat$cgroup_type(r0, &(0x7f0000000100)='cgroup.type\x00', 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000040)='threaded\x00', 0x5) [ 466.936216] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 466.936234] ? lock_downgrade+0x8e0/0x8e0 [ 466.936254] ? rcu_is_watching+0x85/0x140 [ 466.964197] binder: BINDER_SET_CONTEXT_MGR already set [ 466.964891] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 466.983610] ? __fget+0x40c/0x650 [ 466.987087] ? expand_files.part.8+0x9a0/0x9a0 [ 466.991683] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 466.993170] binder: 30770:30771 ioctl 40046207 0 returned -16 [ 466.996623] ? wait_for_completion+0x870/0x870 [ 466.996655] ? __fget_light+0x2ef/0x430 [ 466.996679] kvm_vcpu_compat_ioctl+0x208/0x480 [ 466.996698] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 466.996716] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 466.996734] ? fput+0x130/0x1a0 [ 467.028851] ? ksys_write+0x1a6/0x250 [ 467.032658] ? __do_page_fault+0x441/0xe40 [ 467.034135] IPVS: ftp: loaded support on port[0] = 21 [ 467.036906] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 467.036931] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 467.036951] __ia32_compat_sys_ioctl+0x221/0x640 [ 467.036976] do_fast_syscall_32+0x345/0xf9b [ 467.036992] ? do_int80_syscall_32+0x880/0x880 [ 467.037011] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 467.070395] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 467.075950] ? syscall_return_slowpath+0x30f/0x5c0 [ 467.080898] ? sysret32_from_system_call+0x5/0x46 [ 467.085763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 467.090627] entry_SYSENTER_compat+0x70/0x7f [ 467.095038] RIP: 0023:0xf7fdbcb9 [ 467.098403] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 467.106121] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 [ 467.113397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.120670] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.127964] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 467.135238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/17 02:39:53 executing program 5: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2d0000}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000140)={0x17, 0x6e, &(0x7f00000000c0)="1da287f7a1deda218452521431f0a99017c435382cee9a96452bf86574156b1c51439cc794d42a4f2cfc6e306eda8c6cb7be5626e0fac666b9de14dd78a9cb9399691bc6c6261cc2972109c74aa68c322cd2d6073e4b350f7b81707527cbd98858e8d19e452c9c253668ea47d32e"}) 2018/05/17 02:39:53 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfc], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:53 executing program 4 (fault-call:4 fault-nth:6): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0)=0xfffffffffffffff8, 0x4) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000100000000000000010004000000000000000000ff"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000de850400000000000005000002"]) 2018/05/17 02:39:53 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x800000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0xc1130, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/17 02:39:53 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x7}, 0xffffff74) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a80)="3a9a0e63c9476288b671afdbd53a5994e137381f62021d1951b627b8dda57a5d17d744648c81c5703ed8146ab1b0171f89091b1dd3238d03dbb686df460963245dedf2013ee555af99499e44ad420dbf65fd46fbc99a1274429e2d5783751815828ec8cb3553110cca66460215353d19f6d8bbd8fb08ad0491634ac2fd10e2cd30bcd7fede24263a7fff16e53ea293f3551b7147c33a44ea437fb1515c3e8d4f162fdebf8ebe11ae6fcd9372c8d8f19556ee091fe94215ae9434da412f6fa4cb6561e5f78ff9707844ee5d573fb294437722d9a06dfa61748c32c73d759933a8dd344c947d3efdbe90d0eb049df5fbb0c19f6785264b619c530d97395d44b04f7e2a280d658c7871ad373b792678c49227999651ef3b2ee1bc2b8f3035db2d6e8e09aa3837233c8713065a8ad131d24f6c42a3220d0e07c3d3e95d9f44f059a5dd10c0971608f874ecf53aadfa5050ff40f2c3c4a629b6445e5836100afff5a8977583653b40ca116f8f11416e5c1bd5499636ddae25fc49709f0309cf5c0bf8e432160c258d14223b3b0d009b09858645773dd97e68a9531072713cff077b2e73e03ed4f145e9199c126a7f235e5674a3c7f5c7129ac7c1a3319590249b6d34ef6c3d8b94c6fc7cdcbddb053243f33e7bc1f230d3bc7dfc4359e33992d0a3946b914a093287a76ac4a249b5b86cc75476466e409553355fefab75e9268a8751ffc9481fcff1f49c475699595b315e2147eebe8b7291600c6b1cf7c8f24d587b9464a67e5ccec17820e711b98f4f7d5053642068a3fff72b53e2622d6e8b4a4c815fb2ea90ef63e141209dd29254e5ab5bde9c6817b3cb184586049e7741b2d8b5b1a19e99e1834a25959155720c1c0efa4d9d3c42e1ba282847d476cef0228b6a1422aba08e5f3c1cd279bb20dcf3e90f80a4a8ac093de9f0d9c11a540aff2de27437787bbed317439cafb71e7f92b7e02cbadb076f04ba2cb8c96aeef53c74d9036c922b1b24a79228e833abc661b5630caa45389341cb8ddf277fd916141023fb53c0d155faf6fdfb593e22db25c4f8afdcd90d437672ebe975f4a5f445bbdd845505fcfea702a42d821d3dc11720de0009e83161e5a089d09184346606e126842de54e85e20aa5bac874367a8690d09d6ee61278bd424eabe824ff22693b0cece9e4d935f28bb7efd85afb1642a363d583eb01f48f25784f80002b163bd3da724b0391dac7c23f76b5c5c6319f7aab18a486d5607f68ce2f83d2a6a8a13f8ecdb845b8af96230f063019ff113698c720403bbf6202b2d50800000000000000d538fc1fa57518769bd3bfc11e743b4e56b01f17483a152abcca0bd84a1011bd703a494150176d17322cf10307d259999622b76ac6a86407c9ed281ae29b9b569b382d3f39fe4d07706c96c41a565437d9edb1cb532d900efe54f518044bba5fa5791c1797c569a3d6c21342d92f4b104a3d957cf85e617c46ac97b6785a455ce7765eb80a02de4dffde0207061e1afb61e777379b202707f0f49edcf21a186ea1f2e08ef1dc15ae3371280d89aabb3bd53408b4cb2a8e42f9f4d0bc11d766eb51940f5e92559b91954649f2786fb6683e19ca5f609c40e327876f5515aeefce0f390d3fd557aabcb091b04131f3edc1ed80a2d5a812786530a302ab54f7e1f3a6bca852722d1af85ceab2e6565733b31f76d795b1a603a780564b181ebadb0028c03d0c2c2831ce3a83369bf4ec61f802633e719040dac8", 0x4d9}], 0x1, &(0x7f0000000280)}, 0x0) [ 467.802216] binder: 30806:30811 transaction failed 29201/-28, size 0-0 line 2971 [ 467.806290] IPVS: ftp: loaded support on port[0] = 21 [ 467.841424] FAULT_INJECTION: forcing a failure. [ 467.841424] name failslab, interval 1, probability 0, space 0, times 0 [ 467.852820] CPU: 0 PID: 30800 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 467.860110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.869482] Call Trace: [ 467.872097] dump_stack+0x1b9/0x294 [ 467.875009] binder_alloc: binder_alloc_mmap_handler: 30806 20001000-20004000 already mapped failed -16 [ 467.875747] ? dump_stack_print_info.cold.2+0x52/0x52 [ 467.875768] ? __save_stack_trace+0x7e/0xd0 [ 467.894741] should_fail.cold.4+0xa/0x1a [ 467.898757] binder: BINDER_SET_CONTEXT_MGR already set [ 467.898819] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 467.909192] ? kasan_kmalloc+0xc4/0xe0 [ 467.913096] ? kasan_slab_alloc+0x12/0x20 [ 467.913200] binder_alloc: 30806: binder_alloc_buf, no vma [ 467.917250] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 467.917268] ? kvm_mmu_load+0x21/0x10e0 [ 467.917287] ? vcpu_enter_guest+0x3a83/0x6060 [ 467.917302] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 467.917322] ? graph_lock+0x170/0x170 [ 467.922903] binder: 30806:30819 transaction failed 29189/-3, size 0-0 line 2971 [ 467.927674] ? entry_SYSENTER_compat+0x70/0x7f [ 467.927704] ? find_held_lock+0x36/0x1c0 [ 467.927729] ? __lock_is_held+0xb5/0x140 [ 467.937426] binder: 30817:30818 unknown command 0 [ 467.941196] ? check_same_owner+0x320/0x320 [ 467.941219] ? rcu_note_context_switch+0x710/0x710 [ 467.949522] binder: 30817:30818 ioctl c0306201 20007000 returned -22 [ 467.952467] __should_failslab+0x124/0x180 [ 467.952491] should_failslab+0x9/0x14 [ 467.952512] kmem_cache_alloc+0x2af/0x760 [ 467.992414] binder: 30806:30811 ioctl 40046207 0 returned -16 [ 467.993844] ? retint_kernel+0x10/0x10 [ 467.993875] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 467.993901] mmu_topup_memory_caches+0xf7/0x3a0 [ 467.993927] kvm_mmu_load+0x21/0x10e0 [ 468.021127] vcpu_enter_guest+0x3a83/0x6060 [ 468.025470] ? vmcs_load+0x139/0x180 [ 468.026122] device lo entered promiscuous mode [ 468.029197] ? crash_vmclear_local_loaded_vmcss+0x170/0x170 [ 468.029224] ? kvm_set_msr_common+0x2680/0x2680 [ 468.029244] ? vmx_vcpu_load+0xadd/0xfe0 [ 468.048251] ? graph_lock+0x170/0x170 [ 468.052073] ? perf_trace_run_bpf_submit+0x246/0x370 [ 468.057201] ? perf_tp_event+0xc30/0xc30 [ 468.061293] ? __lock_is_held+0xb5/0x140 [ 468.065386] ? lock_acquire+0x1dc/0x520 [ 468.069385] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 468.074430] ? lock_release+0xa10/0xa10 [ 468.078428] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 468.083726] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 468.088263] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 468.093125] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 468.098178] kvm_vcpu_ioctl+0x79d/0x12e0 [ 468.102255] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 468.107970] ? lock_downgrade+0x8e0/0x8e0 [ 468.112124] ? rcu_is_watching+0x85/0x140 [ 468.116268] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 468.121468] ? __fget+0x40c/0x650 [ 468.124924] ? expand_files.part.8+0x9a0/0x9a0 [ 468.129511] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 468.134439] ? wait_for_completion+0x870/0x870 [ 468.139039] ? __fget_light+0x2ef/0x430 [ 468.143019] kvm_vcpu_compat_ioctl+0x208/0x480 [ 468.147604] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 468.151917] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 468.157454] ? fput+0x130/0x1a0 [ 468.160726] ? ksys_write+0x1a6/0x250 [ 468.164524] ? __do_page_fault+0x441/0xe40 [ 468.168755] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 468.173938] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 468.178264] __ia32_compat_sys_ioctl+0x221/0x640 [ 468.183029] do_fast_syscall_32+0x345/0xf9b [ 468.187356] ? do_int80_syscall_32+0x880/0x880 [ 468.191934] ? kasan_check_write+0x14/0x20 [ 468.196165] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 468.201694] ? syscall_return_slowpath+0x30f/0x5c0 [ 468.206625] ? sysret32_from_system_call+0x5/0x46 [ 468.211473] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 468.216317] entry_SYSENTER_compat+0x70/0x7f [ 468.220714] RIP: 0023:0xf7fdbcb9 [ 468.224067] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 468.231776] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 [ 468.239038] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 468.246296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 2018/05/17 02:39:54 executing program 0: syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaa89aaaaaaaaaaaab4ef18a610771e93aaaa0086dd6050a09c00002c00fe8006000000000000dc0002000000bbfe8000000000000000000000000000aa000000000008a422c17e8ff49078a85be58f514176a4d48ef5d13d8ec383fc4b70f1a4a862dc6f638fab649001437fde9f9b7698132e9367fbaae4718a890dd8a08be1c9b3ec670645da"], &(0x7f0000000040)) 2018/05/17 02:39:54 executing program 2: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b38000)=0x3c) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/159, 0x9f}], 0x1) fgetxattr(r2, &(0x7f0000000000)=@known='security.evm\x00', &(0x7f0000000040)=""/129, 0x81) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x1, 0xfffffffffffffff8) dup2(r1, r2) fcntl$setown(r2, 0x8, r0) tkill(r0, 0x13) 2018/05/17 02:39:54 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7fffffff, 0x440) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) shutdown(r0, 0xfffffffffffffffc) 2018/05/17 02:39:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x7], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:54 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x7a, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 468.253645] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 468.260906] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 468.277280] binder: undelivered TRANSACTION_ERROR: 29189 [ 468.285077] binder: undelivered TRANSACTION_ERROR: 29201 [ 468.321571] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfec0000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:54 executing program 5: r0 = memfd_create(&(0x7f0000000140)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000000)="006cf61aad7bf3794218e0fc4eebc9fc708404b4f0", 0x15) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x80000000004, 0x11, r0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000280)) 2018/05/17 02:39:54 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="7f"], 0x1) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x0) close(r1) close(r0) [ 468.347622] binder_alloc: binder_alloc_mmap_handler: 30839 20001000-20004000 already mapped failed -16 [ 468.391875] binder: BINDER_SET_CONTEXT_MGR already set [ 468.419841] binder: 30839:30840 ioctl 40046207 0 returned -16 2018/05/17 02:39:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x8, 0x1, 0x2}, 0x22f) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001140)={r0, &(0x7f00000000c0), &(0x7f0000000240), 0x1}, 0x20) fallocate(r0, 0x0, 0x6b, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20000, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x340}, 0x1, 0x0, 0x0, 0x4000805}, 0x0) 2018/05/17 02:39:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0xfd00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:55 executing program 1: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000480), &(0x7f00000004c0)=0x4) socketpair$inet(0x2, 0x6, 0x100000000, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000340)=0x0) sched_rr_get_interval(r4, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000001c0)={0xfffffffffffffffd, 0x7f, 0xfffffffffffffff7, 0xc9, 0x5, 0x80000000, 0x0, 0x5, 0xfffffffffffffffd, 0x6, 0x5}, 0xb) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000300)={'bond_slave_0\x00', {0x2, 0x4e22, @loopback=0x7f000001}}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000500)={0x6, 0x4, 0x1, 0x9, 0x8, 0x7f, 0xb7, 0xc1c, r3}, &(0x7f0000000540)=0x20) getpeername$netlink(r5, &(0x7f0000000000), &(0x7f0000000140)=0xc) r6 = userfaultfd(0x0) r7 = dup3(r5, r5, 0x80000) sendmsg$nl_generic(r7, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80002000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="2bfffffe0027bd7000fddbdf0000239dd317571762000000"], 0x18}, 0x1, 0x0, 0x0, 0x44080}, 0x1) fgetxattr(r6, &(0x7f0000000040)=@known='system.advise\x00', &(0x7f0000000080)=""/142, 0x8e) 2018/05/17 02:39:55 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xffffff7f00000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:55 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x2000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:55 executing program 4 (fault-call:4 fault-nth:7): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:55 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) memfd_create(&(0x7f0000000180)='vcan0\x00', 0x1) getsockname(r0, &(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) connect$l2tp(r0, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2}}, 0x2e) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f0000000140)=@req={0x20, &(0x7f0000000100)={'veth0_to_bridge\x00', @ifru_addrs=@hci={0x1f, r3, 0x3}}}) 2018/05/17 02:39:55 executing program 5: r0 = dup(0xffffffffffffff9c) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x44, 0x0) ioctl$KDGKBLED(r1, 0xc0045401, &(0x7f0000000140)) ioctl$KVM_SMI(r1, 0xaeb7) [ 469.126150] binder_alloc: binder_alloc_mmap_handler: 30866 20001000-20004000 already mapped failed -16 [ 469.148629] IPVS: ftp: loaded support on port[0] = 21 [ 469.154821] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:39:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x7000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:55 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x280200) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000100)) recvmsg(r0, &(0x7f0000000740)={&(0x7f0000000080)=@rc, 0x80, &(0x7f0000000680)}, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000180)={0x0, 0x38, 0x8, &(0x7f0000000140)=0x8}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006dbffc), 0x4) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000000)=0x1) [ 469.189856] binder: 30866:30867 ioctl 40046207 0 returned -16 [ 469.202121] FAULT_INJECTION: forcing a failure. [ 469.202121] name failslab, interval 1, probability 0, space 0, times 0 [ 469.213573] CPU: 1 PID: 30871 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 469.220855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 469.230222] Call Trace: [ 469.232831] dump_stack+0x1b9/0x294 2018/05/17 02:39:55 executing program 1: capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x0, 0x0, 0x2}) socket$packet(0x11, 0x0, 0x300) 2018/05/17 02:39:55 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x80007, 0x284a3556) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)=0xfffffffeffffffff, 0x5) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x8004, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) [ 469.236481] ? dump_stack_print_info.cold.2+0x52/0x52 [ 469.241686] ? __save_stack_trace+0x7e/0xd0 [ 469.246032] should_fail.cold.4+0xa/0x1a [ 469.250112] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 469.255229] ? kasan_kmalloc+0xc4/0xe0 [ 469.259136] ? kasan_slab_alloc+0x12/0x20 [ 469.263295] ? kmem_cache_alloc+0x12e/0x760 [ 469.267628] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 469.272486] ? kvm_mmu_load+0x21/0x10e0 [ 469.276475] ? vcpu_enter_guest+0x3a83/0x6060 [ 469.280977] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 469.286009] ? graph_lock+0x170/0x170 [ 469.286431] device lo entered promiscuous mode [ 469.289822] ? entry_SYSENTER_compat+0x70/0x7f [ 469.289848] ? find_held_lock+0x36/0x1c0 [ 469.289869] ? __lock_is_held+0xb5/0x140 [ 469.289894] ? check_same_owner+0x320/0x320 [ 469.301776] IPVS: ftp: loaded support on port[0] = 21 [ 469.303093] ? rcu_note_context_switch+0x710/0x710 [ 469.303116] __should_failslab+0x124/0x180 [ 469.303136] should_failslab+0x9/0x14 [ 469.303154] kmem_cache_alloc+0x2af/0x760 [ 469.333773] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 469.338732] mmu_topup_memory_caches+0xf7/0x3a0 [ 469.343421] kvm_mmu_load+0x21/0x10e0 [ 469.347239] ? kasan_check_write+0x14/0x20 [ 469.351492] ? __mutex_lock+0x7d9/0x17f0 [ 469.355565] ? debug_check_no_locks_freed+0x310/0x310 [ 469.360775] vcpu_enter_guest+0x3a83/0x6060 [ 469.365107] ? perf_trace_lock+0xd6/0x900 [ 469.369273] ? kvm_set_msr_common+0x2680/0x2680 [ 469.373951] ? __lock_acquire+0x7f5/0x5140 [ 469.378197] ? vmx_vcpu_load+0xadd/0xfe0 [ 469.382272] ? debug_check_no_locks_freed+0x310/0x310 2018/05/17 02:39:55 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x7a000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 469.387468] ? print_usage_bug+0xc0/0xc0 [ 469.391540] ? graph_lock+0x170/0x170 [ 469.395703] ? debug_check_no_locks_freed+0x310/0x310 [ 469.400907] ? perf_trace_lock+0xd6/0x900 [ 469.405077] ? __lock_is_held+0xb5/0x140 [ 469.409154] ? lock_acquire+0x1dc/0x520 [ 469.413137] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 469.418161] ? lock_release+0xa10/0xa10 [ 469.422149] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 469.427455] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 469.431975] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 2018/05/17 02:39:55 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x300, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 469.436832] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 469.441872] kvm_vcpu_ioctl+0x79d/0x12e0 [ 469.445952] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 469.451683] ? lock_downgrade+0x8e0/0x8e0 [ 469.455852] ? rcu_is_watching+0x85/0x140 [ 469.460017] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 469.466496] ? __fget+0x40c/0x650 [ 469.469967] ? expand_files.part.8+0x9a0/0x9a0 [ 469.474566] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 469.479520] ? wait_for_completion+0x870/0x870 [ 469.484122] ? __fget_light+0x2ef/0x430 2018/05/17 02:39:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40000000000) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000240)={"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"}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x7b, 0x0, [0x40000071, 0x80000000004d004, 0x0, 0xfffffffffffffffd]}) [ 469.488114] kvm_vcpu_compat_ioctl+0x208/0x480 [ 469.492716] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 469.497052] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 469.502617] ? fput+0x130/0x1a0 [ 469.505933] ? ksys_write+0x1a6/0x250 [ 469.509746] ? __do_page_fault+0x441/0xe40 [ 469.514000] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 469.519205] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 469.523540] __ia32_compat_sys_ioctl+0x221/0x640 [ 469.528314] do_fast_syscall_32+0x345/0xf9b [ 469.532650] ? do_int80_syscall_32+0x880/0x880 [ 469.537234] ? _raw_spin_unlock_irq+0x27/0x70 [ 469.541741] ? finish_task_switch+0x1ca/0x840 [ 469.546252] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 469.547267] IPVS: ftp: loaded support on port[0] = 21 [ 469.551793] ? syscall_return_slowpath+0x30f/0x5c0 [ 469.551817] ? sysret32_from_system_call+0x5/0x46 [ 469.551839] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 469.551861] entry_SYSENTER_compat+0x70/0x7f [ 469.551873] RIP: 0023:0xf7fdbcb9 [ 469.551880] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 2018/05/17 02:39:55 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4) [ 469.587158] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 [ 469.594437] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 469.601727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 469.609004] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 469.616288] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/17 02:39:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x300], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 469.680560] binder_alloc: binder_alloc_mmap_handler: 30896 20001000-20004000 already mapped failed -16 [ 469.707486] binder: BINDER_SET_CONTEXT_MGR already set [ 469.728922] binder: 30896:30898 ioctl 40046207 0 returned -16 [ 469.880153] device lo entered promiscuous mode [ 469.903460] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bcsf0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r1, 0x3, 0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0xeb8164632d5b68a5) 2018/05/17 02:39:56 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) socket$inet(0x2, 0x2, 0x5eb0) recvfrom$inet(r0, &(0x7f0000000000)=""/195, 0xc3, 0x101, &(0x7f0000000100)={0x2, 0x4e22}, 0x10) bind$inet(r0, &(0x7f0000000ec0)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) 2018/05/17 02:39:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x3], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:56 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x200000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:56 executing program 4 (fault-call:4 fault-nth:8): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:56 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x3e, 0x8) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000100)={0x0, 0x8}) poll(&(0x7f0000000040), 0x0, 0x7fff) connect(r0, &(0x7f0000000080)=@in={0x2, 0x4e22, @broadcast=0xffffffff}, 0x80) 2018/05/17 02:39:56 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x600, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:56 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x210401, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}}}, &(0x7f0000000380)=0x98) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, "7914084b165e9ec52f1595ab29ebf015f37b541a5750acb2ac95e9ad3962af352e5323b779821fa55ee14bf9"}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x20642, 0x0) [ 470.402232] binder_alloc: binder_alloc_mmap_handler: 30937 20001000-20004000 already mapped failed -16 [ 470.417484] IPVS: ftp: loaded support on port[0] = 21 [ 470.431382] FAULT_INJECTION: forcing a failure. [ 470.431382] name failslab, interval 1, probability 0, space 0, times 0 [ 470.432191] binder: BINDER_SET_CONTEXT_MGR already set [ 470.442749] CPU: 0 PID: 30942 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 470.455326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 470.464704] Call Trace: [ 470.467318] dump_stack+0x1b9/0x294 [ 470.470975] ? dump_stack_print_info.cold.2+0x52/0x52 [ 470.476188] ? __save_stack_trace+0x7e/0xd0 [ 470.480553] should_fail.cold.4+0xa/0x1a [ 470.484644] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 470.489775] ? kasan_kmalloc+0xc4/0xe0 [ 470.492956] binder: 30937:30938 ioctl 40046207 0 returned -16 [ 470.493678] ? kasan_slab_alloc+0x12/0x20 [ 470.493702] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 470.508588] ? kvm_mmu_load+0x21/0x10e0 [ 470.512584] ? vcpu_enter_guest+0x3a83/0x6060 [ 470.517102] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 470.522150] ? graph_lock+0x170/0x170 [ 470.525989] ? entry_SYSENTER_compat+0x70/0x7f [ 470.530623] ? find_held_lock+0x36/0x1c0 [ 470.534717] ? __lock_is_held+0xb5/0x140 [ 470.538818] ? check_same_owner+0x320/0x320 [ 470.543254] ? rcu_note_context_switch+0x710/0x710 [ 470.548215] __should_failslab+0x124/0x180 [ 470.552479] should_failslab+0x9/0x14 [ 470.556300] kmem_cache_alloc+0x2af/0x760 [ 470.560488] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 470.565361] mmu_topup_memory_caches+0xf7/0x3a0 [ 470.570068] kvm_mmu_load+0x21/0x10e0 [ 470.573905] ? memset+0x31/0x40 [ 470.577212] vcpu_enter_guest+0x3a83/0x6060 [ 470.581554] ? perf_trace_lock+0x495/0x900 [ 470.585821] ? kvm_set_msr_common+0x2680/0x2680 [ 470.590506] ? __lock_acquire+0x7f5/0x5140 [ 470.594763] ? vmx_vcpu_load+0xadd/0xfe0 [ 470.598861] ? graph_lock+0x170/0x170 [ 470.602685] ? perf_trace_run_bpf_submit+0x246/0x370 [ 470.607817] ? perf_tp_event+0xc30/0xc30 [ 470.611917] ? __lock_is_held+0xb5/0x140 [ 470.616007] ? lock_acquire+0x1dc/0x520 [ 470.620002] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 470.625050] ? lock_release+0xa10/0xa10 [ 470.629047] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 470.634355] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 470.638897] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 470.643761] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 470.648818] kvm_vcpu_ioctl+0x79d/0x12e0 [ 470.652911] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 470.658650] ? lock_downgrade+0x8e0/0x8e0 [ 470.662830] ? rcu_is_watching+0x85/0x140 [ 470.667006] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 470.672239] ? __fget+0x40c/0x650 [ 470.675741] ? expand_files.part.8+0x9a0/0x9a0 [ 470.680348] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 470.685305] ? wait_for_completion+0x870/0x870 [ 470.689932] ? __fget_light+0x2ef/0x430 [ 470.693952] kvm_vcpu_compat_ioctl+0x208/0x480 [ 470.698560] ? kvm_vcpu_ioctl+0x12e0/0x12e0 2018/05/17 02:39:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x1100000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:56 executing program 0: syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="cd390b081bf20180c200000086dd6002290f00383a0000000000000000000000ffff00000000ff0200000000000000000000000000010200907800000000609433df00002100ff020000000000000000000000000001fe800000000000000000000000000000802a08000000006b04060daf4e1f054d84c2d4ba499597cbac87ee14287794c653326e34e322ad93032cca8442523b5266749facac8b0bba0afad44ff8c9b425f135fdddd2da44453d2606594954c35671458eddfb016a67a8b3235fd1924e4f6ff1a0c3fb25dba907a8127d4aa78f68"], 0x0) 2018/05/17 02:39:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x700000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:56 executing program 0: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, @multicast1}, &(0x7f0000000080)=0x10, 0x800) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={0xfffffffffffffffb, {0x2, 0x4e23, @loopback=0x7f000001}, {0x2, 0x4e21, @rand_addr=0x9}, {0x2, 0x4e23, @loopback=0x7f000001}, 0x9, 0x7d01, 0x3004, 0x100000000, 0x4, 0x0, 0x9, 0x1}) set_mempolicy(0x2, &(0x7f0000000040)=0x3, 0x4) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000466000)={0x200000007f, 0x21}) 2018/05/17 02:39:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x400000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:56 executing program 0: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = getpgrp(r0) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x6) 2018/05/17 02:39:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x100000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:56 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000000c0)=""/96) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x20}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ee3fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b0102077602000046010000070000001f010000040000000000000000ffff0048ea96d9887a675029a93e47680e390aed168b6768986dada681c2bac0b482a453cd816eed05a9b64d335985210f47f4546f0f404235751ccafccc0bda6073466856c1922e9f34ed8b44a7b28d9449c15a4dc22c432645bb15b383aedc834b112e8ea7ac15fac78493dbf1fdd0bb4cbd4a1f1aed260b2c72253fc1f907c78f4daecf527e88748be7b867149cda4ca932e29100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x4b2) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x8df, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) close(r0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000013000)) close(r3) lseek(r1, 0x0, 0x1) close(r0) [ 470.702902] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 470.708455] ? fput+0x130/0x1a0 [ 470.711760] ? ksys_write+0x1a6/0x250 [ 470.715579] ? __do_page_fault+0x441/0xe40 [ 470.719845] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 470.725233] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 470.729582] __ia32_compat_sys_ioctl+0x221/0x640 [ 470.734377] do_fast_syscall_32+0x345/0xf9b [ 470.738724] ? do_int80_syscall_32+0x880/0x880 [ 470.743320] ? _raw_spin_unlock_irq+0x27/0x70 [ 470.747837] ? finish_task_switch+0x1ca/0x840 [ 470.752359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 470.757914] ? syscall_return_slowpath+0x30f/0x5c0 [ 470.762869] ? sysret32_from_system_call+0x5/0x46 [ 470.767734] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 470.772599] entry_SYSENTER_compat+0x70/0x7f [ 470.777020] RIP: 0023:0xf7fdbcb9 [ 470.780395] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 470.788128] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 [ 470.795403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 470.802675] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 470.809947] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 470.817210] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 470.950089] device lo entered promiscuous mode [ 470.960368] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfe80], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:57 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) memfd_create(&(0x7f0000000040)='#%keyring\\wlan0}\x00', 0x1) sendto$inet(r0, &(0x7f00000007c0), 0x0, 0x200007f8, &(0x7f00000008c0)={0x2, 0x4e23}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_route_sched(r1, &(0x7f0000000e00)={&(0x7f0000000600)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="7831560588117031236362d96253404d0fac0b65f6c512aabe365e1d7c8762bc4aec49e722c7eec292888acd322dff24e004af3f3ee15444a7f04491c5dffe2abf6dbc5365b4a4e2c90f7d6e0305f45b48fbfda8469d549cc777aee45be431ae56c89829a14b1204cb42195cb3fdd5f1fee88c28967b38ee68ec2209a10ad06e0736f1e6e1f7bb0f0f21276cf49254cf5755d222ea4ddbc6f1ac7acd7b669ef5b0e38a0168978cddb9c0e7ce3bb3f736ae07d08b9fc726edb240d92159125ebb601a5d324fdfd19fa284a234ad"], 0x1}, 0x1}, 0x1) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000100), &(0x7f0000000140), 0x8) 2018/05/17 02:39:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x48000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:57 executing program 2: socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'raw\x00', 0x3, [{}, {}, {}]}, 0x58) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000025c0)={'lo\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x3353cd1e187a4f97, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}]}, 0x2c}, 0x1}, 0x0) 2018/05/17 02:39:57 executing program 4 (fault-call:4 fault-nth:9): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:57 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20000, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)=@pic={0xfffffffffffffffd, 0x1, 0x7fff, 0x3, 0xffffffffffff0000, 0x40, 0x1, 0xfff, 0x6, 0x7, 0x8, 0x8000, 0xede, 0xffffffffffffff98, 0xff, 0xffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 2018/05/17 02:39:57 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x80) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x8000101000) ioctl(r1, 0x40044146, &(0x7f0000001f64)) 2018/05/17 02:39:57 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x7ffffff7, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x7], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 471.463471] binder_alloc: binder_alloc_mmap_handler: 30993 20001000-20004000 already mapped failed -16 [ 471.489697] IPVS: ftp: loaded support on port[0] = 21 [ 471.492385] binder: BINDER_SET_CONTEXT_MGR already set [ 471.521135] FAULT_INJECTION: forcing a failure. [ 471.521135] name failslab, interval 1, probability 0, space 0, times 0 [ 471.532486] CPU: 0 PID: 30997 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 471.539783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 471.549160] Call Trace: [ 471.551780] dump_stack+0x1b9/0x294 [ 471.555440] ? dump_stack_print_info.cold.2+0x52/0x52 [ 471.555812] binder: 30993:30994 ioctl 40046207 0 returned -16 [ 471.560642] ? perf_trace_lock_acquire+0xe3/0x980 [ 471.560681] should_fail.cold.4+0xa/0x1a [ 471.560705] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 471.560726] ? kasan_kmalloc+0xc4/0xe0 [ 471.584491] ? kasan_slab_alloc+0x12/0x20 [ 471.588667] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 471.593537] ? kvm_mmu_load+0x21/0x10e0 [ 471.597535] ? vcpu_enter_guest+0x3a83/0x6060 [ 471.602059] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 471.607100] ? graph_lock+0x170/0x170 [ 471.610915] ? entry_SYSENTER_compat+0x70/0x7f [ 471.615535] ? find_held_lock+0x36/0x1c0 [ 471.619628] ? __lock_is_held+0xb5/0x140 [ 471.623744] ? check_same_owner+0x320/0x320 [ 471.628109] ? rcu_note_context_switch+0x710/0x710 [ 471.634053] __should_failslab+0x124/0x180 [ 471.638293] should_failslab+0x9/0x14 [ 471.642093] kmem_cache_alloc+0x2af/0x760 [ 471.646245] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 471.651093] mmu_topup_memory_caches+0xf7/0x3a0 [ 471.655768] kvm_mmu_load+0x21/0x10e0 [ 471.659567] ? memset+0x31/0x40 [ 471.662847] vcpu_enter_guest+0x3a83/0x6060 [ 471.667172] ? perf_trace_lock+0x495/0x900 [ 471.671416] ? kvm_set_msr_common+0x2680/0x2680 [ 471.676084] ? perf_trace_lock+0x900/0x900 [ 471.680323] ? graph_lock+0x170/0x170 [ 471.684122] ? perf_trace_run_bpf_submit+0x246/0x370 [ 471.689225] ? perf_tp_event+0xc30/0xc30 [ 471.693295] ? __lock_is_held+0xb5/0x140 [ 471.697356] ? lock_acquire+0x1dc/0x520 [ 471.701322] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 471.706339] ? lock_release+0xa10/0xa10 [ 471.710320] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 471.715595] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 471.720107] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 471.724944] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 471.729973] kvm_vcpu_ioctl+0x79d/0x12e0 [ 471.734046] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 471.739765] ? lock_downgrade+0x8e0/0x8e0 [ 471.743921] ? rcu_is_watching+0x85/0x140 [ 471.748067] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 471.753271] ? __fget+0x40c/0x650 [ 471.756735] ? expand_files.part.8+0x9a0/0x9a0 [ 471.761315] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 471.766254] ? wait_for_completion+0x870/0x870 [ 471.770851] ? __fget_light+0x2ef/0x430 [ 471.774842] kvm_vcpu_compat_ioctl+0x208/0x480 [ 471.779436] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 471.783751] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 471.789290] ? fput+0x130/0x1a0 [ 471.792576] ? ksys_write+0x1a6/0x250 [ 471.796369] ? __do_page_fault+0x441/0xe40 [ 471.800608] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 471.805807] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 471.810130] __ia32_compat_sys_ioctl+0x221/0x640 [ 471.814908] do_fast_syscall_32+0x345/0xf9b [ 471.819229] ? do_int80_syscall_32+0x880/0x880 [ 471.823810] ? kasan_check_write+0x14/0x20 [ 471.828055] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 471.833591] ? syscall_return_slowpath+0x30f/0x5c0 [ 471.838524] ? sysret32_from_system_call+0x5/0x46 [ 471.843383] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 471.848234] entry_SYSENTER_compat+0x70/0x7f [ 471.852637] RIP: 0023:0xf7fdbcb9 [ 471.855991] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 471.863739] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 2018/05/17 02:39:57 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000003840), 0x0, &(0x7f00000038c0)=""/239, 0xef}}], 0x1, 0x0, &(0x7f0000003b80)) sendto$unix(r0, &(0x7f0000000cc0), 0x0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2018/05/17 02:39:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a40)=@ipv6_getnetconf={0x14, 0x52, 0x7c5fd5fa6bcda905, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) recvmsg(r0, &(0x7f0000000800)={&(0x7f0000000240)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000740), 0x0, &(0x7f00000007c0)=""/26, 0x1a}, 0x0) listen(r0, 0x82) 2018/05/17 02:39:57 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0xf503, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)={0x14, 0x24, 0xffffffffffffffff, 0x0, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x70001, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x101) [ 471.871009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.878278] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 471.885540] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 471.892819] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/17 02:39:57 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f0000000040)) 2018/05/17 02:39:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x3000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:58 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x60000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:58 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="e92be282306d61ac97"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) rt_sigsuspend(&(0x7f0000000000)={0x7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x30}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) [ 472.063061] device lo entered promiscuous mode 2018/05/17 02:39:58 executing program 5: r0 = socket$inet6(0xa, 0x8000e, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}}, 0x21a359df, 0xfffffffffffff0a5}, &(0x7f0000000040)=0x88) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={r1, 0x63, "8b69c9ca67495069dc536446d9ef47a169f0986e383a39c87743da6cbe481075e70c68c75dd393ed41816ef1180ed79dde2c1d9694aa9d4a5438892e5b399a28cd8a11661cd0ab718f3d9c0e1db44c63eabef9922bb63085c7fb9bb0dc09312f353304"}, &(0x7f00000000c0)=0x6b) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)={0x8}, &(0x7f0000000000), 0x13ff) 2018/05/17 02:39:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 472.092808] binder_alloc: binder_alloc_mmap_handler: 31032 20001000-20004000 already mapped failed -16 2018/05/17 02:39:58 executing program 4 (fault-call:4 fault-nth:10): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 472.140453] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:58 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0x4, 0x9, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000100), &(0x7f0000000040)=""/16}, 0x18) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x20) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}, 0x7, 0x5, 0x7f, 0x6, 0x2}, &(0x7f0000000240)=0x98) [ 472.164666] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:39:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x18000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 472.205186] binder: 31032:31033 ioctl 40046207 0 returned -16 [ 472.264801] FAULT_INJECTION: forcing a failure. [ 472.264801] name failslab, interval 1, probability 0, space 0, times 0 [ 472.276254] CPU: 1 PID: 31052 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 472.283622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 472.292987] Call Trace: [ 472.295591] dump_stack+0x1b9/0x294 [ 472.299268] ? dump_stack_print_info.cold.2+0x52/0x52 [ 472.304478] ? __save_stack_trace+0x7e/0xd0 [ 472.308826] should_fail.cold.4+0xa/0x1a [ 472.312907] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 472.318027] ? kasan_kmalloc+0xc4/0xe0 [ 472.321929] ? kasan_slab_alloc+0x12/0x20 [ 472.326096] ? kmem_cache_alloc+0x12e/0x760 [ 472.330434] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 472.335291] ? kvm_mmu_load+0x21/0x10e0 [ 472.339276] ? vcpu_enter_guest+0x3a83/0x6060 [ 472.343785] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 472.348816] ? graph_lock+0x170/0x170 [ 472.352630] ? entry_SYSENTER_compat+0x70/0x7f [ 472.357236] ? find_held_lock+0x36/0x1c0 [ 472.361316] ? __lock_is_held+0xb5/0x140 [ 472.365408] ? check_same_owner+0x320/0x320 [ 472.369745] ? rcu_note_context_switch+0x710/0x710 [ 472.374692] __should_failslab+0x124/0x180 [ 472.378941] should_failslab+0x9/0x14 [ 472.382755] kmem_cache_alloc+0x2af/0x760 [ 472.386925] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 472.391783] mmu_topup_memory_caches+0xf7/0x3a0 [ 472.396478] kvm_mmu_load+0x21/0x10e0 [ 472.400296] ? kasan_check_write+0x14/0x20 [ 472.404542] ? __mutex_lock+0x7d9/0x17f0 [ 472.408616] ? debug_check_no_locks_freed+0x310/0x310 [ 472.413827] vcpu_enter_guest+0x3a83/0x6060 [ 472.416034] IPVS: ftp: loaded support on port[0] = 21 [ 472.418156] ? perf_trace_lock+0xd6/0x900 [ 472.418185] ? kvm_set_msr_common+0x2680/0x2680 [ 472.418201] ? __lock_acquire+0x7f5/0x5140 [ 472.418219] ? vmx_vcpu_load+0xadd/0xfe0 [ 472.418236] ? debug_check_no_locks_freed+0x310/0x310 [ 472.445661] ? print_usage_bug+0xc0/0xc0 [ 472.449737] ? graph_lock+0x170/0x170 [ 472.453548] ? debug_check_no_locks_freed+0x310/0x310 [ 472.458749] ? perf_trace_lock+0xd6/0x900 [ 472.462917] ? __lock_is_held+0xb5/0x140 [ 472.466996] ? lock_acquire+0x1dc/0x520 [ 472.470984] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 472.476017] ? lock_release+0xa10/0xa10 [ 472.480004] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 472.485298] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 472.489918] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 472.494772] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 472.499813] kvm_vcpu_ioctl+0x79d/0x12e0 [ 472.503887] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 472.509616] ? lock_downgrade+0x8e0/0x8e0 [ 472.513785] ? rcu_is_watching+0x85/0x140 [ 472.518208] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 472.523418] ? __fget+0x40c/0x650 [ 472.526896] ? expand_files.part.8+0x9a0/0x9a0 [ 472.531490] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 472.536438] ? wait_for_completion+0x870/0x870 [ 472.541055] ? __fget_light+0x2ef/0x430 [ 472.545052] kvm_vcpu_compat_ioctl+0x208/0x480 [ 472.549653] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 472.553991] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 472.559545] ? fput+0x130/0x1a0 [ 472.562839] ? ksys_write+0x1a6/0x250 [ 472.566651] ? __do_page_fault+0x441/0xe40 [ 472.570905] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 472.573985] device lo entered promiscuous mode [ 472.576105] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 472.576127] __ia32_compat_sys_ioctl+0x221/0x640 [ 472.576152] do_fast_syscall_32+0x345/0xf9b [ 472.576170] ? do_int80_syscall_32+0x880/0x880 [ 472.576187] ? _raw_spin_unlock_irq+0x27/0x70 [ 472.603180] ? finish_task_switch+0x1ca/0x840 [ 472.606182] IPVS: ftp: loaded support on port[0] = 21 [ 472.607690] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 472.607710] ? syscall_return_slowpath+0x30f/0x5c0 [ 472.607732] ? sysret32_from_system_call+0x5/0x46 [ 472.607749] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 472.607768] entry_SYSENTER_compat+0x70/0x7f [ 472.637496] RIP: 0023:0xf7fdbcb9 [ 472.640868] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 472.648588] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 [ 472.656039] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 2018/05/17 02:39:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0000101, 0x0, 0x0, 0x1000000}]}) 2018/05/17 02:39:58 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x2c, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f00000001c0)) timer_delete(0x0) socketpair(0x0, 0x80a, 0x1, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r0, &(0x7f00000019c0)={0xa, 0x4e21, 0x5e, @mcast2={0xff, 0x2, [], 0x1}, 0x80}, 0x1c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000040)={{0x3d, 0x9, 0x0, 0x7ff, 0x100000001, 0x8}, 0x8, 0x3, 0x200}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000002c0)=ANY=[], 0x0) 2018/05/17 02:39:58 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x10000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:58 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "ac4d0935fd978a53c9ede9eb2fc7766821c2c0cea39cc9c19ce60d78b3b50756d00b22451cd9d62c92227a74be991992b77f1dba1454738fd54d35089a7dd88cc4bd081d6190d5d4c76c3dd9547f90d3dc732ae2802ebd8ea41f233ae5639c2b11dc926d7e405d2d74e9e7024769913df4ef7a59e960fc10d1e6206354d0fd03a45cfa45d95665c1fedeaf8b355c1277e6b299ba0f9afd28dfef50ceb256e0e1a325fee41b26004797db7386f2f49a19ce7cf602e4e0bba275f222379a385e0194da9e70ad42f5f40bf705cc097de4fb28c8a441fd55e5a2cb4d8bc2f9013d7167fa3e8608e5c60b505c5f19c42c57000000000000000000"}, 0xfc) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x105000, 0x0) r2 = getpgid(0x0) ioctl$BLKTRACESETUP(r1, 0xc0401273, &(0x7f0000000140)={[], 0xffffffff85c2c6b0, 0x5, 0x2000000000000000, 0xe0, 0x58cd, r2}) [ 472.663317] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 472.670597] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 472.677875] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/17 02:39:59 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x800000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:59 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0xfffffffffffffffe) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x2002}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0x80000000}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000080)={'syzkaller0\x00', {0x2}}) 2018/05/17 02:39:59 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x400300, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:39:59 executing program 0: syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00001400000000299078ac14ffbbffffffff0000000000089078"], 0x0) 2018/05/17 02:39:59 executing program 4 (fault-call:4 fault-nth:11): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:59 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000cd0000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000f85000)={0x2, 0x1, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}}]}, 0x60}, 0x1}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x18, 0x10, "240a5a9405fdb72d3d1ca4c5ae573d4cee7ec452bdae935cd17e7a4d08070a03b01bfda2d7760f6b8f3c106866667c1caf21ec21dd3ac507f6e79469e9916ff3", "ee45c7a0a37399a5643290ec51df7712523c59926466d2baa8edcea2fea40df3", [0x401, 0x7]}) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000140)=0x4, &(0x7f0000000180)=0x2) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020900e301000000040000e1fce653d31690b9f870ace3db6956ac5a69eba722115ca41e8e5bb22c9e6f4b3bc6523e877400894f3866b5284d8098aedd085ffc7f59752e91131bc1f2ee8e20f1590be09cbf19eef789685f26b28113f93b8f6922938ec60545dd73627a693cd7d77f99342afc71b593e2d1edf32cd560c95c214f5197766132e737ad7c052a594d9c60d98833d8afb5292332cd7040775f5bacd4439dc361e89cfb78daddab5d761832bb8048725ced940216f3ba8a121e3ff3289d9a617bbef568b123327206888997113105c203a63bb3"], 0x10}, 0x1}, 0x0) 2018/05/17 02:39:59 executing program 1: r0 = gettid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x42) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') recvmmsg(0xffffffffffffff9c, &(0x7f0000007e00)=[{{&(0x7f0000002800)=@alg, 0x80, &(0x7f0000003c00)=[{&(0x7f0000002880)=""/20, 0x14}, {&(0x7f00000028c0)=""/8, 0x8}, {&(0x7f0000002900)=""/103, 0x67}, {&(0x7f0000002980)=""/16, 0x10}, {&(0x7f00000029c0)=""/128, 0x80}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/15, 0xf}, {&(0x7f0000003a80)=""/165, 0xa5}, {&(0x7f0000003b40)=""/129, 0x81}], 0x9, &(0x7f0000003c80)=""/195, 0xc3, 0x8001}, 0x1ff}, {{&(0x7f0000003d80)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003e00)=""/124, 0x7c}, {&(0x7f0000003e80)=""/67, 0x43}], 0x2, 0x0, 0x0, 0x61}, 0x7}, {{&(0x7f0000003f40)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004380)=[{&(0x7f0000003fc0)=""/132, 0x84}, {&(0x7f0000004080)=""/226, 0xe2}, {&(0x7f0000004180)=""/116, 0x74}, {&(0x7f0000004200)=""/107, 0x6b}, {&(0x7f0000004280)=""/222, 0xde}], 0x5, &(0x7f00000043c0)=""/231, 0xe7, 0x1}, 0x8}, {{&(0x7f00000044c0)=@ethernet, 0x80, &(0x7f0000004700)=[{&(0x7f0000004540)=""/101, 0x65}, {&(0x7f00000045c0)=""/99, 0x63}, {&(0x7f0000004640)=""/134, 0x86}], 0x3, 0x0, 0x0, 0x6}, 0xa5}, {{&(0x7f0000004740)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000004b80)=[{&(0x7f00000047c0)=""/143, 0x8f}, {&(0x7f0000004880)=""/136, 0x88}, {&(0x7f0000004940)=""/62, 0x3e}, {&(0x7f0000004980)=""/192, 0xc0}, {&(0x7f0000004a40)=""/39, 0x27}, {&(0x7f0000004a80)=""/248, 0xf8}], 0x6, &(0x7f0000004bc0)=""/215, 0xd7}, 0x8}, {{&(0x7f0000004cc0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000005000)=[{&(0x7f0000004d40)=""/153, 0x99}, {&(0x7f0000004e00)=""/76, 0x4c}, {&(0x7f0000004e80)=""/160, 0xa0}, {&(0x7f0000004f40)=""/154, 0x9a}], 0x4, &(0x7f0000005040)=""/186, 0xba, 0x1}, 0xf493}, {{&(0x7f0000005100)=@l2, 0x80, &(0x7f00000054c0)=[{&(0x7f0000005180)=""/82, 0x52}, {&(0x7f0000005200)=""/153, 0x99}, {&(0x7f00000052c0)=""/232, 0xe8}, {&(0x7f00000053c0)=""/157, 0x9d}, {&(0x7f0000005480)=""/43, 0x2b}], 0x5, &(0x7f0000005500)=""/107, 0x6b, 0x5}, 0x5}, {{&(0x7f0000005580)=@l2, 0x80, &(0x7f0000007b80)=[{&(0x7f0000005600)=""/123, 0x7b}, {&(0x7f0000005680)=""/23, 0x17}, {&(0x7f00000056c0)=""/4096, 0x1000}, {&(0x7f00000066c0)=""/206, 0xce}, {&(0x7f00000067c0)=""/176, 0xb0}, {&(0x7f0000006880)=""/227, 0xe3}, {&(0x7f0000006980)=""/4096, 0x1000}, {&(0x7f0000007980)=""/88, 0x58}, {&(0x7f0000007a00)=""/148, 0x94}, {&(0x7f0000007ac0)=""/182, 0xb6}], 0xa, &(0x7f0000007c00)=""/136, 0x88, 0x6}, 0xdc}, {{0x0, 0x0, &(0x7f0000007cc0), 0x0, &(0x7f0000007d00)=""/203, 0xcb, 0x3}, 0x1ff}], 0x9, 0x163, &(0x7f0000007f40)={0x77359400}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008000)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000008100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000008140)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000008180)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000081c0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f00000082c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000008300)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008340)={0x0, @rand_addr, @broadcast}, &(0x7f0000008380)=0xc) getsockname$packet(0xffffffffffffff9c, &(0x7f0000008ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000008f00)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000008f40)={'bpq0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000008f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000008fc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000009000)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000009240)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f0000009340)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000009380)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000093c0)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f00000094c0)=0xe8) clock_gettime(0x0, &(0x7f000000d680)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f000000d5c0)=[{{&(0x7f0000009500)=@ipx, 0x80, &(0x7f000000a8c0)=[{&(0x7f0000009580)=""/151, 0x97}, {&(0x7f0000009640)=""/4096, 0x1000}, {&(0x7f000000a640)=""/244, 0xf4}, {&(0x7f000000a740)=""/96, 0x60}, {&(0x7f000000a7c0)=""/8, 0x8}, {&(0x7f000000a800)=""/154, 0x9a}], 0x6, 0x0, 0x0, 0x8}, 0x7ff}, {{&(0x7f000000a900)=@can={0x0, 0x0}, 0x80, &(0x7f000000ab40)=[{&(0x7f000000a980)=""/255, 0xff}, {&(0x7f000000aa80)=""/62, 0x3e}, {&(0x7f000000aac0)=""/92, 0x5c}], 0x3, 0x0, 0x0, 0x9ffd}, 0x5}, {{&(0x7f000000ab80)=@in6={0x0, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000bf40)=[{&(0x7f000000ac00)=""/98, 0x62}, {&(0x7f000000ac80)=""/130, 0x82}, {&(0x7f000000ad40)=""/90, 0x5a}, {&(0x7f000000adc0)=""/4096, 0x1000}, {&(0x7f000000bdc0)=""/47, 0x2f}, {&(0x7f000000be00)=""/86, 0x56}, {&(0x7f000000be80)=""/149, 0x95}], 0x7, &(0x7f000000bf80)=""/7, 0x7, 0x4}, 0x7}, {{&(0x7f000000bfc0)=@nl, 0x80, &(0x7f000000d300)=[{&(0x7f000000c040)=""/190, 0xbe}, {&(0x7f000000c100)=""/204, 0xcc}, {&(0x7f000000c200)=""/247, 0xf7}, {&(0x7f000000c300)=""/4096, 0x1000}], 0x4, &(0x7f000000d340)=""/136, 0x88, 0x20}, 0x2}, {{&(0x7f000000d400)=@nfc, 0x80, &(0x7f000000d500)=[{&(0x7f000000d480)=""/113, 0x71}], 0x1, &(0x7f000000d540)=""/106, 0x6a, 0xffffffff}, 0x2}], 0x5, 0x40, &(0x7f000000d6c0)={r17, r18+30000000}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f000000df00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f000000dec0)={&(0x7f000000d700)={0x7b4, r2, 0x308, 0x70bd28, 0x25dfdbfd, {0x2}, [{{0x8, 0x1, r3}, {0x1d8, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2d46}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x180, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x1c, 0x4, [{0x83d9, 0x3, 0x5}, {0x7, 0x0, 0x0, 0xea}, {0x7, 0xac69, 0x7, 0x81}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r11}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x40}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r12}, {0x1d8, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x4c, 0x4, [{0x9778, 0x1, 0x6, 0x7}, {0xda0, 0x2, 0x7, 0x3}, {0x5, 0xffffffffffffffc1, 0xffffffffffff6d08, 0x5fabd8ef}, {0xd7, 0x7, 0x800, 0x335}, {0x8, 0x22f, 0x6, 0x2}, {0x100000000, 0x80000000, 0x11cc0, 0x4}, {0x80000001, 0x1, 0x7f, 0x2}, {0xc90, 0x0, 0x6887e4fb, 0x7ff}, {0x1, 0x5, 0x8, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x6, 0x10000, 0x8}]}}}]}}, {{0x8, 0x1, r14}, {0x204, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r15}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xa3b}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x40}}, {0x8, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r19}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x10}, 0x84) ioprio_set$pid(0x2, r0, 0x0) [ 473.167164] binder_alloc: binder_alloc_mmap_handler: 31100 20001000-20004000 already mapped failed -16 [ 473.185803] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:59 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x2003c, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x6cb) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast=0xffffffff}, 0x1}}, 0x2e) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="61f0740f") openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x40a01, 0x0) [ 473.214957] FAULT_INJECTION: forcing a failure. [ 473.214957] name failslab, interval 1, probability 0, space 0, times 0 [ 473.226419] CPU: 0 PID: 31103 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 473.233714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 473.243089] Call Trace: [ 473.245703] dump_stack+0x1b9/0x294 [ 473.249360] ? dump_stack_print_info.cold.2+0x52/0x52 [ 473.254576] ? __save_stack_trace+0x7e/0xd0 [ 473.258950] should_fail.cold.4+0xa/0x1a 2018/05/17 02:39:59 executing program 5: symlink(&(0x7f0000000080)='/\x00', &(0x7f0000000340)='./file0\x00') lsetxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=@known='security.capability\x00', &(0x7f0000000440), 0x0, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getpeername(r0, &(0x7f0000000000)=@alg, &(0x7f00000000c0)=0x80) llistxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/39, 0x27) 2018/05/17 02:39:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x1800000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 473.263044] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 473.268172] ? kasan_kmalloc+0xc4/0xe0 [ 473.272080] ? kasan_slab_alloc+0x12/0x20 [ 473.276251] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 473.281198] ? kvm_mmu_load+0x21/0x10e0 [ 473.285194] ? vcpu_enter_guest+0x3a83/0x6060 [ 473.289712] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 473.294751] ? graph_lock+0x170/0x170 [ 473.298573] ? entry_SYSENTER_compat+0x70/0x7f [ 473.303193] ? find_held_lock+0x36/0x1c0 [ 473.307292] ? __lock_is_held+0xb5/0x140 [ 473.311400] ? check_same_owner+0x320/0x320 [ 473.315750] ? rcu_note_context_switch+0x710/0x710 [ 473.320714] __should_failslab+0x124/0x180 [ 473.324977] should_failslab+0x9/0x14 [ 473.328802] kmem_cache_alloc+0x2af/0x760 [ 473.332984] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 473.337853] mmu_topup_memory_caches+0xf7/0x3a0 [ 473.342560] kvm_mmu_load+0x21/0x10e0 [ 473.346393] ? memset+0x31/0x40 [ 473.349705] vcpu_enter_guest+0x3a83/0x6060 [ 473.354047] ? perf_trace_lock+0x495/0x900 [ 473.358318] ? kvm_set_msr_common+0x2680/0x2680 2018/05/17 02:39:59 executing program 5: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0x7fffffff, &(0x7f0000000080)="515370e2ca85770a90a74d23629f98614f953d0cbbb9042c652e701d243d49d3a3f4d8309c0cae45b4dc0ef3e30cc89c9ea3f853bc102cb4ee9e23bcfd8f44df96d9a5ad722d8a0000000000000000000000000000006b04c2fed20a7331ed15ea12a4cfa45a4f8b92410ad2150be9a2", 0x70) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000200)=@in6={0xa, 0x0, 0x1}, 0x1c, &(0x7f0000000580), 0x0, &(0x7f0000000680)}], 0x492492492492682, 0x0) [ 473.363100] ? __lock_acquire+0x7f5/0x5140 [ 473.367360] ? vmx_vcpu_load+0xadd/0xfe0 [ 473.371460] ? graph_lock+0x170/0x170 [ 473.375282] ? perf_trace_run_bpf_submit+0x246/0x370 [ 473.380417] ? perf_tp_event+0xc30/0xc30 [ 473.384644] ? __lock_is_held+0xb5/0x140 [ 473.388732] ? lock_acquire+0x1dc/0x520 [ 473.392724] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 473.397767] ? lock_release+0xa10/0xa10 [ 473.401768] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 473.407069] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 473.411614] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 473.416476] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 473.421536] kvm_vcpu_ioctl+0x79d/0x12e0 [ 473.425635] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 473.431380] ? lock_downgrade+0x8e0/0x8e0 [ 473.435564] ? rcu_is_watching+0x85/0x140 [ 473.439740] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 473.444974] ? __fget+0x40c/0x650 [ 473.448459] ? expand_files.part.8+0x9a0/0x9a0 [ 473.453077] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 473.458051] ? wait_for_completion+0x870/0x870 [ 473.462677] ? __fget_light+0x2ef/0x430 [ 473.466694] kvm_vcpu_compat_ioctl+0x208/0x480 [ 473.471300] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 473.475638] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 473.481217] ? fput+0x130/0x1a0 [ 473.484513] ? ksys_write+0x1a6/0x250 [ 473.488328] ? __do_page_fault+0x441/0xe40 [ 473.492588] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 473.497795] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 473.502136] __ia32_compat_sys_ioctl+0x221/0x640 [ 473.506922] do_fast_syscall_32+0x345/0xf9b [ 473.511266] ? do_int80_syscall_32+0x880/0x880 [ 473.515863] ? _raw_spin_unlock_irq+0x27/0x70 [ 473.520373] ? finish_task_switch+0x1ca/0x840 [ 473.524894] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 473.530445] ? syscall_return_slowpath+0x30f/0x5c0 [ 473.535401] ? sysret32_from_system_call+0x5/0x46 [ 473.540266] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 473.545132] entry_SYSENTER_compat+0x70/0x7f [ 473.549551] RIP: 0023:0xf7fdbcb9 [ 473.552920] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 2018/05/17 02:39:59 executing program 5: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x28) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x80000000, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000140)={0xcd, 0x8, 0x2, &(0x7f0000000100)="34bd"}) [ 473.560658] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 [ 473.567934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 473.575211] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 473.582490] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 473.589768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 473.606606] device lo entered promiscuous mode 2018/05/17 02:39:59 executing program 2: sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000000b40)={0x10}, 0xc, &(0x7f0000002d80)={&(0x7f0000000bc0)={0x110, 0x0, 0x0, 0x0, 0x0, {0xf}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}, @IPVS_DEST_ATTR_PORT={0x8, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7}, @IPVS_SVC_ATTR_AF={0x8, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}]}, 0x110}, 0x1}, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000100)=0x80, 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)=0x1) sendto$unix(r0, &(0x7f0000000cc0), 0xe0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) 2018/05/17 02:39:59 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={"73797a5f74756e00000000000000e8ff", 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000780)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)=@newtclass={0x24, 0x28, 0x1, 0x0, 0x0, {0x0, r2, {0x0, 0xe}, {0xffff, 0xffff}}}, 0x24}, 0x1}, 0x0) [ 473.612393] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:39:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x200000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 473.645266] binder: 31100:31102 ioctl 40046207 0 returned -16 [ 473.659430] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:39:59 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xa, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x2f0, 0x400000) getsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000200)=0xffffffff00000000, 0x4) ioctl$sock_netdev_private(r3, 0x89fa, &(0x7f0000001140)="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") ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)=0x5) poll(&(0x7f0000000240)=[{r0, 0x2015}, {r2, 0xa0}, {r0, 0x89}, {r3}, {r3, 0x15}, {r0, 0x4000}, {r0}, {r0, 0x4}, {r2, 0x80}], 0x9, 0xfffffffffffffffa) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f00000000c0)={'gretap0\x00', {0x2, 0x4e24, @broadcast=0xffffffff}}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f00000001c0)=r4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) [ 473.846379] binder: 31150:31152 unknown command 0 [ 473.857046] binder: 31150:31152 ioctl c0306201 20000340 returned -22 2018/05/17 02:39:59 executing program 4 (fault-call:4 fault-nth:12): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:39:59 executing program 5: socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000040), &(0x7f0000000080)=0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={"74756e6c3000f5ffffffffffffff00", &(0x7f00000001c0)=ANY=[@ANYBLOB="080000e5ff000000000000000000000001010000000000000000000000000000000000000000000000000000"]}) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x4) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r0, r1, 0x4, 0x32de, &(0x7f0000000200)="5f58337f3ced45a653a2f2798c38d47ff6965d9dfe258d809014814851dca6304f9bceb1b5ad9527b67a3dc31d56c190991d802cd44063c3e0106cf899e8d1aa21d22a939d2958180f062a913093b44770566a08f6cc66d5dc6fddc2b36dc49e040a96ad7efa24e2b003e021c5a73f304735b7fcf54ca62bf456", 0x5, 0x7, 0x5, 0x1f, 0xff, 0x3, 0x101, "bf7d3291455a707ade37b6f853cef16dba6f22a79fe251e47c776afeab56a9b89cd7a1b826df4e4b0bb6f4e78765fbc6042e35545e85e82c5e3cc7115428962b06f603369cffae440e576539ac57974fb3643304d0cf0ea1b16fa76430c3170e33af6b292b1db270dfd24c64272d704c23fd8bbfb0000e9bdc9bc9b831ff21e4ae62350b76e52361d7ed3f6a6d35005138c4d4808a5b9e3020be2b6636bee78c5e0e7c00f71c7b3ef521713178572e83744d6a762c97aa87"}) 2018/05/17 02:39:59 executing program 2: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x1, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfs4\x00', 0xa3021, 0x0) 2018/05/17 02:39:59 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20000050}, 0x40080) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vhost-vsock\x00', 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000380)={0x0, 0x20101000, 0xffffffff, 0x6d, 0x7, 0x1, 0x9, 0x8, 0x8000}, 0x10) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000000780)={{0x0, 0x1c9c380}, {r2, r3+10000000}}, &(0x7f00000007c0)) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f00000005c0)=""/187) r4 = openat(r0, &(0x7f0000000100)='./file0\x00', 0x84000, 0x2) write$binfmt_misc(r0, &(0x7f00000004c0)={'syz0', "2110c5e487a442959d169f6a07f92099da162eef82a4d83bc4f5d05fdfa654ebf3c1b2a95fadfd5dbea8543736650956e45dbff6c0ec3e4ef295222c276226f6511cb8a689c95585aad65e6e94784d7450188b0b31243ae548033394519faf6c4eef997519e2d2a4adcbef3151e5365ecee0d848e8ddce824d5b7efdc7eb961b75ff53693ee846e62c0746829787f44df0c6a490d0ac7f74615846512dd84140a001936be8ac48e3c091a2122060fca14e8a60f584beb28c9209a708e1f7d522a0b9c2e9638cce07a56e8265691c6f8e92"}, 0xd5) fcntl$getflags(r4, 0x403) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f00000003c0)=@pic={0x24f, 0x3df5, 0x0, 0x9, 0xbf66, 0x1, 0x2, 0x4, 0x101, 0x8, 0x8001, 0x8a, 0x6eb, 0x1, 0x5, 0x9}) fchmod(r1, 0x81) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000800)={'bcsf0\x00', 0x200}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000680)=0x0) waitid(0x0, r5, 0x0, 0xa, &(0x7f00000006c0)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) 2018/05/17 02:39:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x300000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:39:59 executing program 1: r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r0, 0x406, r1) futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x7fff) futex(&(0x7f000000cffc), 0xa, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, &(0x7f0000000080), 0x20) 2018/05/17 02:39:59 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x7, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:39:59 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x80fe, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:00 executing program 2: ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000140)) r0 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x4, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0xc0, 0x8, 0xfffffffffffffffa], 0x3, 0x1, 0x0, 0x6, 0x6, 0x80000000, {0x2, 0x3, 0x0, 0x78, 0x7, 0x5, 0x10000, 0x20, 0x9, 0x40, 0xd2, 0x9, 0x6, 0x7, "db79c17730e1ce2f9603d19048388d994021a64eee8478943992d00e02eeda7c"}}) 2018/05/17 02:40:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfc00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 473.898180] binder_alloc: binder_alloc_mmap_handler: 31150 20001000-20004000 already mapped failed -16 [ 473.918161] binder: BINDER_SET_CONTEXT_MGR already set [ 473.918185] binder: 31150:31155 unknown command 0 [ 473.928502] binder: 31150:31155 ioctl c0306201 20000340 returned -22 [ 473.937559] binder: 31150:31152 ioctl 40046207 0 returned -16 [ 473.994144] IPVS: ftp: loaded support on port[0] = 21 [ 474.034548] binder: 31179:31180 unknown command 0 [ 474.067849] binder: 31179:31180 ioctl c0306201 20000340 returned -22 [ 474.112888] binder_alloc: binder_alloc_mmap_handler: 31179 20001000-20004000 already mapped failed -16 [ 474.141412] binder: BINDER_SET_CONTEXT_MGR already set [ 474.155422] binder: 31179:31180 ioctl 40046207 0 returned -16 [ 474.202821] binder: 31179:31196 unknown command 0 [ 474.217505] device lo entered promiscuous mode [ 474.223797] FAULT_INJECTION: forcing a failure. [ 474.223797] name failslab, interval 1, probability 0, space 0, times 0 [ 474.226498] binder: 31179:31196 ioctl c0306201 20000340 returned -22 [ 474.235200] CPU: 0 PID: 31169 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 474.248931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.258294] Call Trace: [ 474.260897] dump_stack+0x1b9/0x294 [ 474.264544] ? dump_stack_print_info.cold.2+0x52/0x52 [ 474.269744] ? __save_stack_trace+0x7e/0xd0 [ 474.274089] should_fail.cold.4+0xa/0x1a [ 474.278168] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 474.283282] ? kasan_kmalloc+0xc4/0xe0 [ 474.287176] ? kasan_slab_alloc+0x12/0x20 [ 474.291335] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 474.296185] ? kvm_mmu_load+0x21/0x10e0 [ 474.300173] ? vcpu_enter_guest+0x3a83/0x6060 [ 474.304677] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 474.309703] ? graph_lock+0x170/0x170 [ 474.313512] ? entry_SYSENTER_compat+0x70/0x7f [ 474.318116] ? find_held_lock+0x36/0x1c0 [ 474.322201] ? __lock_is_held+0xb5/0x140 [ 474.326299] ? check_same_owner+0x320/0x320 [ 474.330754] ? rcu_note_context_switch+0x710/0x710 [ 474.335712] __should_failslab+0x124/0x180 [ 474.339964] should_failslab+0x9/0x14 [ 474.343780] kmem_cache_alloc+0x2af/0x760 [ 474.347965] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 474.352832] mmu_topup_memory_caches+0xf7/0x3a0 [ 474.357521] kvm_mmu_load+0x21/0x10e0 [ 474.361346] ? memset+0x31/0x40 [ 474.364642] vcpu_enter_guest+0x3a83/0x6060 [ 474.369059] ? perf_trace_lock+0x495/0x900 [ 474.373316] ? kvm_set_msr_common+0x2680/0x2680 [ 474.378002] ? __lock_acquire+0x7f5/0x5140 [ 474.382266] ? vmx_vcpu_load+0xadd/0xfe0 [ 474.386358] ? graph_lock+0x170/0x170 [ 474.390174] ? perf_trace_run_bpf_submit+0x246/0x370 [ 474.395305] ? perf_tp_event+0xc30/0xc30 [ 474.399509] ? __lock_is_held+0xb5/0x140 [ 474.403598] ? lock_acquire+0x1dc/0x520 [ 474.407591] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 474.410500] IPVS: ftp: loaded support on port[0] = 21 [ 474.412630] ? lock_release+0xa10/0xa10 [ 474.412652] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 474.412670] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 474.412703] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 474.436433] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 474.441507] kvm_vcpu_ioctl+0x79d/0x12e0 [ 474.445598] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 474.451339] ? lock_downgrade+0x8e0/0x8e0 [ 474.455523] ? rcu_is_watching+0x85/0x140 [ 474.459693] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 474.464929] ? __fget+0x40c/0x650 [ 474.468419] ? expand_files.part.8+0x9a0/0x9a0 [ 474.473021] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 474.477981] ? wait_for_completion+0x870/0x870 [ 474.482607] ? __fget_light+0x2ef/0x430 [ 474.486617] kvm_vcpu_compat_ioctl+0x208/0x480 [ 474.491231] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 474.495573] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 474.501116] ? fput+0x130/0x1a0 [ 474.504387] ? ksys_write+0x1a6/0x250 [ 474.508174] ? __do_page_fault+0x441/0xe40 [ 474.512423] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 474.517606] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 474.521921] __ia32_compat_sys_ioctl+0x221/0x640 [ 474.526684] do_fast_syscall_32+0x345/0xf9b [ 474.531019] ? do_int80_syscall_32+0x880/0x880 [ 474.535605] ? _raw_spin_unlock_irq+0x27/0x70 [ 474.540097] ? finish_task_switch+0x1ca/0x840 [ 474.544603] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 474.550134] ? syscall_return_slowpath+0x30f/0x5c0 [ 474.555060] ? sysret32_from_system_call+0x5/0x46 [ 474.559901] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 474.564750] entry_SYSENTER_compat+0x70/0x7f [ 474.569165] RIP: 0023:0xf7fdbcb9 [ 474.572524] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 474.580231] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 [ 474.587491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 474.594760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 474.602044] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 474.609309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/17 02:40:00 executing program 0: socketpair(0x1a, 0x0, 0x8003, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) renameat(r0, &(0x7f0000000080)='./file0\x00', r0, &(0x7f00000000c0)='./file0\x00') ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000000)={0xa0000, 0x0, [0x6, 0x2, 0x1, 0x1, 0xfffffffffffffbff, 0x400, 0x365, 0x8000]}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000640)=0x4) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000800)={0xffff, 0x7fffffff, 0x9, 0x101}) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000680)={0x10003, 0x2, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) get_robust_list(r2, &(0x7f0000000780)=&(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)}}, &(0x7f00000007c0)=0xc) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f00000005c0)={[], 0x9, 0x2, 0x5, 0x0, 0x100000001, r2}) 2018/05/17 02:40:00 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x100, 0x0) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="1d9b1e612b84a7ddf9f6444bdf8de9940be82fb2f390f407d3dccfec69f0aaad287ef76b226ff30e29b46cdddeb43b7f05c30167f3db05dfae25bc817c049bb88b5e90c9495ac7f72941f94db02d7ab4ee447bd1476be84e85a4ff63dbaf7554b1aff86cc3b0493f17fa7cf8e43a0ea0649f2d3c2cd28086df2e978ceb0148fd19b8a3edd30b032b2b25817541c7e26aac68c41ecc864567001a2ed56adec67a8f8e73148f482ab5701acd71685ee0d57139c48e8fd22b39c07f437cc1f8429b8a829ab5", 0xc4}, {&(0x7f0000000080)="be3ca7516a279af7cd35fde01f21bd7b4cfad989d4f31f256ff01a597e7da68abf", 0x21}, {&(0x7f0000000340)="e3fdd4a59ef66984ef2e41f8dedee4b6d69355d02618e637e39abf1af086104fa6f0781971e22572b3c2d4db6947c433bb86dd695fbabed46eab10c260898df0a586f1bf948347d6809707724d0124a2ddfcdd3349bd324c6b99ddd6d09eb84d73c3c08c12b21ab2b04041cd2a7b8d9f68714082682a6f01946f7027ac47706162e13b1febb4374f8e8d88c9f834503ac74d188d658b52", 0x97}, {&(0x7f0000001380)="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", 0x1000}], 0x4, &(0x7f0000000100)=[@op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x60}, @assoc={0x10, 0x117, 0x4, 0x5}], 0x40, 0x4040800}, 0x4040804) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) chmod(&(0x7f0000000200)='./file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') 2018/05/17 02:40:00 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4009, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x3e00400000) 2018/05/17 02:40:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:00 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6000000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:00 executing program 1: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x3ffffe, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000040)={0x8, 0x1}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/254, 0xfe, 0x10000, &(0x7f0000000180)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_setparam(r2, &(0x7f00000001c0)=0x3) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000300)="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") 2018/05/17 02:40:00 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfffffff5, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:00 executing program 4 (fault-call:4 fault-nth:13): perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 474.842368] binder_alloc: binder_alloc_mmap_handler: 31215 20001000-20004000 already mapped failed -16 [ 474.857972] IPVS: ftp: loaded support on port[0] = 21 [ 474.877736] FAULT_INJECTION: forcing a failure. [ 474.877736] name failslab, interval 1, probability 0, space 0, times 0 2018/05/17 02:40:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) 2018/05/17 02:40:00 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28}, 0x10) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x0, 0x18}, 0xc) r1 = dup2(r0, r0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) statx(r1, &(0x7f00000001c0)='./file0\x00', 0x800, 0x400, &(0x7f0000000500)) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000200)={0x6, 0x0, 0x0, &(0x7f0000000180)}) getsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="000000009b5303235a8fe6f8b283f960be2884192ac31c75f9d5bf1baf10b7f3dd73401e0210caa9acfa2d5500d693236bb373d338314a9470b5cf10e5cc01a5a5eca3c8ec76fb6c57608c06a32a8abf3bb51ebc33"], 0x4) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0x0, 0x6, 0x19d, 0x9c9, 0x1000, 0x0, 0x40, 0x0, 0x5, 0x20000}) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) openat$cgroup_int(r2, &(0x7f0000000600)='io.weight\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000400), 0xffffffffffffff2a) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000004c0)) getrandom(&(0x7f0000000a00)=""/8, 0x8, 0x2) [ 474.881796] binder: BINDER_SET_CONTEXT_MGR already set [ 474.889090] CPU: 0 PID: 31218 Comm: syz-executor4 Not tainted 4.17.0-rc5+ #79 [ 474.901636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 474.911008] Call Trace: [ 474.913622] dump_stack+0x1b9/0x294 [ 474.917285] ? dump_stack_print_info.cold.2+0x52/0x52 [ 474.922505] ? __save_stack_trace+0x7e/0xd0 [ 474.926869] should_fail.cold.4+0xa/0x1a [ 474.930965] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 474.936094] ? kasan_kmalloc+0xc4/0xe0 [ 474.940006] ? kasan_slab_alloc+0x12/0x20 [ 474.944184] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 474.945974] binder: 31215:31221 ioctl 40046207 0 returned -16 [ 474.949039] ? kvm_mmu_load+0x21/0x10e0 [ 474.949060] ? vcpu_enter_guest+0x3a83/0x6060 [ 474.949078] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 474.949098] ? graph_lock+0x170/0x170 [ 474.949117] ? entry_SYSENTER_compat+0x70/0x7f [ 474.976848] ? find_held_lock+0x36/0x1c0 [ 474.980918] ? __lock_is_held+0xb5/0x140 [ 474.984995] ? check_same_owner+0x320/0x320 [ 474.989335] ? rcu_note_context_switch+0x710/0x710 [ 474.994269] __should_failslab+0x124/0x180 [ 474.998502] should_failslab+0x9/0x14 [ 475.002295] kmem_cache_alloc+0x2af/0x760 [ 475.006440] ? mmu_topup_memory_caches+0xf7/0x3a0 [ 475.011277] mmu_topup_memory_caches+0xf7/0x3a0 [ 475.016122] kvm_mmu_load+0x21/0x10e0 [ 475.019917] ? memset+0x31/0x40 [ 475.023194] vcpu_enter_guest+0x3a83/0x6060 [ 475.027509] ? perf_trace_lock+0x495/0x900 [ 475.031760] ? kvm_set_msr_common+0x2680/0x2680 [ 475.036419] ? __lock_acquire+0x7f5/0x5140 [ 475.040657] ? vmx_vcpu_load+0xadd/0xfe0 [ 475.044717] ? graph_lock+0x170/0x170 [ 475.048514] ? perf_trace_run_bpf_submit+0x246/0x370 [ 475.053612] ? perf_tp_event+0xc30/0xc30 [ 475.057672] ? __lock_is_held+0xb5/0x140 [ 475.061732] ? lock_acquire+0x1dc/0x520 [ 475.065695] ? kvm_arch_vcpu_ioctl_run+0x234/0x1690 [ 475.070717] ? lock_release+0xa10/0xa10 [ 475.074700] ? kvm_arch_vcpu_ioctl_set_fpu+0x340/0x340 [ 475.079977] ? kvm_arch_dev_ioctl+0x5f0/0x5f0 [ 475.084480] kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 475.089313] ? kvm_arch_vcpu_ioctl_run+0x33e/0x1690 [ 475.094333] kvm_vcpu_ioctl+0x79d/0x12e0 [ 475.098388] ? kvm_uevent_notify_change.part.29+0x440/0x440 [ 475.104094] ? lock_downgrade+0x8e0/0x8e0 [ 475.108242] ? rcu_is_watching+0x85/0x140 [ 475.112383] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 475.117574] ? __fget+0x40c/0x650 [ 475.121042] ? expand_files.part.8+0x9a0/0x9a0 [ 475.125617] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 475.130541] ? wait_for_completion+0x870/0x870 [ 475.135129] ? __fget_light+0x2ef/0x430 [ 475.139103] kvm_vcpu_compat_ioctl+0x208/0x480 [ 475.143679] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 475.147992] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 475.153522] ? fput+0x130/0x1a0 [ 475.156794] ? ksys_write+0x1a6/0x250 [ 475.160584] ? __do_page_fault+0x441/0xe40 [ 475.164817] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 475.169999] ? kvm_vcpu_ioctl+0x12e0/0x12e0 [ 475.174320] __ia32_compat_sys_ioctl+0x221/0x640 [ 475.179075] do_fast_syscall_32+0x345/0xf9b [ 475.183393] ? do_int80_syscall_32+0x880/0x880 [ 475.187965] ? _raw_spin_unlock_irq+0x27/0x70 [ 475.192451] ? finish_task_switch+0x1ca/0x840 [ 475.196941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 475.202479] ? syscall_return_slowpath+0x30f/0x5c0 [ 475.207407] ? sysret32_from_system_call+0x5/0x46 [ 475.212266] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 475.217115] entry_SYSENTER_compat+0x70/0x7f [ 475.221513] RIP: 0023:0xf7fdbcb9 [ 475.224865] RSP: 002b:00000000f5fd70ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 475.232565] RAX: ffffffffffffffda RBX: 0000000000000016 RCX: 000000000000ae80 2018/05/17 02:40:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfeffffff00000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 475.239825] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 475.247092] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 475.254350] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 475.261609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/17 02:40:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080), &(0x7f0000001ac0)=0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x15f) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x40, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r2) 2018/05/17 02:40:01 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x4c000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x800000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:01 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0x1a) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) [ 475.375561] binder_alloc: binder_alloc_mmap_handler: 31240 20001000-20004000 already mapped failed -16 2018/05/17 02:40:01 executing program 5: r0 = epoll_create1(0x80000) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x101}, &(0x7f0000000080)=0x8) r3 = getpgrp(0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f00000001c0)=r3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e20, @rand_addr=0x7f}}, 0x3, 0x7fff, 0x1, 0x1, 0x1000}, &(0x7f0000000180)=0x98) 2018/05/17 02:40:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) [ 475.447072] binder: BINDER_SET_CONTEXT_MGR already set [ 475.473215] binder: 31240:31241 ioctl 40046207 0 returned -16 2018/05/17 02:40:01 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6c, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x1f000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:01 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000440)=""/4096, 0x1000}, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) pwritev(r1, &(0x7f00000000c0), 0x10000000000000b0, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f0000000040)) 2018/05/17 02:40:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x2000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) [ 475.691259] binder_alloc: binder_alloc_mmap_handler: 31269 20001000-20004000 already mapped failed -16 [ 475.726339] IPVS: ftp: loaded support on port[0] = 21 [ 475.759679] binder: BINDER_SET_CONTEXT_MGR already set [ 475.781334] binder: 31269:31271 ioctl 40046207 0 returned -16 2018/05/17 02:40:01 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xf5ffffff00000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 476.009731] IPVS: ftp: loaded support on port[0] = 21 [ 476.057502] device lo entered promiscuous mode [ 476.069357] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:02 executing program 1: socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x8000000002, 0xfffffffffffffd84) socket(0x2, 0x1, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) 2018/05/17 02:40:02 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xe00000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:02 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfd00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:02 executing program 5: r0 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005e00)=[{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f00000004c0)="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", 0xf47}], 0x1, &(0x7f0000001700)}], 0x1, 0x0) process_vm_readv(r0, &(0x7f0000001400), 0x1, &(0x7f0000000000)=[{&(0x7f0000002780)=""/204, 0xd7e1e1d24b36aac5}, {&(0x7f0000002880)=""/183, 0x9}], 0x2, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x100) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x800) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000100)=""/44) 2018/05/17 02:40:02 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x100000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) 2018/05/17 02:40:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0x9776953c6c6b3802, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000001d00fd0000000000000000000500000008002100700bddd11f218f1811016f87e4a1baa0ee9505e740149e02ab7248dbd70fb30ddd2679c5310586ef9483691e6fee20ef0fb12c07517c90ca890675a0068c8d74223931957ca082ab10c922550910ed82160000e44ea2321847df3bd37b2ff549f5faf09f18f00f37b3dcab8d6895aedba72c2d2e69fc798670f1b9979920034c0c30ceba1f9e951a43852af56d89", @ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR64, @ANYRES32, @ANYBLOB="622a60f7fdd077c5b6fa5645bc7181ca263ab3a8bbffe899d288e84bcad73a3e23e7a4622023b82da4fad04f6e8f8ffad76538cba3e6d5f94d082ebf320bd57917468ff0b700000000000000000000000000000000"]], 0x2}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 476.161166] binder_alloc: binder_alloc_mmap_handler: 31298 20001000-20004000 already mapped failed -16 [ 476.188911] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x1100], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:02 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) fsync(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f00000000c0)=""/95) read(r2, &(0x7f0000000280)=""/1, 0x1) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f0000000080)={r0, 0x7}) 2018/05/17 02:40:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x2000, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f00000000c0)) [ 476.217862] binder: 31298:31299 ioctl 40046207 0 returned -16 [ 476.225684] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:02 executing program 0: r0 = memfd_create(&(0x7f00000000c0)="6d698745dd1e9e1ac382686d655f7479706500", 0x1) r1 = getpid() ptrace$peekuser(0x3, r1, 0x1) write(r0, &(0x7f0000000040)="16", 0x1) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000080)={0x5}) fcntl$addseals(r0, 0x409, 0x2) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000000000)) 2018/05/17 02:40:02 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)="2f007e574d000330809022cfde26555dc9ecfe1974406edad38364782d63b6612854b9e49dbdcaef718197e37e870a308b1e3a798fa788a46d3025ef933e51828ab675064e2adbe9126423b4a73d68fbe99c6db2f160d49cb6cce76c27289a4f9d097354aaa5860d2383df87526baa184d90bb7729366c17bc33d765e9bc2f882a13f3a9c1f60660bd4fd2fa31d2c0a775242289bce062d10d24ded5406918a66b2c75c43fe1ff458ae5cd9fec63039ba5a7b66a60ede5ccdabc7ee77660ef2358ccdff02226021384b0c235f114ed9ade92767aecc256acdeb610df42e7169f240357f735ae5fe29017e51e27252f48b95bfbbb3a865535298bdc36d71db635f41c57771db77aeaff883feb3dc3cc24bd3c036e396ad3af37945058839e812270bc40901fa654e7cc3292a82fc80c374dc07142a1c2e9d3e2528e4fdac32bcaefe910ebd3b948a3bfebef5fa8d82473c7fbf3ec", 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000580), 0x20) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 2018/05/17 02:40:02 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x7400000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfd], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:02 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 2018/05/17 02:40:02 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) open$dir(&(0x7f0000000040)='./file0\x00', 0x2000, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0xc08c5334, &(0x7f00000000c0)) 2018/05/17 02:40:02 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) [ 476.483362] device lo entered promiscuous mode [ 476.490566] binder_alloc: binder_alloc_mmap_handler: 31341 20001000-20004000 already mapped failed -16 [ 476.513156] binder: BINDER_SET_CONTEXT_MGR already set [ 476.551097] binder: 31341:31342 ioctl 40046207 0 returned -16 [ 476.554112] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:03 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x30000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:03 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x6}, 0x1c) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x200, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000140)=0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080)=0x2, 0x4) sendfile(r0, r2, &(0x7f00000000c0), 0x80000000) 2018/05/17 02:40:03 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40102, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24}}, 0x4c, 0x401}, &(0x7f0000000080)=0x88) mknod$loop(&(0x7f00000004c0)='./file0\x00', 0x8040, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x80000001}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000440)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x14) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000340)={r2, 0x8, 0x9, 0x5, 0x5, 0x69, 0x3, 0x7, {r3, @in={{0x2, 0x4, @broadcast=0xffffffff}}, 0x3, 0x1, 0x2, 0xfb4d, 0x7}}, &(0x7f0000000400)=0xb0) r4 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) writev(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)='0', 0x1}], 0x1) 2018/05/17 02:40:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x2000000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:03 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x7000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:03 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x5421, 0x0) 2018/05/17 02:40:03 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) r1 = accept4(r0, &(0x7f0000000040)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, &(0x7f00000000c0)=0x80, 0x80000) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) sched_rr_get_interval(r3, &(0x7f0000000140)) ioctl$KVM_GET_CLOCK(r0, 0x8030ae7c, &(0x7f0000000180)) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x100}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0xffff}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000240)) syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x40) r4 = accept4$inet(r1, &(0x7f00000002c0)={0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x10, 0x80000) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000340)={0x101, 0xcac}) munlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000380)={'IDLETIMER\x00'}, &(0x7f00000003c0)=0x1e) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f00000005c0)={&(0x7f0000000400)={0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xc4, r5, 0x300, 0x70bd29, 0x25dfdbfb, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xd2}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000600)={0x3b, {{0x2, 0x4e20, @multicast1=0xe0000001}}}, 0x84) fcntl$lock(r2, 0x7, &(0x7f00000006c0)={0x2, 0x3, 0x4, 0x7fffffff, r3}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bond_slave_0\x00', 0x0}) getresuid(&(0x7f0000000740), &(0x7f0000000780)=0x0, &(0x7f00000007c0)) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4e22, 0x7fff, 0x4e24, 0x7, 0xa, 0xa0, 0x20, 0x87, r6, r7}, {0x7, 0x2, 0x0, 0x36dc, 0x4, 0x0, 0x5, 0x800}, {0x1ff, 0x2766, 0x4358, 0x6}, 0xff, 0x6e6bb1, 0x1, 0x1, 0x3, 0x3}, {{@in=@rand_addr, 0x4d4, 0x3c}, 0xa, @in=@multicast1=0xe0000001, 0x3500, 0x3, 0x0, 0x2, 0x41, 0x9, 0x3}}, 0xe8) openat$nullb(0xffffffffffffff9c, &(0x7f0000000900)='/dev/nullb0\x00', 0x20c200, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000940)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000009c0)) syz_open_dev$sndtimer(&(0x7f0000000a00)='/dev/snd/timer\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x80, r5, 0x2, 0x70bd28, 0x25dfdbff, {0x6}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x802}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffffffffffe2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xbe55}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8010) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000b80)=0x7fffffff, 0x4) ioctl$sock_netdev_private(r2, 0x89ff, &(0x7f0000000bc0)="77f72b04efa223d521642fcc09137ba0125eb75d54dc439780396207db57b85a77a584ad1293987cd44ddd8cb56478e95d8a9b6d43dfe0e6224ddab5ba7eee8d7a3ca2ebb18c5f40b3144baa66f8bdaa9ab476ab927e62d98956e5ad1f5967a2dc03b02a6dd1142c1bbc038f8baa") ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000c40)={0x0, 0xdbef, 0x30, 0x0, 0x800}, &(0x7f0000000c80)=0x18) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000cc0)={r8, @in6={{0xa, 0x4e23, 0xb, @empty, 0x200}}}, 0x84) [ 477.634375] Unknown ioctl 19269 [ 477.647326] binder_alloc: binder_alloc_mmap_handler: 31371 20001000-20004000 already mapped failed -16 [ 477.665349] IPVS: ftp: loaded support on port[0] = 21 [ 477.676401] Unknown ioctl 19269 2018/05/17 02:40:03 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) [ 477.705550] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x1000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:03 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001280)=ANY=[@ANYBLOB='\v\x00\x00\x00\x00\x00\x00\x00'], 0x8) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0)=0x3e5c, 0x4) 2018/05/17 02:40:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1ff, 0x40) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000200)={r2, 0x6}, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002d0019010000000000000000020000000c000003080001005500005f8004c69cc638b27c2ca24ce55e0e2d6ec37fb6440482f31117222781dd57e3d6585808bdd57a2126760e81971b937f2b45e5529f11d4db05"], 0x1}, 0x1}, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 477.730889] binder: 31371:31382 ioctl 40046207 0 returned -16 2018/05/17 02:40:03 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x10d, 0xb, &(0x7f0000000040)={0xf}, 0xc) open_by_handle_at(r0, &(0x7f0000000080)={0x77, 0x0, "a5927e4f3344d2b7d0b99ff95deced1c99ed3ba6c83aae80ccb642b205dc6b3ca190839762b6273e9e3208c611b90272ec8d08f49fa9ce16868338eeeedb607c270ebbb6e516096d7e804447d7371afd81886c44b5eae6326510caada71b3ca6653b65a356ab32a22f459eb942edeb"}, 0x240080) 2018/05/17 02:40:03 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x7400, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:03 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 2018/05/17 02:40:03 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xff000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 477.910557] binder_alloc: binder_alloc_mmap_handler: 31411 20001000-20004000 already mapped failed -16 [ 477.971645] device lo entered promiscuous mode [ 477.980211] binder: BINDER_SET_CONTEXT_MGR already set [ 477.998095] binder: 31411:31412 ioctl 40046207 0 returned -16 [ 478.000877] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:04 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xe803, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:04 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:04 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00006cdfa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad46390d006dc80000009d4d54", 0x10) r1 = dup(r0) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg(r2, &(0x7f0000002140)=[{{&(0x7f0000000100)=@sco={0x1f}, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)}}, {{0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x10}}], 0x2, 0x0) 2018/05/17 02:40:04 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x551340, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x1d) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000040)=0x3, 0x4) sendto$inet(r1, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x2c, &(0x7f0000000200)="742663ced6f73fa33f9cccd7439708fe6cff733c1862d8122398f75703d21fef74dfc0bbccd7195e6b79c6426c932fce0546a297d8effba4d165f33132a8682f7be68835e568060b78a81d2a168302ca18863970b985ba2ff234da74577f81f51432984334e6acf563bf46a4446c9863735f0b5e36236076e4976bd14734d8f1802e8c9986ae1f459287cfdd427b58ec347574dcfe29583ab78c4105f4786bd0c65ce2085b263c317de180c7bacd23bfd067", 0xfffffffffffffdc0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x5, 0x4) 2018/05/17 02:40:04 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x4, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000480)={0x0, 0x5}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000500)={r1, 0x3}, 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) pipe(&(0x7f0000000340)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x3f) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000680), &(0x7f00000006c0)=0x4) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0401273, &(0x7f0000000240)={[], 0x100000001, 0xfffffffffffffffd, 0x5, 0x2, 0xd5a, r2}) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r6 = accept4$inet(r4, &(0x7f00000002c0)={0x0, 0x0, @multicast2}, &(0x7f0000000300)=0x10, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)={r1, 0x99, "fafd549a679d8455d614a63f9c8033690cefc8e195381657e21244a84354dcc72103d2fe0f258ebdeea60be922aec919f4a2cc5e97f037515a935ec3311d3e97f9292ebdb66040af5e2972580d3e0708fe976a9cf3c1d383d028e9daecc544e9ebc3397a11793db3f54d1a7e96037e62f8fd6b7aaf3b0667df688403ba9b472c78c5b429be00d638860390655429f87a3375b48b67fb484965"}, &(0x7f0000000180)=0xa1) syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x229d, 0x200000) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f00000001c0)=r7, 0x4) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x77359400}, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000700)=0x7, 0x4) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@dev}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000640)=0xe8) tkill(r2, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) 2018/05/17 02:40:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xffffffff00000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:04 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x4c00, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) [ 478.262352] binder_alloc: binder_alloc_mmap_handler: 31433 20001000-20004000 already mapped failed -16 [ 478.273791] IPVS: ftp: loaded support on port[0] = 21 [ 478.293415] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x20000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:04 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:04 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000013e000)=@ipv6_getmulticast={0x14, 0x3a, 0x300, 0x70bd26, 0x25dfdbff, {0xa}, [""]}, 0x14}, 0x1}, 0x0) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x8000) [ 478.316338] binder: 31433:31434 ioctl 40046207 0 returned -16 2018/05/17 02:40:04 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfc00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:04 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:04 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 2018/05/17 02:40:04 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xfffffdfd, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 478.462330] device lo entered promiscuous mode 2018/05/17 02:40:04 executing program 1: munmap(&(0x7f0000000000/0x600000)=nil, 0x600000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa}) [ 478.502576] IPVS: ftp: loaded support on port[0] = 21 [ 478.552456] binder_alloc: binder_alloc_mmap_handler: 31475 20001000-20004000 already mapped failed -16 [ 478.580359] binder: BINDER_SET_CONTEXT_MGR already set [ 478.633065] binder: 31475:31476 ioctl 40046207 0 returned -16 2018/05/17 02:40:05 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfc000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 2018/05/17 02:40:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x1800], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:05 executing program 5: socketpair$inet6(0xa, 0x3, 0x8, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) mkdir(&(0x7f0000001000)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) r2 = getgid() chown(&(0x7f0000000140)='./file0/file0\x00', r1, r2) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', 'ppp1proc\x00'}, &(0x7f00000000c0)='nfs\x00', 0x4, 0x2) uselib(&(0x7f0000000100)='./file0/file0\x00') mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) 2018/05/17 02:40:05 executing program 2: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) unlink(&(0x7f0000000000)='./file0\x00') 2018/05/17 02:40:05 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:05 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x3, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000080)=0xfffffffffffffffc) 2018/05/17 02:40:05 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6800000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 479.228312] binder_alloc: binder_alloc_mmap_handler: 31496 20001000-20004000 already mapped failed -16 [ 479.247588] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:05 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) [ 479.280323] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x11], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:05 executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200100000114, 0x0, &(0x7f00000002c0)=""/1, &(0x7f0000000280)=0xffb1) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @multicast2}}}, {{@in6=@loopback}}}, &(0x7f0000000040)=0xe8) dup2(r2, r1) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/05/17 02:40:05 executing program 5: process_vm_writev(0x0, &(0x7f0000000240), 0x290, &(0x7f00000018c0), 0x1, 0x0) madvise(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) r2 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0186405, &(0x7f0000000100)={0x6db, 0x10000, r2, 0x9, r3, 0x8, 0x4, 0x401}) [ 479.323211] binder: 31496:31499 ioctl 40046207 0 returned -16 2018/05/17 02:40:05 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$VT_ACTIVATE(r0, 0x5606, 0x40) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x1, 0x3}) r1 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000340)="46ac5128da090e4899c38028efeb85968ead969e21e33725a7edc030260cdb3ca79964a6e93ce51185f005b7dac052cb797af438c32c29b736fb12c63dd0e504445044a1ae9c10fd8171232ed7dcb08e9acaf4c569c4c16c5c47994118fc35ff7f03407dc7093fa7d3132d276a10768b2711cd1c6ecd3545692431856b6e0651412ff7b73711097f061a1b67f6c3d7605eab3b675b6c061e6ef32b7ea8847b6f84da1334d35322b94447bfaca74b152eb64cfa54cb63126c2cc662e7898e6459ed40c4566403f303d341c9c34c6049d9f8e1c2a9483f003c20e66886d0e1629f498668c202f183de294d03da07c9f5feb65bc196554a79a2f255828c1f1cf9a09654f9df849443e8d290debcc78efbdca391a348b33f18ef618011273faa1f095298dd71db08a90e177a1e9a0c771deca3b51670a26850b89d4439574328c19d9e91766dd52169e0ad5011e4acc005861b3b3146d67445e6f6c75ce4af9d8db6963887d79113613267c5bc42fb0aca828590fb291ce8836d3cd391d364efdbb7015d8ec643d83b623380c21c6ebbf774498c94e60838a45d4692bfe73aaea2bbcecb6dcec20e5aa48a950428e2372009212f2f6be608cdec5ff84108f3f3d2e42c99a6d4cd4577ec9f39a51533efe71d494ccadb66eddd4cc0e56b33eefb0ada68ae36c905a977d9042a63299d2130f4e85357b0078c31bc45b00f5ccd879a6735d85882bfddbc6f2cff4a2b976b29e5a8adc74893c748b297a660ba0f64ad8a6ac6fcf180b6a4357ad6733cb75035cd58631142bd720cf52bcd1438647cbe1058e32d33c38f1327bef3f6b1c815ab4f2d47366473ae37c65a2d1df88823dd4c326d640c50e5bddfa976f04cd034331b632cd7a8bbc838081f28f6e24ed646721cea36e56501f9085e428a6c94b7ba5431f59651f36c8f715e4547ffed53c03cc58d2d4382193625cf69c197c4eb3c3c86c291d693837ab7eb23d61d2518379f0c61acf67425afa1ff8d1fac196a7ef9f6f9b514a2028ae010d1bf10833940294c400401ec706ce366dc4c62f6c55c6985a31592360cc7e6cc30a90cae1891b4cffb882b0329457503055db6a8e3b651b3302c24e6d149e8368ee6d3bafbc417256d042b4b87cb1bf46169ad1a593da66b2c6f453180f2c51be35c431e1af07e54c1251334415135422fa81b015a7a746c1979827e3d32057d408016cdc2b641a42626bbf8b7970a5638e9e48783ff80ded5b5184b69d41e60ba9e2ff7ef3e85b4419db2b064d64f833dc2035a6cc3ea28335ad94eb5ba974d9799ce94565559e6a7636b725c4c3dc1702af3c0f3d9dc77f6d404b7c8ff2cec2b4e703451a1d2750d9a22e9f4b5e27da765d228f09bbd30088ac9dff793ec759161849cf4217f5684bff8eddd65be61d3ed2dcc7bae8ab5e1260c3a90cdb37626c4871098802b34f271d8a091b0517bd1588b43cf21b2e3fe676e34d115a56d450d50a97ac7e2ea5904f9695dbde822dba41ac3a1190d63ef486a1829d38b005f9458a82533a555a2f674eea95af7ef7f0cf9654e0ed8d2ab722ca065fd97e6518b76a39cc1b04dc49c395f3aad5e05c76c1881f6a85fee6c6fba8340692eb0b7f3f948350e6947dac635cfef9e4ff4d3f756802cbd97e8c5845b25bc5a021d9875277f197d1bce55661e6961dd788a444962e33fa582a01d0bd61aaa22a76adf68b3169d3f0b49db0325e975a7a8a3dc781ea4686d05fe4cb656ea22fdd40a7489b4a96e62b7a767eeefcbd800f12e00fef63b57495274edd5b3657d4fc404a8d2db808db77317e325a92571b69d1d37be88724dd507eec5c8045b1b499c7551ee7ea37b6f2e1390f5db94e47215338df226ba2873bddba06ea6fcf43dceb9e1ec285404ca654e68f135da850d3a684cc28b1d058fb8496b342d81b58f2627988bba12f603ddd45bd77556e6db019c4308335959ed74e079e9820aa923e3edeb9b2614450ecdccf297bb414e5b5d8f1a640e5386db7a96b620f8b6c2b5ba325016157070ab11580ed9b99c76f29c31c6b47781fa8dea3448d8e55b9b665ab90b5a16259a804aa9c7d9038db1b579df54c3ef37151e1de1fef44f8ebd930863410c6f0ee3ed21469cff67bbc1728112cc77e4216c598bea01403ca585704e89c8ce924c90b02ff9d759480fb2ba11342f9b93ce5a692e6aece7dd72249da3c86ba7f3da141f4b1588e8b2f911fec643db23166e3f389f369e5ad4d327d0e8a794128e1bdba7ca419b995c8462b39fa1a70fb9a3028e7f4775742cc5a83883602cd3d3239e30c3abba43d5be31070af88024cf8933a9e6dc3cca0b466c8b4947a994b1ae203bd8cee57352dfc89145bf92065ec72d5372bd155db0e415da5cbc24720d33862c301c8d2b0ea110b9a4393f4a7b647f487ebdca3b791e9a0dd9edbd3c571343abdbafd081382008fa6c222523db0dcdf96fb618825c44f6df6530d24e0c24457f65f8a834c33f2c0d87db5a978c9bcc7ad6e7cbf8252415c38f1988f4f7fd9f8727e15120a99d82fdfb92d22ab2d2f113514d05ad73f3325924f09ce2b2300e66b20a6d11d05219cd407f418a4c5b47191e98cbdfd2d4f6e6083acd90cc85d1f6e007248e25add419ffe8a58a4de5652e1cb7174efed9d326b747748290465b76a6626c1e9a9d7c4555bb1fb54620f9a51e8974bf9ff108cd7c5be6fec84af861bc77d1175ef0b981bfd739d04ed921de16783d8c6f461d964b27acba5a639192a1daaf4a3835f24f42a97faf9012c33f759b51baadc43037e13dc4f95c72675c1dd995409160fa9ca91cf5f095b001b78c5498538be143ece757be4b37211b9bc6614ed4c4aa9f536f8094e0a19200bf151c18a0eb85f4e640d8f27008fc47ddd2e5c084949b16b1f556cdff76f28b89bc70ba367b4504ddb706ede9504c523bbc1926093b25a8ac3979b38c19c84e2c47b1febca08ee52231828cb0992f496960bb98339a944677f8d5b2b1b139df5ce1e2476033ab1d22a2c8b737d6de969528f411605eb193e45ae7e30751eaaf8ae092494990bf3a1f0ec162128f5b4044baa77226b9b0efce11577ffd6d078398985bd2a5eb86c1a12953e9c7ec2a81ec1fb2129911d1fabc38f236655e5df111da164fdb10e16e75b06e7c52d32e4386eb30de2779decb3a2f61619483901b4e3859a4a186fdec44e353b0a79eb5ebd98672c7ea33547389ac795e1d1264758d58dbbffeb9d984fb1094f3a21428bf30dca2482741fc3f98207f236ed58745c59b9d203aa32fa9ef9fb2922512b99d66388cf1f257843f7000dc29c9f61d46c1f2d59b824d31050edd0bc7c0b15f47b425f0e6c2fccd9b6dfd8c1a184c65a91f512cb3bd57b058d69080c9aaae51c1073e3202f1feb5a918b475f26a0ac8f1e7e22da28453900ab8d4f6ca9538605161944ea41a9baa8d7b9f4f4baf6dd7745fdc868745fbaf96f809dfe74c833ffd639fbce9f853bf9fc089cede37ac51589da437001173e4f7b104ac75c6abb9d397734735e9788c26c430cf24c373ccd461105fef7d1981ac4895166029de7cf1d8c60a7103913f7fab1b1d24ff81c0940252c4fe373150eabeb05834b880a4f717670726f734ab28c7a48f4383b4d76834cc2e5cf5ec713420d6e4787fe03ce4639f30ddb29a9dcb520c95a327d513712abad0e07dd49a7127c8be2760eb11b80c2340a95f2dec85748e72ec6852b11f5cd03e90d147f0b3db45f0fc221593437c0412b048586d624d2c5e7f3f9c39da7d77f8697d360393601fa25e43b65c04ad010836ddaafb3d43318883e45d878c9813930b45a881ccbefd2b00e5deb641d51a74b922d941268fcdbc909985629bdf45e61d1ca371e142884006b51543e68091b5975ec206c95299e7b4c6b15b44b42abd90c6a8b3ac358593e1b31eb3118e098285a92e0950be9f1414ce316214893398b05d8952e1a8ff05e5102a03acb4b4645e10082b0d22b1e7be931671b5d12eb6e237d8a221d83621e217b2f75e5364aa55d6d4b8ac64823778fc0ffb8b1dbd44d264af86e1afa6bd3d42ddc1edf89c82bb13d148241ea126db3ac5609f11e8e33e6239b2e896098114019012e2fbff1965d2cd8689d35a685ed1aa5b59df19254c5377015d0100bf8392f939a0130a68eac0027573933c486b5460fd1ef6829c8b840eaf091a4ff8483443a43bb189f955071243eeca4a18444c4a88d69202ce3210d23118b71096663fea4669da1148d71cd24c8a96b77bab107e072ac9ae333aebefccbf9e49637dec2602bdd803cfd72c70352f4b85d1424f8a9312ee1490c78058c5015a9d8760980d2fc6b3461c90031c29126a76dd3c916183a151ebb575d1f500dd11cf26ae6a4dea09291863a05bc3ff6652a85ae555e486596fb254286f578100417ae261577801d351272e4763a42f32fdcccabdbf0271c33fbc9bb9ed64bb07d576d5df5bdfbc7707180eda730e61798d254c05c8d9f846ae2a5c0e524401a65fb8d3e83e0e8fbef810f7d7e7f142546a97a3e659a66a645ae4eae5bf5b749c3c5164a95666190942372cfcb8719423988c3c619be662010bef1aca9df7c51f34ba463a5adf8e05dba4b2168a7e347f451690d60379c5c3e0d27bc60e1f65ada93815be616d82b52cd1e511e4e72d10f127cc47da73b39bd06c0e147fae3df42d7685b62106cc692d63ceb2a1c27f55ce172d20e6faa90e0c9a64383374fe6b9bab7d9352d548043206831437d8be5376f983ed5fc5919f33e7a929490f7035ece58a0d0308f51462f238fd5778a83fa0568fb093ba8c8b07e9d78bd0b585d73103b1dae7c2af2577a41aabc21872deb8bc3569f5cd958da6befb45b3152f3ab0af0864b7c0374bab597f32e20af065289731cff83a99ac7b3ce25b876ed3f2fb27d5e5c41a936200dc9ffdb6087f923d622d9f6eb7052af125758e366a592a2d1aa03df1aec85e012455ec982481997a9d1818e5b5386d1f00f1068e8cdb3680049923cf3d19d8ce49bd3bc88393f8eaf1a36a1f5f8c7938c95d692093f04760ea70018a7fae6524c9c21626c39d083e45bbd101aadc5e6bfb95de85d3db3765657d6d0a2d64831f5472800a80fe952317568d115a0011b366416e0304975d9cda76701462836aa203bed69a7f3ebbbabd28d998971be329f3bab9561c7902dc27b727bec28040d22379daa8f9c8f04e0f3f433c6b6301112d19eba0c3f684addf6b9fb6e0d6bea6095e5709b37c81e30a945d483d19a7feff81ee8a630b32e00bf98948fa0eead3aa8445ffb6a0d1bec5e494e835ddd31f9b968d62720f55091342887f2a2f0c430000e89d98e4e750791f6916eaf477885d33a7319acae0524d8557267474317d16d8d8f8d1e145ce23ebf2c93aa174bcb82e7c973c20cf4a4e9bfad03868cfb064c515dab4b789d39c4b0ce7ed81ba553f945f0eece2d1c2858015b18fafb8021e12205cb953214df63c81e6cff145559a1a80a0702ea8ce38d5b8fb940f2ce39877255631158985682151e4c7fd54d6b1183e85d7736b3240734adf64004947f7a65b7bd57148190a479e2267d08cdb365bad4fa765649ccba29218846f9607944151c35f166d7d31ccca65487f0aa55032a76679e868676d1898663d517c9936fdd86732a2ab8970bc8c43d58515d3ab3654fb848dd1d470a0cc57985a5577394758a5d450c7113e7c375514b8d5cb3f45b3feccd2949758ddd6294e369fd0089016b22200f377831d7e91c020f06e5f72", 0xffffffffffffff00, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f0000001340)=""/4096, 0x1000) 2018/05/17 02:40:05 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xa000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:05 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x40049409, 0x0) [ 479.510379] device lo entered promiscuous mode [ 479.540129] binder_alloc: binder_alloc_mmap_handler: 31538 20001000-20004000 already mapped failed -16 [ 479.572172] binder: BINDER_SET_CONTEXT_MGR already set [ 479.597802] IPVS: ftp: loaded support on port[0] = 21 [ 479.649469] binder: 31538:31542 ioctl 40046207 0 returned -16 2018/05/17 02:40:05 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x900, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfd00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:05 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x2) write(r0, &(0x7f0000001280)="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", 0xffffffffffffff22) ioctl$int_in(r0, 0x800000c0045003, &(0x7f0000000080)=0x1000003) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) madvise(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0xb) 2018/05/17 02:40:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x521000, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000280)) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x101000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) futimesat(r0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={{r4, r5/1000+30000}, {0x77359400}}) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2001080}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0xa01, 0x70bd25, 0x25dfdbfc, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x801) ioctl$BLKTRACETEARDOWN(r0, 0x1269, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x1, 0x0) 2018/05/17 02:40:05 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x800) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x9612}, 0x4) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0088f52507a16fc60f5335c79796f518cde2e821303cd3df5fa4d511479d9d9c3d099fd8e0685ae48ac38e56007be8772f33e5fc6b1ad085d12a9fad1e56cb4d284bc13c70ccbc76ad549fe637060ed958d800000000000000"], &(0x7f0000000240)) 2018/05/17 02:40:05 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 2018/05/17 02:40:05 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:05 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x2, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 479.767628] binder: 31561:31562 unknown command 16456 2018/05/17 02:40:05 executing program 2: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000100)={r1, r3}) r4 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20005) r5 = dup2(r4, r0) ioctl$EVIOCGABS2F(r0, 0x8018456f, &(0x7f0000001140)=""/3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x1c2, @time={0x77359400}}) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80206433, &(0x7f0000000140)=""/4096) 2018/05/17 02:40:05 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(0xffffffffffffffff, 0xfffffffffffffffd) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) [ 479.811520] binder: 31561:31562 ioctl c0306201 20000340 returned -22 [ 479.825788] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x2000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:05 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) fremovexattr(r0, &(0x7f0000000080)=@known='system.sockprotoname\x00') r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000040)) [ 479.865554] binder_alloc: binder_alloc_mmap_handler: 31561 20001000-20004000 already mapped failed -16 [ 479.871529] binder: BINDER_SET_CONTEXT_MGR already set [ 479.936816] binder: 31561:31562 ioctl 40046207 0 returned -16 2018/05/17 02:40:06 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:06 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 2018/05/17 02:40:06 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfd000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:06 executing program 2: ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000000)=""/34) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xde, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) [ 480.037112] binder: 31561:31587 unknown command 16456 [ 480.132848] device lo entered promiscuous mode [ 480.144753] binder: 31561:31587 ioctl c0306201 20000340 returned -22 [ 480.196686] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:21 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xf401, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:21 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x500000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x4000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:21 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x600000000000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=@ipv6_getaddr={0x2c, 0x16, 0x7, 0x0, 0x0, {0xa}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}]}, 0x2c}, 0x1}, 0x0) 2018/05/17 02:40:21 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000), 0x4) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/156, 0x9c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x8000}, 0xfffffe47) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/05/17 02:40:21 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:21 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x8361486c794f5abf, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x5) 2018/05/17 02:40:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x2, 0x0) 2018/05/17 02:40:21 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xff00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 495.087242] binder_alloc: binder_alloc_mmap_handler: 31624 20001000-20004000 already mapped failed -16 [ 495.105820] IPVS: ftp: loaded support on port[0] = 21 [ 495.116771] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001c00070d000000000000000007000000", @ANYBLOB="060000000a000200aaaaaaaaaaaa0000"], 0x2}, 0x1}, 0x0) 2018/05/17 02:40:21 executing program 5: sendto$ipx(0xffffffffffffffff, &(0x7f00000034c0), 0x0, 0x0, &(0x7f0000003540)={0x4, 0x0, 0x0, "cb7e597765a9"}, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 2018/05/17 02:40:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x5452, 0x0) [ 495.144163] binder: 31624:31635 ioctl 40046207 0 returned -16 2018/05/17 02:40:21 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(0xffffffffffffffff, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:21 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) [ 495.249603] device lo entered promiscuous mode [ 495.289828] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:21 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfec0, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:21 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6c00, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfe80000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:21 executing program 5: syz_emit_ethernet(0x140, &(0x7f0000d53fc1)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x8864, 0x0, 0x67, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000ea3000)) 2018/05/17 02:40:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:21 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:21 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000400)=@known='security.evm\x00', &(0x7f0000000000)='security\\louser^:bdev)em1mime_type\'-/proc\x00', 0x2a, 0x0) lsetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'security.', 'security\\louser^:bdev)em1mime_type\'-/proc\x00'}, &(0x7f0000000100)='\x00', 0x1, 0x0) 2018/05/17 02:40:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x402c5828, 0x0) 2018/05/17 02:40:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x700], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:21 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) [ 495.390714] binder_alloc: binder_alloc_mmap_handler: 31684 20001000-20004000 already mapped failed -16 2018/05/17 02:40:21 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff7000/0x9000)=nil, 0x9000, 0x0, 0x8012, r0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mremap(&(0x7f0000ff7000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 2018/05/17 02:40:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 2018/05/17 02:40:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) [ 495.431345] IPVS: ftp: loaded support on port[0] = 21 [ 495.434797] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x4], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) [ 495.485263] binder: 31684:31688 ioctl 40046207 0 returned -16 2018/05/17 02:40:21 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) [ 495.607773] device lo entered promiscuous mode [ 495.645554] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:21 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x1100000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x4b, 0x10000) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000040)=ANY=[@ANYBLOB="56f6bfff8100062106bc0700ff0300000002070000040500fcff7f00"]) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0xffffffff, 0x4) clock_gettime(0x3, &(0x7f0000000100)) 2018/05/17 02:40:21 executing program 5: mprotect(&(0x7f000006a000/0x2000)=nil, 0x2000, 0x0) socketpair(0x17, 0x0, 0xffffffffffffffc1, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000140)={0x303, 0x33}, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f00000000c0)=0xb) sigaltstack(&(0x7f00002fd000/0x2000)=nil, &(0x7f0000000080)) 2018/05/17 02:40:21 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfffffffe], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:21 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 2018/05/17 02:40:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x11000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 495.754525] binder_alloc: binder_alloc_mmap_handler: 31750 20001000-20004000 already mapped failed -16 2018/05/17 02:40:21 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:21 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x202000, 0x1) mq_getsetattr(r1, &(0x7f0000000080)={0xad80, 0xa, 0x1, 0xbd, 0x8000, 0x7, 0xffffffff, 0x9}, &(0x7f0000000100)) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000001c0)=""/196, &(0x7f00000002c0)=0xc4) ioctl$TIOCEXCL(r2, 0x540c) getpeername(r0, &(0x7f0000000140)=@pppoe={0x0, 0x0, {0x0, @random}}, &(0x7f00000000c0)=0x12d) r3 = getpgrp(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) getresuid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) r6 = getpgrp(0xffffffffffffffff) r7 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000002280)={{{@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000002380)=0xe8) sendmsg$netlink(r1, &(0x7f0000002880)={&(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdbfb, 0x100}, 0xc, &(0x7f0000002840)=[{&(0x7f00000003c0)={0x328, 0x35, 0xa00, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x214, 0x19, [@generic="93df647f5b3124ab424c925a350bd9586d506d88884d19a31a6615da40bdb62078ee005bd217cc1a5308280d3d91158eba676de041c4fd4898e691ed83a7", @typed={0x8, 0x24, @fd=r1}, @generic="1afaa1c358f2d275d5adaaba07a4aadba664f30c4327bfb29ff4d233c3e34305c7a380967e405348cdb2ed3ec8d71d65531382e67f9ac6bc08700437e5bedac0920f88b21820", @typed={0x10, 0x5c, @str='/dev/midi#\x00'}, @generic="969d71532ca75237c10a793ca2319896223b7007e880d02dc7f8d204ea62be18d74e60114faf8dbb86a273f0bc9a5f4e73795a1fab7bd9402d1e978cd504a55b6f70c76f36662a535e86557a9164d64956c419d901093c770e6399375d655b56430f0f97830bc06bc2f43272d6bf700cdebbbe05766a5575c7c37443d2a693108e3ab40ee9e06ea4f698b21d683b12dbae40f3f6da042e5523611c10c3600b9f30571fe9326c79c41050e393d28257df52fd0262acf18ac954721b6f47b5698f7fbdc5fe724bbf1de024b0642d138c5bcc4d262cc57c44c363fe7b24c4202fde9b18b419863371229e2acaf778", @typed={0x8, 0x3, @pid=r3}, @generic="3b7df3a144dd06aae2a4da983e6efbe277e189ba15ca4d01aa995d5071c34d98931221a25051ad065cd52ffaa83be7a95c810951d93cd57f23302f6154a603559d207ad89e0db561db6597f5e02eb202ee7356e48452953564c5f4294cd598ceb3ca3662d8de0810aa96a6d56bfee203eacad58d9ca5f114", @typed={0x4, 0x62}]}, @typed={0x8, 0x6a, @u32=0x8ed}, @nested={0xd4, 0x46, [@generic="0bdaea7b6978c7e8822bd05e71d73f71f66ed48436937ba39b6c1525b38c8e1ee5dd66e20823ae7496bfaeca7cc042e8ed0e3286fb98d8c0fb8bc63e6ed1437c443b2688989310deb607a43102b2456d567f22f9c7f86e6a37115be4fcfd433f40a682a0b3d88c6f1bae35e8302a38571372004de828aea8e888e2504797e7dc662ead826bb3bc7df80d53", @generic="f4ceb117966546005f6a286f135a6f58157a4301a3b2cc8641", @generic="961132b9e27a74da22c9feeccf80ed536c3ab7532d92", @typed={0x14, 0x67, @ipv6=@mcast2={0xff, 0x2, [], 0x1}}]}, @typed={0x8, 0x7b, @uid=r4}, @typed={0x8, 0x87, @fd=r1}, @nested={0x4, 0x4c}, @typed={0x14, 0x48, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}]}, 0x328}, {&(0x7f0000000700)={0x1c, 0x27, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@typed={0xc, 0x50, @u64=0x40}]}, 0x1c}, {&(0x7f0000000800)={0x40c, 0x12, 0x320, 0x70bd2a, 0x25dfdbfc, "", [@generic="a08e707319f30251497f846f3b162bb7edb671fac7ca043da1e29d8c3fb28e728b08bf4dcbe3de3bdc4f4041a252742a7c2cfe8a8bf5eb51c0aaf61d11e54b0c0508d3594cb5f5dda263340293f42ac62f16bbf81cd274f82cb50c83ca9dc9d7689e8a341fe8695ee179965d1ef294076bdb4025654c1f8731d98205ec159fbda031ac869735101550929c8d34f9c034fbc1e13cfe39d1c44dcddab3556f937025485008b13fc7a16458b90b766bb3bcc95f98058fbadedff87deefd3b14d680322cc367ae05deb1fd0262e5f9c51273f73e7f5a7a033536d6ba7a5a7398a72b1ab8653291631fdb903319318578bcb5d13efb60", @nested={0xc, 0x2, [@typed={0x8, 0xd, @fd=r0}]}, @typed={0x10, 0x2b, @str="2d6b657972696e67b600"}, @nested={0x11c, 0x35, [@generic="c3e822ee2fa32c63f0976ac9fa351ea7845a97d9f0c2bd395672ac94a897054f98e1e4e4c6045e208b23c6201ea870291b8cbed60dcdc29c4ed4263d990b8ca5c464c246d3d59b9003e566a120ba3cdfbfa56c93daf6ee5a4e7d49bf89edf4063a", @generic="49193468e87da8fc2cf8ca3bb66573f078baef90c787eab91b7ef149bab694d09070bf1c0baf20b7de9bbbaf29383afd00f6ae9ca0ec98c172f2c8200512c350b21917d4e9bc32de8f53e4c4a306bd8be63c0e91e100924d3b7756dbc21b9f297664482504cdcf59b4ff2963", @generic="11014e910e9bdb47f00f32390a6dc62e107c7fb28f1945774b56b38c8472f8190ff8d553be929b85f612796e3a4e6e5f29a957f12500e003f6cc9566fd41078a785d06", @typed={0x8, 0x17, @ipv4=@loopback=0x7f000001}]}, @nested={0x1d0, 0x9, [@generic="fc638c817254391d5222dc6c46a48ee38654d27a744808948ca18b7609db264b3e3437f0ca0520a07e6f3fc1b6e2625c8f54ea2299926581e446a03df4b6a6feda524603d03fa266e95ec51f0c312f8bbe657c948aac71d6c104c0b39fc59e498f12911e325ac590a88569909a4d3bb9ae4430a3153e255cfbbb271e724478dedebfc3b3f4fc38b04de4fe0dc47b1d88de85d7", @typed={0xc, 0x34, @u64=0x4}, @typed={0x4, 0x25}, @typed={0x10, 0x37, @str='/dev/midi#\x00'}, @generic="ed7ad3c4df0d6e4ee1eef85bd3e32eb76eca4279ad3cad5197e6f0588f534f57f4c9713f706cec06e17a89188fdce95545dc70360ffd1adfbaf7d9c873bdf1f68de19ba49967408b12d287", @typed={0x8, 0x2c, @uid=r5}, @generic="26a38a0c6a732b41d103e89a06f85150ade5", @typed={0xc, 0x22, @u64=0x3}, @typed={0x8, 0x87, @pid=r6}, @generic="d756f234e68bbbf696bb362bcad59ec3f10d25e53eb4a158a74a2353a2576f0e25952bfe4dab52440df4d5d8f108f656948dec0ab1548a1a7954b1c47d0b2d80aa7905e7a75f387e19dc882ffc0e30a199ca8dfb39bc45583f43f8c87a395db303cf4d5f69de1937877c0303d258399b21380d5d0fc2cf709fcd52f2ba9858a37d38853b46b6a72d7361a53eab74ebb81774a0a9d2cd910150585472d795"]}]}, 0x40c}, {&(0x7f0000000c40)={0x1634, 0x29, 0x526, 0x70bd26, 0x25dfdbfc, "", [@nested={0x98, 0x43, [@generic="bcf1f21e1cf02d713d7c0d727556b8e77a621da8ef693dbb3f3d37086522faa89f0bd49bcc73d41f49e4c917b2ce822520a1bc166db01c940b72829ec26d0fecf99e2b8c56ee462c1fb859233ca97f04f2f0e5cd7a6b8acc9727ac79c4989caaecfcafb10c35d974f7917945e49fdd12a874c5d34fa2ec13b1196f63764a56e38d11c64ab6f99d4e5d12d0", @typed={0x8, 0x6d, @uid=r7}]}, @nested={0x370, 0x14, [@generic="82ed250827a94a199b365e97e9e1208bc9a7ab4a7c7eb4cf706730dff5545ea557f77fbe9586ed3614993be425389c16816424f0566f86285ad4dffbd0e547d7a5e73e9b848db8e264691d7e9260ee94543c4ae5adcd794789a0b2e1f451b907a599b1b84421549c4a9cb6e8ba745fbc61969e691e8f13f462cee50c37d256e7192fdaaaa8461fb1927eb1d791f550b00c0383d23a289fc1f07b424017162f9db2114984d497845526ce7871c5d243d16313a03ec798149fe34ed0238fff5a58f9bc3c", @typed={0x10, 0x72, @str='/dev/midi#\x00'}, @generic="17bffc06b8d06a040e1096398a9fdc0b8ded1e92035a2689a7a5816567b97f9d855944f4ce068baa2e0d6265272444284dcdc0ef4ee20f7adae4fa35b4e3c1d099774d359e1ff18d3e54ed7d6f0d967afb3565f5d26593ee735e609fcd648dff56b83daf62756610a86b85be032a11bb21694895b37ef1d50d3cafd3b495370fc658d20c09bce536c15619b398fbf263fe19554c9bcb", @generic="0b84728a3f42ec5059e6b882f9dbf511a2a0d2e900653464306a6fe868663a6384f0682adefdc6e6a1f35769a15492fa88d87f1865e73139bc", @generic="9dcacb92470da4e8046f5ee71df682e9c6382a5a3563b7f160c29184debad50b89f59c364a85ada749c237777ccbec3a93c7c6bde68d524290a08eb660a4c61d6a9fed2a2eb25250f74ff8a0995fa131c6c83575a043adf2bda8c6c9a5119d170aaf0baf20fd4733a18fcef5e5f56d68137aac25c6e0aae7c0199b459008c67b83bfcf9fe7c8b250beb0838ead4fd55848b0ead1016f27ea845d2a4db4cb0d0e43ced5af1c86841cedc33d23696d07518b0166c11d5b679737825c17ee021d25a4f243ceab383a3e62a39eae7b970a1c0c326b232e5fe318e137c2aae6dfd3ef979316da36da3de86b648924baa0f098423c4636346a38", @generic="3c626b2eab39cd0a71108de9c7146ca13117e789add5813d7cad8699c6ab8e9d21172c3e4b1f3463ef1215a9c27452f660faa26dcec96d57dba86d1ddc94c1799de21fc3eb9dcd12789d4fdcde034e932361f08843880ee5e22e4145e1ef0309997c7531e4f6589540a73b73877e56d14805903e253dfa59802e3e1f58a02d5dcc5baa1723123428c12ea36ca5d7a157305a4296c097e587cde0362153522cca3e70ad3f522f7fd1588f5266d7e06a21e38491a899149aeefce21182aea86115110be458bb", @typed={0xc, 0x31, @str='wlan1\x00'}]}, @nested={0x1210, 0x7e, [@typed={0x14, 0xc, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @typed={0x8, 0x48, @ipv4=@loopback=0x7f000001}, @generic="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", @generic="b404aee9d6cb19de68121fffae72e9881f1d58cb5c357717e58265e82e98d051d15e8739008e101f7fe037b96535da0948b0694789160d84b9d67d7170e5172f8b36af7591cda025fb564aea564a3dd1c55f0a7beef529c0a11f20c75c34bb60dbda071f51ecfd24296d57529bb78be10a2ccf9e101dfd1be040b8da84930cddb036d04cae", @generic="8cc7a0f3a5de81697741fe795a434034d3ae697db659cd00e9bf4616e01633f4dcd9897c154d5b6c25625f007473c1c33951c39a117ea414467af97bb221c3882c4ba5a98393829259963ec7135f936b892ecf66604139c055293d01dac94fae3219b7dcf046b53d4562dec0a1b57eb5b655980c04d239e681c1011de3e7695bee9fe300656cb10660ff2a3539a5cff3f3fce2f3385924480eaffd2e2125051ae60f7a4e35cd6e6b49c87afdb2cbcd412095ec638d56d348b534d3b17d0c2d5a1a83bf7823e9931741cd51b0c8577df17a2dc6ac2896229d1016dc2257fc86", @generic="475477c92978c94203ac951c23a2cc996ea4bd2b6214d4e92a0a2795fb8a91dcc2c42093e6b3096bac3a7c6d9efaddde8d529b5f93e49f05b316d4f20569790da7af7cf63bf5359fc781e4b6205038d96d23a05ad25826ec6494455cb88e4636654210e0c37cf9224bf32a29223e3e63c251dabbe1905acbb29eba77642076640620e75ea2559536", @generic="a096ff5f"]}, @nested={0xc, 0x80, [@typed={0x8, 0x26, @u32=0x3}]}]}, 0x1634}, {&(0x7f00000023c0)={0x348, 0x18, 0x709, 0x70bd2d, 0x25dfdbfd, "", [@nested={0xc, 0x12, [@typed={0x8, 0x61, @uid=r8}]}, @nested={0x1f0, 0x25, [@generic="e603992d741f121e41ba69e23857ce136c237c7075ec471afad7517b033ba63ba3820352d4d99735abc53d31b320341ab5600f4e33", @generic="72e9b9e03d081d93995128c9e49dd9305943a980a10cfeb3a6889ad503e3385617cf3dbf186ee2db4abd8f2b09da2c3bdc84f68b74b2427898ceff10ead61dbd73b3c96ef92c8b09ae06df5667305b2459d259450de2fbac37cedfe1bc79b45f8b14db4d11df379572d8e8824ba8b328ccdf6e089deae43859d5b8f03fadfaa093ce6ab43b9347c5c0fefd61f8fd1cabf823d6eea4fb96d7a4614cb63ce4a4c4f9c8282a7a0ad75da590021f7d7f32305e77cec8a49de6af2327fb2dd13c17f11bd650", @generic="3744604d6c2ff8675944cf474524f1cc4bd529e2e58d66cd445a2cf1b897035e5ce9fa7c9ecba5425ab363c2514e2ece08e75c386e67e02aade0ebdf98efafbf4e8f35382088721c3d5004403b6aa995850e0dc717d4f17ac07741701fccd79d939fca2ecfee4ccd0cb11f5ad2ea55349285a7e32b33e9343d4010c6af00b20aaecd0a7591c3317ebdd1c7df5f03eb67ca85e78d9431f2c6c440c35e866f1a00e7642645758e5eb2b4a9952bdb5d32c8ff87cd4c460b23a57a0b4fb943034dfaa2737f8f3bfb011f707699b61a5ddf65b6860423c14f3bb3dfad06c3d675a91c5fb64d08686c9e9a87f95a30f8f02e1aa1"]}, @generic="c55d773925af3f65a045eb19bd6aa47a542b835d896c625460c2d53184ea9c18c2d6c91106e5dcf6d7e1285ce87f527abd88f76a71e2455591f920b3d1d2343d09d648985b70a46bc539b6293bda4b7d04d845ebc5c22f1ff0a2bd9832fc1863cc1b2fb18a856bf3f762e78ccb6b12a7f48bf404990232aa535823a6b100c2479e44db94e7078871d6d625fc6f3507ab35000d816ae8054ef86221e725632d19c3c46e6a412fba81c09d0b08", @typed={0xc, 0x1c, @u64=0x8}, @generic="18b38eedc01a79719609cc79d2ebf3cb15a349455d774fe550e157904645b8b690723a427ea026d11edde429632413896b6e658ce37a288097d838805f08e457a4c896842dea24e652fa130e357e09cf66af14afa42e11062b61f28fae6e3e2fd05116405c6a93d87dfe1c3bcc099b561df645e99a79bbd3e6bdff", @typed={0x8, 0x2c, @fd=r2}]}, 0x348}, {&(0x7f0000002740)={0xe8, 0x3e, 0x40c, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xd8, 0x3a, [@typed={0x14, 0x94, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @typed={0x14, 0x68, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @generic="7c6112438736474bc9dabf05a52ee4cc6d7612162aba6155c79e3da72270765a9c4ea136e0acba4570f5ec6a329016082bede448f28f43398da339b6c50fb77ebdbcaf67467e4728264cbd41285d9a4b2d719161842390f11e3f46f7c2645d7cafd442d1a58eefa5c38967107a54f056f220156cef44d89b9606ce22e43f09eedcfabb48d79bfc903ee992b0d1cfee7d60f6af52b68137b1acd3b1bb39d144d1a67c576bb349f398d2552ae9"]}]}, 0xe8}], 0x6, 0x0, 0x0, 0x800}, 0x800) 2018/05/17 02:40:21 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000000c0)={{&(0x7f0000000040)=""/24, 0x18}, &(0x7f0000000080), 0x5f}, 0x20) write$sndseq(r0, &(0x7f0000000200)=[{0x81, 0x3, 0x0, 0x0, @tick, {}, {}, @raw8={"959546592b83c98a10d789af"}}], 0x1c) r1 = fcntl$getown(r0, 0x9) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000100)={'ip6tnl0\x00'}) ptrace$setopts(0x4200, r1, 0x100000000, 0x0) [ 495.796397] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) [ 495.827885] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xff00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:21 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x5450, 0x0) 2018/05/17 02:40:21 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) [ 495.849144] binder: 31750:31755 ioctl 40046207 0 returned -16 [ 496.000827] device lo entered promiscuous mode 2018/05/17 02:40:23 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xc000002000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:23 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x4000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:23 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x1, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)}]) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x3b, @multicast1=0xe0000001, 0x4e21, 0x2, 'dh\x00', 0x12, 0x3ff, 0x3b}, 0x2c) 2018/05/17 02:40:23 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:23 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec0], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:23 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 2018/05/17 02:40:23 executing program 2: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x1, 0x22c, [0x0, 0x20001d80, 0x20001db0, 0x20001f7c], 0x0, &(0x7f00000009c0), &(0x7f0000001d80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'teql0\x00', 'irlan0\x00', 'veth1_to_team\x00', 'veth0_to_bond\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x104, 0x12c, 0x19c, [@limit={'limit\x00', 0x18, {{0x0, 0x5}}}, @arp={'arp\x00', 0x34, {{0x0, 0x0, 0x0, @loopback=0x7f000001, 0x0, @broadcast=0xffffffff, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, [@common=@redirect={'redirect\x00', 0x4}]}, @common=@nflog={'nflog\x00', 0x4c, {{0x0, 0x0, 0x0, 0x0, 0x0, "6f3aa448039ad7ad99fb815105c4a05c39032fd24ca1298ee73627161e6a7e0fe155386e62999970e7a472eaca17b1f8fcca32501d66adf2dbcf0ed1d7528fd4"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x27c) connect$vsock_dgram(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 497.933203] binder_alloc: binder_alloc_mmap_handler: 31806 20001000-20004000 already mapped failed -16 [ 497.956293] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:24 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfc], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:24 executing program 5: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f00003fd000)) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file1\x00', r0}, 0x10) [ 497.980792] binder: BINDER_SET_CONTEXT_MGR already set [ 497.999281] binder: 31806:31807 ioctl 40046207 0 returned -16 2018/05/17 02:40:24 executing program 2: sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000000b40)={0x10}, 0xc, &(0x7f0000002d80)={&(0x7f0000000340)=ANY=[@ANYBLOB="1001df006e0b802cc4ca1ba41b84e462098753c4ea85385bdce2a6ebb68f14752ee1093049724e5802ef7d9174b841fa40556d8ebe686ad0e76b3226396858d3f6fdfc28b02079d94c8b9175e4c7fb5d5d770f7ac65b", @ANYRES16=0x0, @ANYBLOB="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"], 0x110}, 0x1}, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000100)=0x80, 0x4) sendto$unix(r0, &(0x7f0000000cc0), 0xe0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2018/05/17 02:40:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x402c582a, 0x0) 2018/05/17 02:40:24 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x1000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x18], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 498.185194] binder_alloc: binder_alloc_mmap_handler: 31845 20001000-20004000 already mapped failed -16 [ 498.219339] binder: BINDER_SET_CONTEXT_MGR already set [ 498.221092] device lo entered promiscuous mode [ 498.242769] binder: 31845:31846 ioctl 40046207 0 returned -16 [ 498.291815] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:24 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x4000000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:24 executing program 2: r0 = memfd_create(&(0x7f0000000000)='}\x00', 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x51, r0, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000040)={{0x10000, 0xd002, 0x0, 0x3ff, 0x36d7487a, 0x0, 0x800, 0xffffffffffffff81, 0x3, 0x4, 0xf8, 0x5}, {0x110004, 0x0, 0xa, 0xd6, 0x4, 0x200, 0xfffffffffffffff9, 0x6, 0x2, 0x4, 0x3, 0x4}, {0x6000, 0x5000, 0xd, 0xfff, 0x9, 0x7f, 0x10001, 0xb9, 0x1593e1c2, 0x2, 0x20, 0xff}, {0x4, 0x10000, 0xe, 0x1, 0x5, 0x1, 0xc92c, 0x9, 0xfff, 0xffffffffffff3d0c, 0x6, 0x40}, {0xf000, 0x105004, 0x8, 0x8, 0x7, 0x1, 0x7ff, 0x9, 0x8001, 0x80000000, 0x7fffffff, 0xffffffff00000000}, {0x0, 0x2000, 0xb, 0x3ff, 0x6, 0x6, 0x8, 0x9e, 0x2, 0x2938, 0xfff, 0x401}, {0xf004, 0x1000, 0xf, 0x6, 0xffff, 0x2, 0x0, 0x100, 0x3, 0x3, 0x6, 0x200}, {0x10000, 0x2, 0x3, 0x71e, 0x9, 0x2, 0x101, 0x3ff, 0x1, 0x9, 0x8, 0x2}, {0x5000, 0x3002}, {0x4, 0xf004}, 0x40000008, 0x0, 0x4, 0x4492, 0x0, 0x8900, 0x0, [0xffff, 0x0, 0xf08, 0x3]}) fcntl$addseals(r0, 0x409, 0xf) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x81012, r0, 0x0) 2018/05/17 02:40:24 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080), 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x80fe], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:24 executing program 5: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_ADDRESS={0xc, 0x4}]}, 0x40}, 0x1}, 0x0) r1 = memfd_create(&(0x7f0000000040)='^eth0\x00', 0x2) getpeername$llc(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x10) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000100)={0x2, 0x641, 0x81, 0xb23, 0x33e, 0x3e1}) 2018/05/17 02:40:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 2018/05/17 02:40:24 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 498.413513] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 498.420950] bond0: Invalid MTU 0 requested, hw min 68 [ 498.429117] binder_alloc: binder_alloc_mmap_handler: 31864 20001000-20004000 already mapped failed -16 2018/05/17 02:40:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x8000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:24 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080), 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)) [ 498.471633] binder: BINDER_SET_CONTEXT_MGR already set [ 498.479257] IPVS: ftp: loaded support on port[0] = 21 [ 498.497585] binder: 31864:31870 ioctl 40046207 0 returned -16 2018/05/17 02:40:24 executing program 2: unshare(0x20020200) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$eventfd(r0, &(0x7f00000000c0), 0x8) [ 498.519624] netlink: 'syz-executor5': attribute type 4 has an invalid length. [ 498.527131] bond0: Invalid MTU 0 requested, hw min 68 2018/05/17 02:40:24 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x3, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfc000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:24 executing program 5: r0 = mq_open(&(0x7f0000000040)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) r1 = socket(0x11, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x20100f}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) r3 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000080)) 2018/05/17 02:40:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)) [ 498.671083] binder: 31898:31899 unknown command 64 [ 498.730203] binder: 31898:31899 ioctl c0306201 20000340 returned -22 [ 498.758469] device lo entered promiscuous mode [ 498.784706] binder: BINDER_SET_CONTEXT_MGR already set [ 498.786076] binder_alloc: binder_alloc_mmap_handler: 31898 20001000-20004000 already mapped failed -16 [ 498.811144] binder: 31898:31899 ioctl 40046207 0 returned -16 [ 498.827635] IPVS: ftp: loaded support on port[0] = 21 [ 498.868356] binder: 31898:31918 unknown command 64 [ 498.881093] binder: 31898:31918 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:24 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xc0000020, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:24 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') writev(r2, &(0x7f0000002600)=[{&(0x7f0000000100)='+', 0x1}], 0x1) 2018/05/17 02:40:24 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080), 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:24 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x5460, 0x0) 2018/05/17 02:40:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)) 2018/05/17 02:40:24 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x1f00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:24 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) accept4$netrom(r0, &(0x7f0000000040)=@full, &(0x7f00000000c0)=0x48, 0x80800) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="6e618d0000000000000000000000000000b1d2460ea5fcb94d4bec3200000000000000001b00000005000000240500000000000000000000ffffffff44010000000000009004000090040000ffffffff9004000090"], 0x1) 2018/05/17 02:40:24 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x4c, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:25 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xc0fe], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:25 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:25 executing program 5: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r2, 0x20, 0x70bd28, 0x25dfdbfe, {0x1}, [@IPVS_CMD_ATTR_DAEMON={0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffff49b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x10000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc00000000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2ca0}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x24004000) pipe(&(0x7f0000000300)={0xffffffffffffffff}) close(r0) tee(r3, r1, 0x2008, 0x0) [ 499.053551] binder_alloc: binder_alloc_mmap_handler: 31935 20001000-20004000 already mapped failed -16 [ 499.086966] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:25 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x8) r1 = accept4(r0, &(0x7f0000000080)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000000)=0x80, 0x80000) sendmsg$netrom(r1, &(0x7f0000000840)={&(0x7f0000000100)=@full={{0x3, {"616eab8ff3b7e8"}, 0xba2}, [{"698b512b07ad7e"}, {"4ab6863fab9c63"}, {"8cad14ca014f1b"}, {"6260fd99ff47cc"}, {"79f70ff6d96e9f"}, {"c6716426d94fd8"}, {"3e764c04caff82"}, {"951e5917e55d03"}]}, 0x48, &(0x7f0000000700)=[{&(0x7f0000000180)="308257a4db716bf1b45edc982e85707b13ef0709f4689b3fd4811687aeaf14b665b5642a8ca7f5c2cb7a89d9f909174f624c066b07c7eb30682b6013828fdeb1492e8d8db8959e63de661d7b190a4c56c19347ce91ddb630f77b259111e9ca6e7748e0646e39929ac8130ba995c37dc6ef4d98e20b7e82030a7e27c271f56f35b0a55ed35350be0d435ac84172e9ac0ad1c40da326522afabc0586b3c635cc9a7b62fb3bccdd3936b296c06601fda9281ec0335d497f21a74baba01924be9c62d8d79597b549e6b02a9d055eea", 0xcd}, {&(0x7f0000000280)="14cb945e60ccbc562e1cafc182249e3d3836b52576bfca88c6017bc353fe6b542f66c13ebf59487ed9a707a9ef991c8e53f6cfcf7dcdaeaafe8c36fe9b475d0d74c4d30c3da7840fbaf46c08f2a24a3e3645ddfdb1b0bc9f2f7492b20bca02de8bdbc22b31ffac00b6cff72873b181b427d24d4450a73109786267d1c9ab28b6d346cd9ff83d498ab69b0c5bd732619444578c9f609e26897becec128ced4c178e2b3ecca451eb3ea9d3ad", 0xab}, {&(0x7f0000000340)="12be4248b16965b60eff970070b3387114031f5835ec927573b2dc09b59dcfe26f90d726c4370ceaa121a4555b1c65d2e895e28720a8a89f285e9d86ce5d4f4c03f195aa68530af936d98f66f2aeadfba7fcf2", 0x53}, {&(0x7f00000003c0)="3adf2fc699a51f99daf22301f524b40a58b0350badf44053e5527b4e3df99a241d534fc126e58ac4f9cebd8560d9ffbe597827414786c8231f1a27efcea4f8de48fbd62a4b2639f3d6ed85daf3f971f466d199eabb4f", 0x56}, {&(0x7f0000000440)="0f2e2ba405ab3bcf45", 0x9}, {&(0x7f0000000480)="1f30d9192684888c79694b3932a1348f58d9fbd95b906d67eafe867e27547b688f3d4f638f48c5d5eceef6e6559e717b69a83b3f1577a4895da3dca7335f9594c93a655dfd0374c13b01027d438f68594b46ae0a235c87b55d2a0ea495b8d46c7df92f002bd1c7ba01f3b46986c2794a0b1216bb70d218e9ecbce799b90c059ec857529bd081ad76bbb3045acf010d16d8baf96699d907e40f80b884f700351677b9dd99e41a701ff11631a214b40e338085a7e97a611b650cadfff57817fbd68836a7b046da9918b1", 0xc9}, {&(0x7f0000000580)="74fd2059202cfb5d9720845fcfba2f88f8c0f1b7c1a663eed174c4393ee68c317dcf74dfb12011fc51d7f935d8878607c50553c79d5540e96cc0cb9253c9e23ee1f1f5bbe394a8f7db94e9d787f7ce98b2fa70618dd8d6b2a3e0047f068378517c4ef6d14916393cdc9a8ee30d32fa63baba62db180078632fab1d6947d39cd92284311046506869daf0b00e3ec3198cde3f6ec168054cfd7d014cd038371152e0f2d9087b9e87719268fd9a72e3b7c6fa3626bbb69495c8b1c7cbaa4b4a80003f26596da4c452d33e87e30e9bc3d3412f989ca55e021763", 0xd8}, {&(0x7f0000000680)="562c1aa351c96aed5db643160fb94d4d1d8c84", 0x13}, {&(0x7f00000006c0)="6f678ea62982e65d8e5c8649438af5e4", 0x10}], 0x9, &(0x7f0000000780)=[{0xb8, 0x103, 0x26, "81ad93a1f81ca5bf817fca822bf570d163c150d9f14ccbebed9b36c9e17f21bfe03bd8fb87b7afa3a54ac530952bc91c36cdab3a121db588d24a49813d521247e090c27d63ff45447d0a7932bbd462a65de7d1ce570c7298a2d45e9fd6c3fb2c6fd5287030c44acdfb953d732fb28713be002c6b57208bfbc6d34f8a6c3fda480e4d7ed8a967a8fb30762a818f5e793c88a70f53bf8074fe1a410125590d6fb3ba37bd8f79346e4198b8eeea"}], 0xb8, 0x4c0d4}, 0x800) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:25 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x0, r0}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000015c0)={0x0, r0}) [ 499.109521] IPVS: ftp: loaded support on port[0] = 21 [ 499.132476] binder: 31935:31938 ioctl 40046207 0 returned -16 2018/05/17 02:40:25 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 2018/05/17 02:40:25 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa}, 0x1c) 2018/05/17 02:40:25 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x0, r0}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000015c0)={0x0, r0}) [ 499.382870] device lo entered promiscuous mode [ 499.409883] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:26 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x7, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80000000000006, {0x2, 0x0, @loopback=0x7f000001}, 'veth1_to_bridge\x00'}) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x76, 0x8840) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0)=0x2, 0x4) 2018/05/17 02:40:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x8], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:26 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xa00000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:26 executing program 2: prctl$intptr(0x21, 0x1) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8480, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4008641a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[0xffff, 0x1737, 0x8, 0x1000, 0x0, 0x5, 0xefe8]}) 2018/05/17 02:40:26 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 2018/05/17 02:40:26 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r0 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x0, r0}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000015c0)={0x0, r0}) 2018/05/17 02:40:26 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x3000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:26 executing program 0 (fault-call:5 fault-nth:0): r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) [ 500.042193] binder_alloc: binder_alloc_mmap_handler: 31986 20001000-20004000 already mapped failed -16 [ 500.047136] IPVS: ftp: loaded support on port[0] = 21 [ 500.056413] FAULT_INJECTION: forcing a failure. [ 500.056413] name failslab, interval 1, probability 0, space 0, times 0 [ 500.068543] CPU: 0 PID: 31981 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #79 [ 500.075823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 500.079651] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x1f00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 500.085173] Call Trace: [ 500.085202] dump_stack+0x1b9/0x294 [ 500.085225] ? dump_stack_print_info.cold.2+0x52/0x52 [ 500.085246] ? debug_check_no_locks_freed+0x310/0x310 [ 500.085265] should_fail.cold.4+0xa/0x1a [ 500.085285] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 500.114139] binder: 31986:31991 ioctl 40046207 0 returned -16 [ 500.116275] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 500.116298] ? graph_lock+0x170/0x170 [ 500.116315] ? zap_class+0x720/0x720 [ 500.116332] ? lock_acquire+0x1dc/0x520 [ 500.138869] ? print_usage_bug+0xc0/0xc0 [ 500.142949] ? lock_downgrade+0x8e0/0x8e0 [ 500.147106] ? print_usage_bug+0xc0/0xc0 [ 500.151178] ? lock_release+0xa10/0xa10 [ 500.155168] __should_failslab+0x124/0x180 [ 500.159420] should_failslab+0x9/0x14 [ 500.163234] kmem_cache_alloc+0x47/0x760 [ 500.167308] ? lock_release+0xa10/0xa10 [ 500.171297] inet_bind_bucket_create+0x7a/0x360 [ 500.175985] ? __inet_lookup_listener+0xbc0/0xbc0 [ 500.180842] ? kasan_check_write+0x14/0x20 [ 500.185089] ? do_raw_spin_lock+0xc1/0x200 2018/05/17 02:40:26 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x0, r1}) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000015c0)={0x0, r1}) [ 500.189340] __inet_hash_connect+0x762/0xfa0 [ 500.193762] ? inet6_lookup+0xe0/0xe0 [ 500.197591] ? inet_hash+0xb0/0xb0 [ 500.201145] ? __lock_is_held+0xb5/0x140 [ 500.205219] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 500.210764] ? __siphash_aligned+0x1cb/0x340 [ 500.215190] ? secure_ipv6_port_ephemeral+0x1df/0x2f0 [ 500.220388] ? secure_tcpv6_seq+0x350/0x350 [ 500.224725] ? inet_gso_segment+0x12b0/0x12b0 [ 500.229238] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 500.234446] ? __sanitizer_cov_trace_switch+0x53/0x90 2018/05/17 02:40:26 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x200) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x100) unshare(0x200) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=[&(0x7f0000000080)='/dev/vcsa#\x00', &(0x7f0000000180)='/dev/vcsa#\x00'], &(0x7f0000000340)) [ 500.239652] inet6_hash_connect+0x76/0xe0 [ 500.243815] dccp_v6_connect+0xee1/0x1e20 [ 500.247984] ? dccp_v6_init_sock+0xa0/0xa0 [ 500.252229] ? perf_trace_lock+0xd6/0x900 [ 500.256389] ? zap_class+0x720/0x720 [ 500.260119] ? graph_lock+0x170/0x170 [ 500.263944] ? print_usage_bug+0xc0/0xc0 [ 500.268011] ? find_held_lock+0x36/0x1c0 [ 500.272086] __inet_stream_connect+0x943/0x1120 [ 500.276764] ? dccp_v6_init_sock+0xa0/0xa0 [ 500.281006] ? __inet_stream_connect+0x943/0x1120 [ 500.285863] ? lock_acquire+0x1dc/0x520 [ 500.289853] ? inet_dgram_connect+0x2e0/0x2e0 [ 500.294356] ? mark_held_locks+0xc9/0x160 [ 500.298513] ? __local_bh_enable_ip+0x161/0x230 [ 500.303186] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 500.308207] ? lock_sock_nested+0x9f/0x120 [ 500.312447] ? trace_hardirqs_on+0xd/0x10 [ 500.316603] ? __local_bh_enable_ip+0x161/0x230 [ 500.321279] ? lock_sock_nested+0xe7/0x120 [ 500.325514] inet_stream_connect+0x58/0xa0 [ 500.329744] __sys_connect+0x37d/0x4c0 [ 500.333623] ? __ia32_sys_accept+0xb0/0xb0 [ 500.337859] ? __sb_end_write+0xac/0xe0 [ 500.341825] ? ksys_write+0x1a6/0x250 [ 500.345615] ? __do_page_fault+0x441/0xe40 [ 500.349835] ? __ia32_sys_read+0xb0/0xb0 [ 500.353896] ? mm_fault_error+0x380/0x380 [ 500.358039] __ia32_sys_connect+0x72/0xb0 [ 500.362178] do_fast_syscall_32+0x345/0xf9b [ 500.366487] ? do_int80_syscall_32+0x880/0x880 [ 500.371055] ? _raw_spin_unlock_irq+0x27/0x70 [ 500.375539] ? finish_task_switch+0x1ca/0x840 [ 500.380031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 500.385554] ? syscall_return_slowpath+0x30f/0x5c0 [ 500.390478] ? sysret32_from_system_call+0x5/0x46 [ 500.395312] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 500.400144] entry_SYSENTER_compat+0x70/0x7f [ 500.404535] RIP: 0023:0xf7f58cb9 [ 500.407883] RSP: 002b:00000000f5f540ac EFLAGS: 00000282 ORIG_RAX: 000000000000016a [ 500.415579] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020000000 [ 500.422836] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 500.430092] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.437344] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 500.444599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.466850] device lo entered promiscuous mode 2018/05/17 02:40:26 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6800, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:26 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfe800000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:26 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x0, r1}) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000015c0)={0x0, r1}) [ 500.534720] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:26 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x541b, 0x0) 2018/05/17 02:40:26 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) [ 500.639727] binder_alloc: binder_alloc_mmap_handler: 32021 20001000-20004000 already mapped failed -16 [ 500.718653] binder: BINDER_SET_CONTEXT_MGR already set [ 500.742770] binder: 32021:32023 ioctl 40046207 0 returned -16 2018/05/17 02:40:27 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xec53, 0x400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/17 02:40:27 executing program 0 (fault-call:5 fault-nth:1): r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:27 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x0, r1}) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000015c0)={0x0, r1}) 2018/05/17 02:40:27 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0xfec00000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:27 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:27 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 2018/05/17 02:40:27 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xe00, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:27 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x541b, 0x0) [ 501.558208] binder: 32047:32048 unknown command 0 2018/05/17 02:40:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) [ 501.580613] IPVS: ftp: loaded support on port[0] = 21 [ 501.588254] binder: 32047:32048 ioctl c0306201 20000340 returned -22 [ 501.643754] binder_alloc: binder_alloc_mmap_handler: 32047 20001000-20004000 already mapped failed -16 [ 501.672752] binder: BINDER_SET_CONTEXT_MGR already set [ 501.711164] binder: 32047:32048 ioctl 40046207 0 returned -16 [ 501.752591] binder: 32047:32066 unknown command 0 [ 501.760112] binder: 32047:32066 ioctl c0306201 20000340 returned -22 [ 501.760969] device lo entered promiscuous mode [ 501.784324] FAULT_INJECTION: forcing a failure. [ 501.784324] name failslab, interval 1, probability 0, space 0, times 0 [ 501.795721] CPU: 1 PID: 32068 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #79 [ 501.803087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 501.812440] Call Trace: [ 501.815035] dump_stack+0x1b9/0x294 [ 501.818665] ? dump_stack_print_info.cold.2+0x52/0x52 [ 501.823852] ? find_held_lock+0x36/0x1c0 [ 501.827922] should_fail.cold.4+0xa/0x1a [ 501.831993] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 501.837094] ? graph_lock+0x170/0x170 [ 501.840895] ? kasan_check_read+0x11/0x20 [ 501.845042] ? graph_lock+0x170/0x170 [ 501.848884] ? kasan_check_write+0x14/0x20 [ 501.853124] ? find_held_lock+0x36/0x1c0 [ 501.857189] ? __lock_is_held+0xb5/0x140 [ 501.861259] ? check_same_owner+0x320/0x320 [ 501.865583] ? rcu_note_context_switch+0x710/0x710 [ 501.870510] ? lock_downgrade+0x8e0/0x8e0 [ 501.874658] ? __local_bh_enable_ip+0x161/0x230 [ 501.879329] __should_failslab+0x124/0x180 [ 501.883566] should_failslab+0x9/0x14 [ 501.887367] kmem_cache_alloc_node+0x272/0x780 [ 501.891962] __alloc_skb+0x111/0x780 [ 501.895684] ? skb_scrub_packet+0x580/0x580 [ 501.900003] ? rcu_is_watching+0x85/0x140 [ 501.904150] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 501.909347] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 501.914887] ? dccp_feat_finalise_settings+0x2b2/0x410 [ 501.920167] ? dccp_feat_register_sp+0x1a0/0x1a0 [ 501.924927] ? dccp_sync_mss+0x1f8/0x310 [ 501.928995] dccp_connect+0x28b/0x6c0 [ 501.932796] ? dccp_send_ack+0x340/0x340 [ 501.936861] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 501.942061] dccp_v6_connect+0x18bc/0x1e20 [ 501.946306] ? dccp_v6_init_sock+0xa0/0xa0 [ 501.950543] ? kasan_check_read+0x11/0x20 [ 501.954694] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 501.959890] ? graph_lock+0x170/0x170 [ 501.963704] ? print_usage_bug+0xc0/0xc0 [ 501.967762] ? find_held_lock+0x36/0x1c0 [ 501.971833] __inet_stream_connect+0x943/0x1120 [ 501.976505] ? dccp_v6_init_sock+0xa0/0xa0 [ 501.980736] ? __inet_stream_connect+0x943/0x1120 [ 501.985581] ? lock_acquire+0x1dc/0x520 [ 501.989557] ? inet_dgram_connect+0x2e0/0x2e0 [ 501.994052] ? mark_held_locks+0xc9/0x160 [ 501.998199] ? __local_bh_enable_ip+0x161/0x230 [ 502.002867] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 502.007878] ? lock_sock_nested+0x9f/0x120 [ 502.012108] ? trace_hardirqs_on+0xd/0x10 [ 502.016257] ? __local_bh_enable_ip+0x161/0x230 [ 502.020927] ? lock_sock_nested+0xe7/0x120 [ 502.025170] inet_stream_connect+0x58/0xa0 [ 502.029408] __sys_connect+0x37d/0x4c0 [ 502.033299] ? __ia32_sys_accept+0xb0/0xb0 [ 502.037536] ? __sb_end_write+0xac/0xe0 [ 502.041515] ? ksys_write+0x1a6/0x250 [ 502.045312] ? __do_page_fault+0x441/0xe40 [ 502.049543] ? __ia32_sys_read+0xb0/0xb0 [ 502.053607] ? mm_fault_error+0x380/0x380 [ 502.057771] __ia32_sys_connect+0x72/0xb0 [ 502.061920] do_fast_syscall_32+0x345/0xf9b [ 502.066250] ? do_int80_syscall_32+0x880/0x880 [ 502.070827] ? _raw_spin_unlock_irq+0x27/0x70 [ 502.075319] ? finish_task_switch+0x1ca/0x840 [ 502.079829] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 502.085366] ? syscall_return_slowpath+0x30f/0x5c0 [ 502.090298] ? sysret32_from_system_call+0x5/0x46 [ 502.095141] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 502.099987] entry_SYSENTER_compat+0x70/0x7f [ 502.104388] RIP: 0023:0xf7f58cb9 [ 502.107747] RSP: 002b:00000000f5f540ac EFLAGS: 00000282 ORIG_RAX: 000000000000016a [ 502.115455] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020000000 [ 502.122735] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 502.130000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.137263] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 502.144527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 502.169790] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:28 executing program 5: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xe00, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 2018/05/17 02:40:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x20000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:28 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/mcfilter\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(sha224-generic)\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x7f, @loopback={0x0, 0x1}}}, 0x6, 0x7, 0x7, 0x2, 0xc}, &(0x7f0000000180)=0x98) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xd4, 0x6, 0xf, 0x4, 0x70bd2c, 0x25dfdbff, {0xf, 0x0, 0x6}, [@nested={0x1c, 0x2, [@typed={0xc, 0x4f, @u64=0x9}, @generic="a37c3c32ec1cb4e4783b94f1"]}, @nested={0xa4, 0x55, [@generic="df796820d9631abdd9e177b7e82504f29bacfd62fc3c9387b30b002a11c5567ac3f657a5b0b3a6b540e895e3596b58bd0a1f559e3bd74d1fe3daa5d97bbb62d375b712ce99cb4be3dcb2ac8cfaa188038f2e6fd1276edf7dbc5caa290c0684f9", @generic="8244e532a315ed393b5cfe12a79bdcc59ab87ed4276a18028b4563015bf7abcf05ef7942972ca18a780d5b7ddddb165d6c16980419f27b6e863753973b96"]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40040}, 0x8010) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000240)={0x0, 0x5f2, 0x1, 0x40000000000, 0x9}, 0x14) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={r3, 0x400}, 0x8) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000500)=[0x80, 0x4]) write$binfmt_aout(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000000000026b900000000000000f6ff000000000075c0a19ec2ff7ffb93b428a4c849ad65af033d9e4904a1815039676329a490f3816afc3ca32e24d3f9d4439a9791e8382b3e69bbaed878e2b887bb453ed1b01ce5bf85ca5daee0cbdaeb7eb1471ca5e63ed7e71dc7894f3f9216e63b75e1860d9f88beaf9f4544713217f833ade4c22fa8c5f7725fc61dcb877563c166d409b66648c881b94e35f43ad1240db892ce382cb6843d93f5c774c46dd88b9c61542043dae43cfa9307c41197f3b1666115"], 0x20) sendfile(r2, r1, &(0x7f000025d000), 0x3fc) 2018/05/17 02:40:28 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x4800000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:28 executing program 0 (fault-call:5 fault-nth:2): r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:28 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xff00000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 502.296023] binder_alloc: binder_alloc_mmap_handler: 32073 20001000-20004000 already mapped failed -16 [ 502.300564] IPVS: ftp: loaded support on port[0] = 21 [ 502.311859] IPVS: ftp: loaded support on port[0] = 21 [ 502.324529] binder: BINDER_SET_CONTEXT_MGR already set [ 502.345069] binder: 32073:32074 ioctl 40046207 0 returned -16 [ 502.346828] FAULT_INJECTION: forcing a failure. [ 502.346828] name failslab, interval 1, probability 0, space 0, times 0 [ 502.362350] CPU: 0 PID: 32091 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #79 [ 502.369632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.378993] Call Trace: [ 502.381599] dump_stack+0x1b9/0x294 [ 502.385249] ? dump_stack_print_info.cold.2+0x52/0x52 [ 502.390459] ? is_bpf_text_address+0xd7/0x170 [ 502.394983] should_fail.cold.4+0xa/0x1a [ 502.399061] ? __save_stack_trace+0x7e/0xd0 [ 502.403409] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 502.408623] ? graph_lock+0x170/0x170 [ 502.412445] ? save_stack+0x43/0xd0 [ 502.416175] ? kasan_kmalloc+0xc4/0xe0 [ 502.420074] ? kasan_slab_alloc+0x12/0x20 [ 502.424235] ? find_held_lock+0x36/0x1c0 [ 502.428311] ? __lock_is_held+0xb5/0x140 [ 502.432405] ? check_same_owner+0x320/0x320 [ 502.436746] ? rcu_note_context_switch+0x710/0x710 [ 502.441695] __should_failslab+0x124/0x180 [ 502.445950] should_failslab+0x9/0x14 [ 502.449762] kmem_cache_alloc_node_trace+0x26f/0x770 [ 502.454892] __kmalloc_node_track_caller+0x33/0x70 [ 502.459840] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 502.464626] __alloc_skb+0x14d/0x780 [ 502.468375] ? skb_scrub_packet+0x580/0x580 [ 502.472719] ? rcu_is_watching+0x85/0x140 [ 502.476883] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 502.482099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 502.487657] ? dccp_feat_finalise_settings+0x2b2/0x410 2018/05/17 02:40:28 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x68000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 502.492975] ? dccp_feat_register_sp+0x1a0/0x1a0 [ 502.497754] ? dccp_sync_mss+0x1f8/0x310 [ 502.501839] dccp_connect+0x28b/0x6c0 [ 502.505186] device lo entered promiscuous mode [ 502.505652] ? dccp_send_ack+0x340/0x340 [ 502.514280] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 502.519493] dccp_v6_connect+0x18bc/0x1e20 [ 502.523751] ? dccp_v6_init_sock+0xa0/0xa0 [ 502.528003] ? perf_trace_lock+0xd6/0x900 [ 502.532164] ? zap_class+0x720/0x720 [ 502.535894] ? graph_lock+0x170/0x170 [ 502.539722] ? print_usage_bug+0xc0/0xc0 [ 502.543791] ? find_held_lock+0x36/0x1c0 [ 502.547869] __inet_stream_connect+0x943/0x1120 [ 502.552547] ? dccp_v6_init_sock+0xa0/0xa0 [ 502.556791] ? __inet_stream_connect+0x943/0x1120 [ 502.561648] ? lock_acquire+0x1dc/0x520 [ 502.565641] ? inet_dgram_connect+0x2e0/0x2e0 [ 502.570148] ? mark_held_locks+0xc9/0x160 [ 502.574314] ? __local_bh_enable_ip+0x161/0x230 [ 502.578995] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 502.579311] binder_alloc: binder_alloc_mmap_handler: 32096 20001000-20004000 already mapped failed -16 2018/05/17 02:40:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x40, 0x0) mq_getsetattr(r0, &(0x7f00000000c0)={0x20, 0x3, 0x2, 0x3, 0x0, 0x430, 0x40, 0x9}, &(0x7f0000000100)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) mq_open(&(0x7f0000000040)='#,)-\'posix_acl_accesseth0GPL\x00', 0x40, 0x0, &(0x7f0000000080)={0x0, 0x8, 0x8000}) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x0, 0x1, 0x2, 0x0, {0xa, 0x4e22, 0x8c, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}}, 0x3a) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x0, @tick=0x8, 0x1, {0x4, 0xffff}, 0x5, 0x1, 0x80}) [ 502.584011] ? lock_sock_nested+0x9f/0x120 [ 502.584027] ? trace_hardirqs_on+0xd/0x10 [ 502.584044] ? __local_bh_enable_ip+0x161/0x230 [ 502.584059] ? lock_sock_nested+0xe7/0x120 [ 502.584080] inet_stream_connect+0x58/0xa0 [ 502.614982] __sys_connect+0x37d/0x4c0 [ 502.618884] ? __ia32_sys_accept+0xb0/0xb0 [ 502.623132] ? __sb_end_write+0xac/0xe0 [ 502.627120] ? ksys_write+0x1a6/0x250 [ 502.630928] ? __do_page_fault+0x441/0xe40 [ 502.635177] ? __ia32_sys_read+0xb0/0xb0 [ 502.639251] ? mm_fault_error+0x380/0x380 [ 502.643421] __ia32_sys_connect+0x72/0xb0 2018/05/17 02:40:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 502.647587] do_fast_syscall_32+0x345/0xf9b [ 502.651923] ? do_int80_syscall_32+0x880/0x880 [ 502.656516] ? kasan_check_write+0x14/0x20 [ 502.658676] binder: BINDER_SET_CONTEXT_MGR already set [ 502.660771] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 502.660790] ? syscall_return_slowpath+0x30f/0x5c0 [ 502.660809] ? sysret32_from_system_call+0x5/0x46 [ 502.660828] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 502.686218] entry_SYSENTER_compat+0x70/0x7f [ 502.690636] RIP: 0023:0xf7f58cb9 [ 502.694002] RSP: 002b:00000000f5f540ac EFLAGS: 00000282 ORIG_RAX: 000000000000016a [ 502.701723] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020000000 [ 502.708998] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 502.716275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.718153] binder: 32096:32097 ioctl 40046207 0 returned -16 [ 502.723547] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 502.723556] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/17 02:40:28 executing program 5: personality(0x1bb2baf3005ac137) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, &(0x7f000000a000)) creat(&(0x7f0000000000)='./file0/bus\x00', 0x10) r0 = open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r0, 0x0) [ 502.820541] device lo entered promiscuous mode 2018/05/17 02:40:28 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xa00, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:28 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x400000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:28 executing program 0 (fault-call:5 fault-nth:3): r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:28 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 2018/05/17 02:40:28 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0ee545cf00000000006e37fe50280fa245b2b0c3caea00006f"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x49b1f53) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x121440, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000140)={'IDLETIMER\x00'}, &(0x7f00000002c0)=0x1e) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000003c0)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff9f}, [@jmp={0x5}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) [ 502.928472] binder_alloc: binder_alloc_mmap_handler: 32118 20001000-20004000 already mapped failed -16 [ 502.968142] IPVS: ftp: loaded support on port[0] = 21 [ 502.978948] FAULT_INJECTION: forcing a failure. [ 502.978948] name failslab, interval 1, probability 0, space 0, times 0 [ 502.990295] CPU: 0 PID: 32127 Comm: syz-executor0 Not tainted 4.17.0-rc5+ #79 [ 502.993307] binder: BINDER_SET_CONTEXT_MGR already set [ 502.997580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 502.997587] Call Trace: [ 502.997615] dump_stack+0x1b9/0x294 [ 502.997636] ? dump_stack_print_info.cold.2+0x52/0x52 [ 502.997661] should_fail.cold.4+0xa/0x1a [ 502.997675] ? __kmalloc_node_track_caller+0x47/0x70 [ 502.997695] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 503.023424] binder: 32118:32120 ioctl 40046207 0 returned -16 [ 503.023688] ? do_fast_syscall_32+0x345/0xf9b [ 503.048274] ? entry_SYSENTER_compat+0x70/0x7f [ 503.052868] ? graph_lock+0x170/0x170 [ 503.056684] ? graph_lock+0x170/0x170 [ 503.060493] ? lock_downgrade+0x8e0/0x8e0 [ 503.064659] ? find_held_lock+0x36/0x1c0 [ 503.068739] ? __lock_is_held+0xb5/0x140 [ 503.072819] ? check_same_owner+0x320/0x320 [ 503.077147] ? kasan_kmalloc+0xc4/0xe0 [ 503.081048] ? rcu_note_context_switch+0x710/0x710 [ 503.085988] __should_failslab+0x124/0x180 [ 503.090236] should_failslab+0x9/0x14 [ 503.094045] kmem_cache_alloc+0x2af/0x760 [ 503.098205] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 503.103752] ? refcount_add_not_zero+0x216/0x320 [ 503.108529] skb_clone+0x1ed/0x4f0 [ 503.112086] ? skb_split+0x11d0/0x11d0 [ 503.115986] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 503.121537] ? dccp_feat_finalise_settings+0x2b2/0x410 2018/05/17 02:40:29 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) set_mempolicy(0x4000, &(0x7f0000000000)=0x10000, 0x4) getsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040), &(0x7f0000000080)=0x2) 2018/05/17 02:40:29 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x2000000, 0x100}, 0x10) r1 = socket(0x11, 0x80002, 0x0) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) 2018/05/17 02:40:29 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x18000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 503.127263] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 503.132812] ? refcount_add+0x2f/0x70 [ 503.136622] ? skb_set_owner_w+0x24e/0x360 [ 503.140864] dccp_skb_entail+0xa0/0xd0 [ 503.144759] dccp_connect+0x387/0x6c0 [ 503.148564] ? dccp_send_ack+0x340/0x340 [ 503.152632] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 503.157833] dccp_v6_connect+0x18bc/0x1e20 [ 503.162082] ? dccp_v6_init_sock+0xa0/0xa0 [ 503.166328] ? kasan_check_read+0x11/0x20 [ 503.170498] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 503.175706] ? graph_lock+0x170/0x170 [ 503.179530] ? print_usage_bug+0xc0/0xc0 [ 503.183601] ? find_held_lock+0x36/0x1c0 [ 503.187681] __inet_stream_connect+0x943/0x1120 [ 503.192369] ? dccp_v6_init_sock+0xa0/0xa0 [ 503.196617] ? __inet_stream_connect+0x943/0x1120 [ 503.201470] ? lock_acquire+0x1dc/0x520 [ 503.205461] ? inet_dgram_connect+0x2e0/0x2e0 [ 503.209967] ? mark_held_locks+0xc9/0x160 [ 503.214121] ? __local_bh_enable_ip+0x161/0x230 [ 503.218798] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 503.223823] ? lock_sock_nested+0x9f/0x120 [ 503.228065] ? trace_hardirqs_on+0xd/0x10 [ 503.232226] ? __local_bh_enable_ip+0x161/0x230 [ 503.236907] ? lock_sock_nested+0xe7/0x120 [ 503.241157] inet_stream_connect+0x58/0xa0 [ 503.245408] __sys_connect+0x37d/0x4c0 [ 503.249306] ? __ia32_sys_accept+0xb0/0xb0 [ 503.253559] ? __sb_end_write+0xac/0xe0 [ 503.257549] ? ksys_write+0x1a6/0x250 [ 503.261360] ? __do_page_fault+0x441/0xe40 [ 503.265603] ? __ia32_sys_read+0xb0/0xb0 [ 503.269670] ? mm_fault_error+0x380/0x380 [ 503.273828] __ia32_sys_connect+0x72/0xb0 [ 503.277985] do_fast_syscall_32+0x345/0xf9b [ 503.282319] ? do_int80_syscall_32+0x880/0x880 [ 503.286914] ? _raw_spin_unlock_irq+0x27/0x70 [ 503.291422] ? finish_task_switch+0x1ca/0x840 [ 503.292459] binder_alloc: binder_alloc_mmap_handler: 32144 20001000-20004000 already mapped failed -16 [ 503.295925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 503.295943] ? syscall_return_slowpath+0x30f/0x5c0 [ 503.295963] ? sysret32_from_system_call+0x5/0x46 [ 503.295982] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 503.296000] entry_SYSENTER_compat+0x70/0x7f [ 503.296010] RIP: 0023:0xf7f58cb9 [ 503.296015] RSP: 002b:00000000f5f540ac EFLAGS: 00000282 ORIG_RAX: 000000000000016a [ 503.296027] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020000000 [ 503.296033] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 503.296039] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 503.296045] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 503.296051] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 503.354865] binder: BINDER_SET_CONTEXT_MGR already set [ 503.420150] binder: 32144:32150 ioctl 40046207 0 returned -16 2018/05/17 02:40:29 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x8000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:29 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:29 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6c000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) readv(r0, &(0x7f0000001500)=[{&(0x7f0000000280)=""/70, 0x46}], 0x1) bind$inet(r0, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x6, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000001c0)=0xfff, 0x4) sendto$inet(r0, &(0x7f0000000100)="e223272add26bccf07eb5dd19299adee54fac12abe232fbafc87b74e03b0e770078e2e80a6446ea9", 0x28, 0x4000000, &(0x7f0000000140)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000040)="cea95e77b197e31981ac47965e2bd4a4cd8397b2d3f85b544002a9", 0x1b, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/05/17 02:40:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3) 2018/05/17 02:40:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfc00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:29 executing program 2: r0 = socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0xfffffffffffffffc, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x8, 0x4, 0x1) ioctl$sock_netdev_private(r2, 0x89f7, &(0x7f0000000140)="99ed2d8696dd58d4677cbb8db76971df3683565a5cc5d66760024a896009b7925890139223237ba79e3486bbe30d1542c57c593e16d8bf41b08aefe163d1a6ec6ade4c06e1a493849a863f603383fb558064ca4bbcd0e6c4452b007e6654f37279fac31148ae732d04f555") openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x200002, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e24, 0x7, @loopback={0x0, 0x1}, 0x1c2a}}, 0x7ff, 0x10000000000, 0x1}, 0x98) close(r2) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r4, &(0x7f0000000300)=""/120, 0x78) 2018/05/17 02:40:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xff00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x16080, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000000c0)) setsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000000140)=0x13c00000000, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x1}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x800, 0x2, 0x7ff, 0x20, 0x76, 0x100000001, 0x8000, 0x7f, 0x100000000, 0x3, 0xffffffff7fffffff, 0x80000000}) creat(&(0x7f0000000180)='./file0\x00', 0x20) [ 503.782574] binder_alloc: binder_alloc_mmap_handler: 32178 20001000-20004000 already mapped failed -16 [ 503.798924] IPVS: ftp: loaded support on port[0] = 21 [ 503.811288] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) [ 503.866173] binder: 32178:32180 ioctl 40046207 0 returned -16 2018/05/17 02:40:29 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:29 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 2018/05/17 02:40:29 executing program 2: r0 = inotify_init() clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000280)=[{r0}], 0x1, &(0x7f0000000340)={0x0, r1+10000000}, &(0x7f0000000380), 0x8) 2018/05/17 02:40:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:30 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x600, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 504.017891] device lo entered promiscuous mode [ 504.087120] IPVS: ftp: loaded support on port[0] = 21 [ 504.124418] binder_alloc: binder_alloc_mmap_handler: 32214 20001000-20004000 already mapped failed -16 [ 504.150755] binder: BINDER_SET_CONTEXT_MGR already set [ 504.186291] binder: 32214:32215 ioctl 40046207 0 returned -16 2018/05/17 02:40:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfe800000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:30 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0x3, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:30 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) 2018/05/17 02:40:30 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2}}, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x10}, 0x98) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000100)=0x3) 2018/05/17 02:40:30 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x2000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, 0x1c) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x400, 0x802) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x6, 0x0, 0xbb3, 0x9, 0x100, 0xffffffffffffff0f, 0x200, 0x2, 0x9, 0xfffffffffffffbff, 0x9, 0xffff, 0x1dcd}, {0x37, 0x9fde, 0x11, 0x4, 0x1000, 0x1, 0x1, 0xff, 0x7f, 0x9, 0x5, 0x80000000, 0x3}, {0x100, 0x490, 0x1f, 0x400, 0x81, 0x40, 0x0, 0x4, 0x1ff, 0x6, 0xfffffffffffffff9, 0x100, 0x4}]}) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4e22, 0x3e8, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x1c) 2018/05/17 02:40:30 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xff000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 504.755135] binder_alloc: binder_alloc_mmap_handler: 32231 20001000-20004000 already mapped failed -16 [ 504.758916] IPVS: ftp: loaded support on port[0] = 21 [ 504.818551] binder: BINDER_SET_CONTEXT_MGR already set [ 504.844840] binder: 32231:32232 ioctl 40046207 0 returned -16 2018/05/17 02:40:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x3000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x5, 0x400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x8, 0x8000) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x8b, 0x4, 0x6b10d58a, 0x8000, 0xb731, 0x9, 0xaa5, {0x0, @in6={{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x20}, 0xffffffffffff0000}}, 0x5, 0x0, 0x4000000000000, 0x3, 0x5}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000280)={r4, 0x7, 0x9}, &(0x7f00000002c0)=0x8) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000000)={0x0, 0x2}) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000000c0)) 2018/05/17 02:40:31 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffd) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) 2018/05/17 02:40:31 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0x3e0, 0x1000000004e20}, 0x1c) 2018/05/17 02:40:31 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x4c00000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:31 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xeffdffff, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 504.998225] device lo entered promiscuous mode [ 505.008650] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 2018/05/17 02:40:31 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x34) open(&(0x7f0000000000)='./file0\x00', 0x101, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae05, &(0x7f0000000040)) 2018/05/17 02:40:31 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xfffffffd, 0x1000000004e20}, 0x1c) [ 505.088320] binder_alloc: binder_alloc_mmap_handler: 32271 20001000-20004000 already mapped failed -16 [ 505.117239] binder: BINDER_SET_CONTEXT_MGR already set [ 505.131829] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfe80], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) [ 505.167889] binder: 32271:32272 ioctl 40046207 0 returned -16 2018/05/17 02:40:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[{}, {0x4, 0x3}, {}, {}], 0x200000000000014b) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/05/17 02:40:31 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e21}, 0x1c) [ 505.458213] device lo entered promiscuous mode [ 505.471584] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:31 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_mr_vif\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={r1, 0x2, 0x1, 0x9, &(0x7f00000000c0)=[0x0, 0x0], 0x2}, 0x20) 2018/05/17 02:40:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfd], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) 2018/05/17 02:40:31 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x6c00000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:31 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e22}, 0x1c) 2018/05/17 02:40:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:31 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x500000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:31 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000100)=0x600, 0x20) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2e8002, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000600)=0xffffffffffff7fff) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x394) fsetxattr(r1, &(0x7f0000000080)=@known='security.capability\x00', &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x15, 0x9) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0xff) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x4, 0x40200) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000140), 0x0) 2018/05/17 02:40:31 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e26}, 0x1c) [ 505.570487] binder_alloc: binder_alloc_mmap_handler: 32327 20001000-20004000 already mapped failed -16 2018/05/17 02:40:31 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000000000), 0x800000000000339, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x40) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f00000000c0)={r2, 0x1}) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000140)=@dstopts={0x0, 0x1, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x18) 2018/05/17 02:40:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x4], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:31 executing program 5: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000024000)={0xffffffffffffffff}, 0x0, 0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) tkill(r0, 0x5) timer_settime(0x0, 0x0, &(0x7f0000011000)={{}, {0x0, 0x9}}, &(0x7f0000046000)) ptrace$peek(0x1, r0, &(0x7f0000000000)) 2018/05/17 02:40:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) [ 505.644346] IPVS: ftp: loaded support on port[0] = 21 [ 505.653293] binder: BINDER_SET_CONTEXT_MGR already set [ 505.693332] binder: 32327:32329 ioctl 40046207 0 returned -16 2018/05/17 02:40:31 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700) 2018/05/17 02:40:31 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e2a}, 0x1c) 2018/05/17 02:40:31 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x2000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 505.879546] binder_alloc: binder_alloc_mmap_handler: 32360 20001000-20004000 already mapped failed -16 [ 505.907219] binder: BINDER_SET_CONTEXT_MGR already set [ 505.948664] device lo entered promiscuous mode [ 505.958403] binder: 32360:32362 ioctl 40046207 0 returned -16 [ 505.976432] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x1100000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:32 executing program 5: r0 = socket$inet(0x2, 0x805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vcan0\x00', 0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x2, 0x2, [0x45, 0xfff]}, &(0x7f0000000200)=0xc) sendmmsg$inet_sctp(r1, &(0x7f0000002c80)=[{&(0x7f00000015c0)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000440)='|', 0x1}], 0x2000000000000364, &(0x7f0000000340)=[@dstaddrv6={0x1c, 0x84, 0x8, @dev={0xfe, 0x80, [], 0xc}}, @prinfo={0x14, 0x84, 0x5, {0x30, 0x1dff}}, @sndinfo={0x0, 0x84, 0x2, {0x78, 0x8, 0x4, 0xff, r2}}, @sndrcv={0x2c, 0x84, 0x1, {0x800, 0xffffffffffffff7f, 0x202, 0x1, 0x1, 0x5, 0x5, 0x3aa, r2}}, @sndrcv={0x2c, 0x84, 0x1, {0x7a, 0x1000, 0x4, 0x80000000, 0x3, 0x0, 0x3, 0x81, r2}}, @init={0x14, 0x84, 0x0, {0xfffffffffffffffa, 0xff, 0x2, 0x6}}, @dstaddrv6={0x1c, 0x84, 0x8, @remote={0xfe, 0x80, [], 0xbb}}], 0xcc}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000240)=0x2, 0x4) 2018/05/17 02:40:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:32 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7) 2018/05/17 02:40:32 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e2b}, 0x1c) 2018/05/17 02:40:32 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xffffff7f, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:32 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0xd, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x7ffffffffffffffe}, 0x2c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@loopback, @loopback, 0x0}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000180)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x4}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x200, 0xfb, &(0x7f0000000080)=""/251, 0x0, 0x0, [], r0}, 0x48) 2018/05/17 02:40:32 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfe80000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 506.811406] binder_alloc: binder_alloc_mmap_handler: 32380 20001000-20004000 already mapped failed -16 [ 506.841461] binder: BINDER_SET_CONTEXT_MGR already set [ 506.852763] binder: 32380:32381 ioctl 40046207 0 returned -16 [ 506.878624] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:32 executing program 5: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)=0x9, 0x4) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) socket$rds(0x15, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x100000000, 0xb1, 0x0, 0x5, 0x9, 0x7, 0x4}, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getpeername$packet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@gettfilter={0x54, 0x2e, 0x404, 0x70bd26, 0x25dfdbff, {0x0, r2, {0xfff1, 0x2}, {0x897c4d89606144bc, 0xffe0}, {0xfffd, 0x8}}, [{0x8, 0xb, 0xffffffffffffff7a}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x80000000}, {0x8, 0xb}, {0x8, 0xb, 0x5c6758f1}, {0x8, 0xb, 0x7fff}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x805) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0xfffffffffffffe21) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x8ba, 0x1000) 2018/05/17 02:40:32 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x700, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:32 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x11], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:32 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf) 2018/05/17 02:40:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:32 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e23}, 0x1c) 2018/05/17 02:40:33 executing program 2: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) close(r0) [ 507.024875] binder_alloc: binder_alloc_mmap_handler: 32410 20001000-20004000 already mapped failed -16 [ 507.052187] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:33 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x28001, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080), 0x0) setrlimit(0x107, &(0x7f0000000000)) [ 507.101761] binder: 32410:32412 ioctl 40046207 0 returned -16 [ 507.108919] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 507.171893] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 507.230489] device lo entered promiscuous mode [ 507.237949] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 507.253693] netlink: 3 bytes leftover after parsing attributes in process `syz-executor2'. [ 507.271282] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfc00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:33 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000980)={&(0x7f0000000180)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000780)="b4", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0037000900000005001c0000008400000018004f18605b5aecbf5ea1c487fc54f1d0920000902ffc300a14bdcbf16f2735b7f618a98c9e18fc979572a5126695cf45f2bcab72788a"], 0x30}, 0x0) 2018/05/17 02:40:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 2018/05/17 02:40:33 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x100000000b916}, 0x1c) 2018/05/17 02:40:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:33 executing program 5: socketpair(0x3, 0xa, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x2, 0x4, [0x9, 0x1f, 0x1, 0x6]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x3, 0x2, 0x5, 0x7f, 0x6}, 0x14) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) r3 = getpgid(0x0) tgkill(r2, r3, 0x6) sched_getaffinity(0x0, 0x4, &(0x7f0000000000)) 2018/05/17 02:40:33 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x4, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:33 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xa000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 507.411204] binder: 32442:32451 unknown command 0 2018/05/17 02:40:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:33 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e27}, 0x1c) 2018/05/17 02:40:33 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x300000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:33 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x1}) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)=""/17, 0x11}], 0x1, 0x0) [ 507.450364] binder: 32442:32451 ioctl c0306201 20000340 returned -22 [ 507.490180] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:33 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 2018/05/17 02:40:33 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_buf(r0, 0x29, 0x41, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0x28) r1 = accept4(r0, &(0x7f0000000040)=@pppoe, &(0x7f00000000c0)=0x80, 0x80800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r2, 0x300, 0x70bd2c, 0x25dfdbfc, {0x11}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xb}}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x1e}}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x9}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3f}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xeb}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa04}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) [ 507.528442] binder_alloc: binder_alloc_mmap_handler: 32442 20001000-20004000 already mapped failed -16 2018/05/17 02:40:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)) [ 507.616209] binder: BINDER_SET_CONTEXT_MGR already set [ 507.643054] binder: 32442:32468 unknown command 0 2018/05/17 02:40:33 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e25}, 0x1c) 2018/05/17 02:40:33 executing program 2: r0 = socket$inet(0x2, 0x2000000000006, 0x1) setsockopt$inet_int(r0, 0x0, 0x20, &(0x7f0000000080), 0x0) [ 507.688361] binder: 32442:32468 ioctl c0306201 20000340 returned -22 [ 507.775846] binder: 32442:32451 ioctl 40046207 0 returned -16 [ 507.820125] device lo entered promiscuous mode [ 507.897366] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x700], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x3c, 0x2) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={"74756e6c3000f5ffffffffffffff00", &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000005c0)={0x0, 0xff}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000640)={r3, 0x6}, &(0x7f0000000680)=0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@ipv4={[], [], @rand_addr}}}, &(0x7f00000002c0)=0xe8) getresuid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) setresuid(r2, r4, r5) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)) 2018/05/17 02:40:34 executing program 1 (fault-call:5 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:34 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e29}, 0x1c) 2018/05/17 02:40:34 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 2018/05/17 02:40:34 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x60, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:34 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xe000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:34 executing program 2: geteuid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x400003c4, 0x0, 0x8}, {0xb97}]}) 2018/05/17 02:40:34 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x9, 0x1, 0x0, r0, 0x7ff}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x200000000000009, 0x10}, 0x2c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r1}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00005f1000)={r2, &(0x7f0000eed000), &(0x7f0000b88000)="13"}, 0x20) [ 508.026813] binder_alloc: binder_alloc_mmap_handler: 32525 20001000-20004000 already mapped failed -16 [ 508.058148] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x300], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:34 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x4000}, 0x1c) [ 508.112448] binder: 32525:32527 ioctl 40046207 0 returned -16 [ 508.134969] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:34 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4, 0x420040) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040)=0x401, 0x4) tee(r0, r0, 0xff, 0x0) fstatfs(r0, &(0x7f0000000080)=""/216) mkdirat$cgroup(r0, &(0x7f0000000180)='syz1\x00', 0x1ff) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000001c0)="335a658bcbf1c0a43dd256c20ecd3b3e00b4af11f6584628331de3019bbbef8d60eee51c100fe285a691c74e06d29c2012d55c9e052a40f502c6d768224195a6695d5bece9863ae848fa5351de2c48d314001b4c9cb1d89c72aff2d6cee59622a40b7c4bab0287e425e95e1a876678431b81670ecabbd09c2d01ce7c1d9bf625790d48944646a145b807b89086fd69740a38daac7bb305c2533a3ea3b0433e8c964c1d8181af16ce8b", 0xa9) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000280)) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000300)={[{0x6, 0xffffffffffffffb9, 0x400, 0x81, 0x401, 0x8a7, 0x2, 0x1000, 0x8, 0x0, 0x1ff, 0x7, 0xfff}, {0xffffffff, 0x9, 0x5, 0xc54, 0x0, 0x9, 0x2, 0x9, 0x9, 0x8, 0x3, 0x10001, 0x2}, {0x32, 0x2, 0x5, 0x179c, 0x1000, 0x200, 0xa4d2, 0x9, 0x800, 0x8, 0x8, 0x7, 0x5}], 0x1}) getsockopt$netlink(r1, 0x10e, 0x2, &(0x7f0000000380)=""/36, &(0x7f00000003c0)=0x24) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) setfsuid(r2) ioctl$PPPOEIOCSFWD(r0, 0x4004b100, &(0x7f0000000540)={0x18, 0x0, {0x4, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x10}}}) sendto$ipx(r0, &(0x7f0000000580)="cb49aff9817293c349c6e9611894a7bb4357055afe4080b0f81acd5d282f289975f0bf10ef270ce2792ffceba1db185da86eeda2d578701eafffb881ca0b974efb503c44368964f85e1e913af9f276a0780a5a261609637f0e37b7", 0x5b, 0xa0a3788c78b32a5, &(0x7f0000000600)={0x4, 0x3, 0x41f, "041043017c31", 0x40}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000740)={&(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0), &(0x7f0000000700)=[0x0, 0x0, 0x0], 0x2, 0x6, 0x0, 0x3}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000780)='/dev/snd/pcmC#D#p\x00', 0x101, 0x400042) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@local, @in6=@dev}}, {{@in6=@loopback}}}, &(0x7f00000008c0)=0xe8) select(0x40, &(0x7f0000000900)={0x8, 0x61ca, 0x1, 0x1, 0x3, 0xffffffffffffffff, 0x81}, &(0x7f0000000940)={0x9, 0x80000001, 0x9, 0x10000, 0x5, 0x8, 0x2, 0x55}, &(0x7f0000000980)={0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x1, 0x406}, &(0x7f00000009c0)) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000a00)=0x8, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={0x0}, &(0x7f0000000ac0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000002f80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000000b00)={0x241c, 0x2e, 0x8, 0x70bd26, 0x25dfdbff, {0x7}, [@typed={0x8, 0x39, @pid=r4}, @nested={0x7c, 0x89, [@generic="e78cb1bbb2305d1f614de6db36d0d88cb2dbee024150bcd03f33ddcacfc95480ddc9470623f3a29e65160dee507e2a8b5023076f3de49e379370b584d3e2fd3ca5663b81869a1333e7a75dd1957150fa207c7237f80da3a696d9788ed1852e9cd3e71769fe7b2e10e2423ff387f0c473399d0ebd977dd4"]}, @typed={0x8, 0xffffffff, @uid=r2}, @typed={0x14, 0x22, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @typed={0x8, 0x61, @uid=r2}, @generic="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", @typed={0xec, 0x2c, @binary="19edbe48c8a8b19af9733233726887bcb812364a85ac631a36daafbe38d751eca77406eee4e087c504254eabdf59744235664500ab31cb4be26b59f0128ff5f66e37a3b9c8d14415b04232b8182f67c4290be2d8bdb10bb72c0aed166517d03e424f64b4df01cba86fa9225bd5d4a2115a6604e4b59b73f2db6e965c1999b66740258aeb1f5b05e53d8d72016e650c0c2c30c22132c44fff3b5a543ba74327cc373487541a34756b7101d712cc1602211ac57840f14b43d57d2d608fbe2b0daad1c918c4211bd360e154efcf39062d82a84da025b338d00ce750189fa5f1cd019168f5539714"}, @nested={0x1274, 0x56, [@generic="b87069e60529ae3fa41b43599506cd15cb50074fc78940be0fa57f703b1a56aa6ad6d4bfb4a131eb04fbf680965ac9891567f5a6ef249b17c69d8b0c924442c216371ecba95c5dae25c962a067090322d4a9e0e09fccde61b523871f14fda077ca1b30bccf8b53ca5fe7953d022d47a4a2b48a0bc1f0b539e7", @typed={0xc, 0x70, @u64=0x100000001}, @generic="566555ce21fc2fe74fec2db6dfa75d4a1de06e8e99c5c6c357ac6a8c7ac8e9c7b65c2c0f5164a6d942dfe826e31556240f726578dea8f07883602a317c037c063392369f62811916599e124c5a3a1ec6dbcff844b69d671942439876b9aa38eeb89e2486663c69eac872dabdce5dab4c2b1bf97bd730964bc50c7f27e3c7373338510ab57ea1c0f6c68f4a52c4a0bc4b0bfc0159c1a2d3525e2b6f2849e3871c2d1b8919bc460e04490a0214bd4b4ce64e50b541931c8a2ac165f6f0994a4e4ea2d33a7751c85f453bfaac61de1ad5faeddcc790", @generic="f8c5e7cb54", @generic="74de5dc548286514a3ef03febb521ba0a7734cb2f308bcea65bb80298c8bd33c2ba8d67f8935575d19782dd4d5cccb62d3195711879a6cde9b4040fe", @generic="1695eed7a940d3ae7509f60fc499f33ff1f4aa8e1ade1a0891b0c7584400f72257a689c452674387189a9adf35fed38e5ee20a1748d113545c87acb6b7ac02c17a4451c7ef534a9cdaf48b43b2fd82c6d769b0dad1e8d66577c33f031a1ee49a94e0d380362ef143a19723d7d9952a05e2fcac794355f8541eed57564d765f6e728563d01d1c2d228327412d647656cc8bd5bc53cec1e9c82d5f1ce8aff4e1beddb5dba2e8c94098cfe2bf55e99e754c415b2c674cf3e7baaf656eea3a507c21736b01bbf192e06080cd8206a5dbfa390c778f34072f", @generic="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"]}]}, 0x241c}, 0x1, 0x0, 0x0, 0x40}, 0x800) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000003180)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0xa00}, 0xc, &(0x7f0000003140)={&(0x7f0000003040)={0xc8, r5, 0x8, 0x70bd27, 0x25dfdbfb, {0x5}, [@IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1000}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0xb0965007f51754e7}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000031c0)) getsockopt$packet_buf(r0, 0x107, 0x1, &(0x7f0000003200)=""/199, &(0x7f0000003300)=0xc7) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000003340)={0x376, 0x6, 0x1}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000003380)={0x0, 0x7f, 0x5, 0x100000001, 0x7, 0xd69}, &(0x7f00000033c0)=0x14) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000003400)={r6, 0x5}, &(0x7f0000003440)=0x8) restart_syscall() 2018/05/17 02:40:34 executing program 5: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = epoll_create(0x20040000000401) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x7fff, 0x4) fremovexattr(r0, &(0x7f0000000080)=ANY=[]) 2018/05/17 02:40:34 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 2018/05/17 02:40:34 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x300000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc008aeba, &(0x7f00000015c0)={0x0, r2}) [ 508.391090] binder_alloc: binder_alloc_mmap_handler: 32568 20001000-20004000 already mapped failed -16 [ 508.419613] binder: BINDER_SET_CONTEXT_MGR already set [ 508.473109] binder: 32568:32569 ioctl 40046207 0 returned -16 [ 508.518919] device lo entered promiscuous mode [ 508.549554] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfc], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:34 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 2018/05/17 02:40:34 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000100)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, [], 0x11}, 0xb, r1}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/202, 0x3}], 0x2000000000000112, 0x0) 2018/05/17 02:40:34 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xe00}, 0x1c) 2018/05/17 02:40:34 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x3, 0xaa) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d5affc), 0x4) write(r0, &(0x7f00000002c0)="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", 0x6dc) write(r0, &(0x7f000069efac)="e26d4afed4d3467b7ee66e9ebb4039955b1d97a427cc701c5e5e6447b6510bff58c6313283eae8186bf1c22f39347ebb869277e809a7002f38611d02a6e3d4e4f6b8923c59ff9438d8c3d353b76131b90e044f80", 0x54) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/zero\x00', 0x20003, 0x0) write$sndseq(r1, &(0x7f00000009c0)=[{0x8, 0x9, 0xa9, 0x4, @tick=0xbb9, {0xffffffffffffffff, 0x4}, {0x523f, 0x9}, @queue={0x0, {0x7fff, 0x100000000}}}, {0x6, 0x4, 0x6, 0x1, @time={0x0, 0x1c9c380}, {0x100000001, 0x5}, {0x80000000, 0x6}, @ext={0x14, &(0x7f0000000040)="61946563dea88407407f144c46b1bfc0d5dee6c3"}}, {0x1, 0x1, 0x9, 0x5c4, @tick=0x10001, {0x0, 0x9}, {0x7, 0x8}, @ext={0x3e, &(0x7f0000000080)="26ed5b6db3dd18025683f0e133800fb5d5e191867dc8f638c8326ed20272b8e2b8e893d436302eddb94d875a1f2af70a6a22cbe1e9f382c520500f9da7ef"}}, {0x80000000, 0x2, 0x7, 0x40, @tick=0x8001, {0x4, 0xa6b}, {0x2, 0x5}, @addr={0x20, 0xc3}}], 0x70) r2 = dup(r0) write$sndseq(r2, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x0, @time={0x77359400}, {}, {}, @result}], 0x30) write$eventfd(r2, &(0x7f0000000280), 0xff93) accept4$packet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000bc0)=0x14, 0x800) getresuid(&(0x7f0000000c00)=0x0, &(0x7f0000000c40), &(0x7f0000000d40)) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000d80)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4e22, 0x8000, 0x4e22, 0x0, 0xa, 0xa0, 0x20, 0x7f, r3, r4}, {0x1, 0x618a, 0x2, 0x7, 0x9, 0x30, 0x9, 0x10000}, {0x6, 0x20, 0xf5ac, 0xfffffffffffffff9}, 0x0, 0x6e6bbb, 0x1, 0x1, 0x1, 0x2}, {{@in=@broadcast=0xffffffff, 0x4d3, 0x32}, 0x0, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x3502, 0x3, 0x3, 0x1, 0x4, 0x3, 0xfff}}, 0xe8) recvfrom(r0, &(0x7f0000000180)=""/226, 0xfffffffffffffff6, 0x0, 0x0, 0xfffffffffffffcd1) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a40)=""/211) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000c80)={0x0, 0xece3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xffffffffffffffff}}, &(0x7f0000000000)=0xb0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000f40)=ANY=[@ANYBLOB="01060000000000000600000000000000a7a10000000000000000000000000000ff7f000000000000650501ff00000000000b00000000000000000000000000000000000000000000000000000000000000f43900000000000009000000000000000400000000000000ff038005000000000049e9dbd9f541130e00000000000000000000000000000000000000000000000800000000000000020000000000000000020000000000000000020500000000000000000000000200000000000000000000000000000000000000000003000000000000000800000000000000fa92000000000000099800010000000000000000000000000000000000000000000000000000000000000000000000000100000000000000060000000000000005000000000000006d000005000000000000000000000000000000000000000000000000b049d8137228015b000000000000008000000000ff0f0000000000000300000000000000010002040000000000000000000000000000000000000000000000000000000000000000000000000000004c28c87ccf04d200"]) 2018/05/17 02:40:34 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x80000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aea5, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:34 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x8, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 508.658661] binder_alloc: binder_alloc_mmap_handler: 32589 20001000-20004000 already mapped failed -16 [ 508.684760] IPVS: ftp: loaded support on port[0] = 21 [ 508.713295] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:34 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x1000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000000140001000000000000000843c0f3000002000000", @ANYRES32=0x0, @ANYBLOB="2c000300766574683100000000000000000000001400060000000000000000000000000000000000080002007f00000108000800000000000800010000000000"], 0x58}, 0x1}, 0x0) 2018/05/17 02:40:34 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x500000000000000}, 0x1c) 2018/05/17 02:40:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x8010aebb, &(0x7f00000015c0)={0x0, r2}) [ 508.738086] binder: 32589:32590 ioctl 40046207 0 returned -16 2018/05/17 02:40:34 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2) 2018/05/17 02:40:34 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xfdfdffff00000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 508.929072] binder_alloc: binder_alloc_mmap_handler: 32626 20001000-20004000 already mapped failed -16 [ 508.988452] binder: BINDER_SET_CONTEXT_MGR already set [ 509.007734] binder: 32626:32628 ioctl 40046207 0 returned -16 [ 509.046045] device lo entered promiscuous mode [ 509.078143] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x2000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:35 executing program 2: ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x401, 0x2000) dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x4, 0x20800) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x400800, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)="74eb03ec33d7255e6cf20000000000000000000000", 0x2, 0x0) fallocate(r1, 0x1, 0x243, 0x9) 2018/05/17 02:40:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x5421, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:35 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x900000000000000}, 0x1c) 2018/05/17 02:40:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 2018/05/17 02:40:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @multicast1=0xe0000001}, 0xfffffffffffffe63) sendto$inet(r0, &(0x7f0000a88f88), 0x3e2, 0x20000000, &(0x7f0000000080)={0x2, 0x1000004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000000100)="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", 0x1000, 0x40, &(0x7f0000001100)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0xd3, 0x401, 0x7fff}) 2018/05/17 02:40:35 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x600000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:35 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x11, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x1100], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 509.480940] binder_alloc: binder_alloc_mmap_handler: 32644 20001000-20004000 already mapped failed -16 [ 509.488664] IPVS: ftp: loaded support on port[0] = 21 [ 509.510900] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:35 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)=0xff, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) move_pages(0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0), 0x0) [ 509.535140] binder: 32644:32646 ioctl 40046207 0 returned -16 2018/05/17 02:40:35 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x8000000}, 0x1c) 2018/05/17 02:40:35 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 2018/05/17 02:40:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae45, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:35 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x4800, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:35 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000100)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) kcmp(r2, r3, 0x4, r1, r0) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0xfffffffffffffe85, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, 0x8) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$KVM_GET_TSC_KHZ(r4, 0xaea3) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) [ 509.744654] device lo entered promiscuous mode 2018/05/17 02:40:35 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x200000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 509.801818] binder_alloc: binder_alloc_mmap_handler: 32689 20001000-20004000 already mapped failed -16 [ 509.810230] IPVS: ftp: loaded support on port[0] = 21 [ 509.885589] binder: BINDER_SET_CONTEXT_MGR already set [ 509.906069] binder: 32689:32691 ioctl 40046207 0 returned -16 2018/05/17 02:40:36 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x3000000}, 0x1c) 2018/05/17 02:40:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x800000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:36 executing program 2: r0 = memfd_create(&(0x7f0000000000)="70d295e7a5c45ebd00ab", 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="08010000db030000c002000000000000e202000000003fffff"], 0x19) execveat(r0, &(0x7f0000000040)='\x00', &(0x7f00000003c0), &(0x7f00000005c0), 0x1000) 2018/05/17 02:40:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4030ae7b, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:36 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x48, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x10200, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)=0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x40000000000000, 0x10, r3, 0x100000) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/05/17 02:40:36 executing program 5: syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0xa01) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x200, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x68, &(0x7f0000000340)=[@in={0x2, 0x4e21}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, @in6={0xa, 0x4e24, 0x8e91, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, @in6={0xa, 0x4e22, 0x9cc, @remote={0xfe, 0x80, [], 0xbb}, 0x5f30}, @in={0x2, 0x4e24, @rand_addr=0x78f}]}, &(0x7f0000000400)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000440)={0x0, 0xff}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in={{0x2, 0x4e22}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}}, 0x84) mq_timedsend(r1, &(0x7f00000000c0)="df17fcc223b67d43cabd121e9feb460e889bee0322b0feea5b5321837be858d96e64787b02035104553e6125fd57b62cc54369a71ae5829f25079294d645a24417a2bf69ee96d6b1aeb5cdd7ac6fd69c76928652066f749905", 0x59, 0x69, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x402c582a, r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x210004, 0x0) 2018/05/17 02:40:36 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x400000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfe80000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 510.533920] binder: 32719:32728 unknown command 0 [ 510.547671] IPVS: ftp: loaded support on port[0] = 21 [ 510.573131] binder: 32719:32728 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:36 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x200) r3 = memfd_create(&(0x7f0000000100)='/dev/kvm\x00', 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000001c0)={r3}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) getsockname$netrom(r4, &(0x7f0000000040), &(0x7f0000000080)=0x10) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2018/05/17 02:40:36 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xe}, 0x1c) 2018/05/17 02:40:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x8070ae9f, &(0x7f00000015c0)={0x0, r2}) [ 510.664857] binder_alloc: binder_alloc_mmap_handler: 32719 20001000-20004000 already mapped failed -16 [ 510.692093] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfd00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 510.720676] binder: 32719:32743 unknown command 0 2018/05/17 02:40:36 executing program 5: socket$inet_icmp(0x2, 0x2, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4020ae46, &(0x7f0000000000)={0xf0ffffff7f0000}) [ 510.741772] device lo entered promiscuous mode [ 510.747843] binder: 32719:32743 ioctl c0306201 20000340 returned -22 [ 510.779812] binder: 32719:32728 ioctl 40046207 0 returned -16 2018/05/17 02:40:36 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) read(r0, &(0x7f0000000680)=""/251, 0x1d2) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000240)=0xb2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x80) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000000)={0x2, 0x9, 0x100000000000000, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000001c0)={0x8, 0x6, 0xfff}) [ 510.806321] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:36 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x5, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:36 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x5800}, 0x1c) 2018/05/17 02:40:36 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xc0fe], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x8048ae66, &(0x7f00000015c0)={0x0, r2}) [ 510.954642] binder: 305:307 unknown command 0 2018/05/17 02:40:37 executing program 5: set_tid_address(&(0x7f0000000200)) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e22}, 0x10) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) pipe2(&(0x7f0000000240), 0x84000) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x11, 0x1, "a0ee86a6443c3203825d85f985913180a32410b0e680086698bf093c060f4cf8888c0e983147fe62448916ba261112e1b80274d16fbc63227b2f39069fa1f1b2", "352354ff8c91b8693adec56237659f1d4219ea764ae70030ce443606dd031abd28bd2f8c1f69a0410f1da9a0de644a227ddadfd69f4562f2366d1d78067473cd", "86deec3d49526e496ad7cc6a51b2f9563e28f5495916fd7c79c1b7bd639c7d17", [0xfffffffffffffffa, 0x5]}) ioctl$int_in(r0, 0x80000000005000, &(0x7f0000000000)) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000002c0)=0x5) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000300)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) 2018/05/17 02:40:37 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x80fe}, 0x1c) [ 510.992926] binder: 305:307 ioctl c0306201 20000340 returned -22 [ 511.028100] binder_alloc: binder_alloc_mmap_handler: 305 20001000-20004000 already mapped failed -16 [ 511.056793] binder: BINDER_SET_CONTEXT_MGR already set [ 511.080247] binder: 305:307 ioctl 40046207 0 returned -16 [ 511.189809] binder: 305:329 unknown command 0 [ 511.201787] binder: 305:329 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:37 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x5}, 0x1c) 2018/05/17 02:40:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x4000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:37 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xeffdffff00000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:37 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$update(0x2, r1, 0x0, 0x0) bind$alg(r0, &(0x7f00009b4fa8)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(anubis-generic)\x00'}, 0x58) close(r0) 2018/05/17 02:40:37 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x402c5828, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40000, 0x0) unshare(0x400) r1 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x125, &(0x7f0000000180)={@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x10}, @link_local={0x1, 0x80, 0xc2}, [{[], {0x8100, 0x1, 0x5, 0x4}}], {@ipx={0x8137, {0xffff, 0x113, 0xff, 0x14, {@broadcast=0xffffffff, @random="1f3f468ce684", 0x7ff}, {@current, @random="113c4b6672ac", 0x9}, "f2cc6d911b01cd090737903eb709538474b2d44d25b31522771938898e832dac0a20fb14f03a2be2d867af27197be48f8cb0ebea21df3f872528a4ebfa6025273797058b61193dab385d32c23c17b4e8dbda59defa5d28681d9e200da714a94a5936c7efd72eab1121ceba5bbc64295f2f2b6b5eb5b2cf5652d59849ee1dc683e2b3d476139539e858b74c545228089386cd79a4fe9546ad95a3f2e07824b628784191f55ddbb812f33ebc9e14523882d31e7451bc0bb159ec33226e5c000d29a8d494cd08dc8356ce2be056d1a5c3b6a5a26bf273b3062e5e4a20aedee3ffebeda439c66c981d56183ccd4194f5fc691eddbe121f"}}}}, &(0x7f0000000100)={0x0, 0x3, [0x3bc, 0x46f, 0xe6d, 0xc42]}) mq_notify(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040), &(0x7f00000000c0)}}) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f0000000040)=0x2b) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f00000000c0)) r3 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) dup2(r3, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000008f37)}) 2018/05/17 02:40:37 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x400000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:37 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2c0082, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x8000}}, 0x0, 0x2}, &(0x7f0000000100)=0x88) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000640)={r4, 0x1000, "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"}, &(0x7f00000001c0)=0x1008) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 511.880163] binder_alloc: binder_alloc_mmap_handler: 343 20001000-20004000 already mapped failed -16 [ 511.889779] IPVS: ftp: loaded support on port[0] = 21 [ 511.908779] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:37 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x1800], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:37 executing program 5: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) accept4$netrom(r0, &(0x7f0000002900), &(0x7f00000001c0)=0xfffffffffffffea9, 0x0) r1 = getpgid(0x0) wait4(r1, &(0x7f0000000040), 0x40000000, &(0x7f0000000140)) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f00002f7ff0)={0x2, 0x80000000004e20, @loopback=0x7f000001}, 0x10) recvmsg(r2, &(0x7f0000002880)={&(0x7f0000002600)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000002780), 0x0, &(0x7f00000027c0)=""/157, 0x9d}, 0x0) recvfrom(r2, &(0x7f0000001500)=""/4096, 0x101ae, 0x0, &(0x7f00000000c0)=@ipx={0x4, 0x0, 0x0, "69f36c437538"}, 0x80) read(r0, &(0x7f0000000080)=""/48, 0x30) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x1, 0x30, 0x3ac, 0xffffffff}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e23, 0x3f, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x2}}, 0xc4, 0x9, 0x40, 0x80000000, 0x81}, 0x98) recvmsg(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000280)=""/112, 0x70}, 0x0) [ 511.932464] binder: 343:350 ioctl 40046207 0 returned -16 [ 511.964652] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:38 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xa00000000000000}, 0x1c) [ 511.992260] binder: 357:358 ioctl 40046207 0 returned -16 [ 512.120902] device lo entered promiscuous mode [ 512.148440] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae71, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:39 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0xfdfdffff, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4200, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0xa5, "9424eb501c78dd3735a4a46ac4f790c8950cd20655652ebcb86ec79d66e6a47de32b41596ddfe861f281c714dc24af0936ec7a50488226622b6d90987fec5d2bb17924858753da8cb22dace4f9acbac5c841aa4ef159b817926db92d9fbbfbf9b6e22bfe733b44625b215d2f84fe89eede74a75bc4211b65cdb17fc0cbccf647e9844ea0525a21679ace520d956ae30b5553557119b2537cbf206fb63119246e3f1e04baa1"}, &(0x7f0000000100)=0xad) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x9, 0x1, 0x1, 0x53a, r2}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/05/17 02:40:39 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x2000000}, 0x1c) 2018/05/17 02:40:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x1f00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:39 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @empty, 0x0, 0x0, 'wrr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0x2) 2018/05/17 02:40:39 executing program 5: unshare(0x64000400) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = getpgid(0x0) fcntl$setown(r0, 0x8, r1) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='bpq0\x00') 2018/05/17 02:40:39 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xf401000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 513.189627] IPVS: ftp: loaded support on port[0] = 21 [ 513.197306] binder_alloc: binder_alloc_mmap_handler: 404 20001000-20004000 already mapped failed -16 2018/05/17 02:40:39 executing program 2: r0 = socket$inet6(0xa, 0x2000000802, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000240)={"72656375fbf0fffffffffbff00000002b3decaf54559689b0000bfa100"}, &(0x7f0000000080)=0x54) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x20, 0x20000) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f00000000c0)={0x4}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000000)=0x6, 0x4) 2018/05/17 02:40:39 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xf5ffffff00000000}, 0x1c) 2018/05/17 02:40:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x80fe], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 513.257560] binder: BINDER_SET_CONTEXT_MGR already set [ 513.291226] binder: 404:406 ioctl 40046207 0 returned -16 [ 513.304282] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20000000200012, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020ae46, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:39 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x74, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 513.465745] device lo entered promiscuous mode [ 513.480488] binder_alloc: binder_alloc_mmap_handler: 435 20001000-20004000 already mapped failed -16 [ 513.510255] binder: BINDER_SET_CONTEXT_MGR already set [ 513.519324] IPVS: ftp: loaded support on port[0] = 21 [ 513.554975] binder: 435:437 ioctl 40046207 0 returned -16 2018/05/17 02:40:39 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x700000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:39 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x5000000}, 0x1c) 2018/05/17 02:40:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x1800000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:39 executing program 2: r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000340)="73797363616c6c00e7b0010d5528919f6d94c9") getdents(r1, &(0x7f0000000200)=""/143, 0x29) getdents(r1, &(0x7f0000000040)=""/182, 0x22) 2018/05/17 02:40:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x301001, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x18}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa8, r4, 0x200, 0x70bd25, 0x25dfdbfb, {0xf}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffffffffff7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8001}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x81}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf99b}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:39 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xffffffff00000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x541b, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:39 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f0000000000), 0x1005, &(0x7f00000001c0)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000000280)='./file0\x00') r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x100) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) accept4$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000003c0)={'irlan0\x00', 0x0}) socket(0x6, 0x80807, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004340)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004440)={0x0, @remote, @rand_addr}, &(0x7f0000004480)=0xfffffffffffffd85) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000400)=0x100000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000044c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000045c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004600)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000004700)=0xe8) recvmmsg(0xffffffffffffffff, &(0x7f000000b4c0)=[{{&(0x7f0000006600), 0x80, &(0x7f0000007740)=[{&(0x7f0000006680)=""/4096, 0x1000}, {&(0x7f0000007680)=""/165, 0xa5}], 0x2, &(0x7f0000007780)=""/171, 0xab, 0x7}, 0x9}, {{&(0x7f0000007840)=@hci={0x0, 0x0}, 0x80, &(0x7f0000009bc0)=[{&(0x7f00000078c0)=""/84, 0x54}, {&(0x7f0000007940)=""/213, 0xd5}, {&(0x7f0000007a40)=""/47, 0x2f}, {&(0x7f0000007a80)=""/4096, 0x1000}, {&(0x7f0000008a80)}, {&(0x7f0000008ac0)=""/194, 0xc2}, {&(0x7f0000008bc0)=""/4096, 0x1000}], 0x7, 0x0, 0x0, 0x6a9}, 0xf1}, {{&(0x7f0000009c00)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000009fc0)=[{&(0x7f0000009c80)=""/230, 0xe6}, {&(0x7f0000009d80)=""/197, 0xc5}, {&(0x7f0000009e80)=""/192, 0xc0}, {&(0x7f0000009f40)}, {&(0x7f000000a040)=""/131, 0x83}, {&(0x7f0000009f80)=""/36, 0x24}, {&(0x7f000000a100)=""/85, 0x55}], 0x7, &(0x7f000000a180)=""/63, 0x3f, 0x7}, 0x9}, {{&(0x7f000000a1c0)=@sco, 0x80, &(0x7f000000a300)=[{&(0x7f000000a240)=""/108, 0x6c}, {&(0x7f000000a2c0)=""/61, 0x3d}], 0x2, &(0x7f000000a340)=""/174, 0xae, 0x2}, 0x3f}, {{&(0x7f000000a400)=@sco, 0x80, &(0x7f000000a540)=[{&(0x7f000000a480)=""/33, 0x21}, {&(0x7f000000a4c0)=""/18, 0x12}, {&(0x7f000000a500)=""/55, 0x37}], 0x3, &(0x7f000000a580)=""/223, 0xdf, 0xfff}, 0x400}, {{&(0x7f000000a680)=@sco, 0x80, &(0x7f000000a8c0)=[{&(0x7f000000a700)=""/191, 0xbf}, {&(0x7f000000a7c0)=""/242, 0xf2}], 0x2, &(0x7f000000a900)=""/36, 0x24, 0x1000}, 0xf985}, {{0x0, 0x0, &(0x7f000000ad40)=[{&(0x7f000000a940)=""/182, 0xb6}, {&(0x7f000000aa00)=""/216, 0xd8}, {&(0x7f000000ab00)=""/151, 0x97}, {&(0x7f000000abc0)=""/165, 0xa5}, {&(0x7f000000ac80)=""/163, 0xa3}], 0x5, 0x0, 0x0, 0x7}, 0xffffffffffff8000}, {{&(0x7f000000ad80)=@llc, 0x80, &(0x7f000000af00)=[{&(0x7f000000ae00)=""/111, 0x6f}, {&(0x7f000000ae80)=""/90, 0x5a}], 0x2, &(0x7f000000af40)=""/33, 0x21, 0x3}, 0x5fa0}, {{&(0x7f000000b000)=@nfc, 0x80, &(0x7f000000b1c0)=[{&(0x7f000000b080)=""/157, 0x9d}, {&(0x7f000000b140)=""/81, 0x51}, {&(0x7f000000af80)=""/8, 0x8}], 0x3, &(0x7f000000b200)=""/53, 0x35, 0xfd}, 0x28}, {{0x0, 0x0, &(0x7f000000b440)=[{&(0x7f000000b240)=""/243, 0xf3}, {&(0x7f000000b340)=""/87, 0x57}, {&(0x7f000000b3c0)=""/122, 0x7a}], 0x3, &(0x7f000000b480)=""/26, 0x1a, 0x4}}], 0xa, 0x1, &(0x7f000000b600)={0x77359400}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f000000b9c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000b980)={&(0x7f000000b640)={0x30c, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1}, [{{0x8, 0x1, r2}, {0x1b4, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0xa7e3, 0x31a, 0x0, 0x4}, {0x100000000, 0x4, 0x4, 0x7ff}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x40, 0x400, 0x4, 0x15b}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r6}, {0x134, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r7}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r10}}}]}}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44) umount2(&(0x7f0000000180)='./file0\x00', 0x2) [ 513.761925] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:39 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f00000000c0), 0x14) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000800)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/17 02:40:39 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x1f000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000040)=""/11, 0x155) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x10000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/67) r2 = syz_open_pts(r1, 0x207f) ioctl$TCXONC(r2, 0x540a, 0x2) 2018/05/17 02:40:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae60, &(0x7f00000015c0)={0x0, r2}) [ 513.803482] binder_alloc: binder_alloc_mmap_handler: 474 20001000-20004000 already mapped failed -16 [ 513.831808] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:39 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x5c}, 0x1c) 2018/05/17 02:40:39 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x5966, 0x1f, 0x7, 0xfb, 0x1, 0x8, 0x6, 0x77e, 0x8, 0x4, 0x7, 0x725f0394, 0x3}, {0x9c0, 0x7, 0x5, 0x80, 0x9, 0x8000, 0x8, 0x5, 0x2, 0x10000, 0x9, 0x24c, 0x4}, {0x80, 0x1, 0x0, 0x9, 0xe0af, 0x81, 0xaa, 0xff1c, 0x4, 0x1, 0x4, 0xff, 0x40}], 0x7}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 513.884107] binder: 474:478 ioctl 40046207 0 returned -16 2018/05/17 02:40:40 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x6, 0x800000020001, 0x15d60fce}, 0x2c) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in6={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, [], 0x1f}, 0x400}, @in={0x2, 0x4e21, @loopback=0x7f000001}], 0x4c) 2018/05/17 02:40:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfd000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 514.033344] device lo entered promiscuous mode 2018/05/17 02:40:40 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x74000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:40 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xfc00000000000000}, 0x1c) [ 514.082358] IPVS: ftp: loaded support on port[0] = 21 [ 514.210651] binder_alloc: binder_alloc_mmap_handler: 521 20001000-20004000 already mapped failed -16 [ 514.251299] binder: BINDER_SET_CONTEXT_MGR already set [ 514.272639] binder: 521:523 ioctl 40046207 0 returned -16 2018/05/17 02:40:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc008ae67, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:40 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) 2018/05/17 02:40:40 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfc000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:40 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0xc000, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='gretap0\x00', 0x7}) 2018/05/17 02:40:40 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x800000000000000}, 0x1c) 2018/05/17 02:40:40 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x7a00, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:40 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x5966, 0x1f, 0x7, 0xfb, 0x1, 0x8, 0x6, 0x77e, 0x8, 0x4, 0x7, 0x725f0394, 0x3}, {0x9c0, 0x7, 0x5, 0x80, 0x9, 0x8000, 0x8, 0x5, 0x2, 0x10000, 0x9, 0x24c, 0x4}, {0x80, 0x1, 0x0, 0x9, 0xe0af, 0x81, 0xaa, 0xff1c, 0x4, 0x1, 0x4, 0xff, 0x40}], 0x7}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:40 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfc00000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 515.023210] IPVS: ftp: loaded support on port[0] = 21 [ 515.034408] binder_alloc: binder_alloc_mmap_handler: 543 20001000-20004000 already mapped failed -16 2018/05/17 02:40:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfec00000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team_slave_1\x00', 0x0}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x422a00, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x1, 0x10, 0x0, 0x101}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r3, 0x8a, "d899e02c2a9c99dde7ae068cfd95fde6727c5aac109e51fe92284543ea5f4c462fc1f9c4d823dbacc8782d8b2980068e171e5a0b21435828b79217205026081041ce5133c08a426ecca48513b3851db26f19c1d86e1fbdc09a45e49c83c433dbd432ef7c9c9f9c1264c5333f8a2c25062e30cc2dab895745b2f13f052eaca2a63d88baa113720707c244"}, &(0x7f0000000240)=0x92) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000000000000000000ca3ca33c74b89af7f7db9f4200000000", @ANYRES32=r1, @ANYBLOB="08000200000000001400060004000000080000000000000000000000"], 0x34}, 0x1}, 0x0) [ 515.116379] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:41 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xfec00000}, 0x1c) [ 515.142263] binder: 543:545 ioctl 40046207 0 returned -16 2018/05/17 02:40:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4010ae67, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:41 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x2000000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="f837b9732beab8d6355ce4d72f4c40dafe1d04b3043719d3be26639c25c79c4bb0ad4c6f3abaf7dc73bc16e39f2c2de6768adfb4e4be15cfe143c7b7820a81342c019e0c", 0x44}, {&(0x7f00000001c0)="db88fc6bf34958861432dce090ba9351652d2ab76cc4a418d9351cadd60d34240b2c0e0be46c934d4f0ee90c86a3b18c186e688e58e3987cc96293bef9f43b1db95e6d362f12fe833ae9c7bf860191af6f3d1d794aeb8e982a3aa4fa2059a63b44a26e3d8e974773c9077dc8a7c493f43110eeafef2e828872c853936dfcf0e6e8e0627040c7776e0f6f10704cb822549232b274ad82d234b99db2a248b3a4aa387c80f8d9e38abc9fff356136bf4124e76fbcc717a2a6471aabc344906bf4f77230281ee5ee3b429ac92a2ced01", 0xce}], 0x2, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 515.335455] binder_alloc: binder_alloc_mmap_handler: 575 20001000-20004000 already mapped failed -16 [ 515.396281] device lo entered promiscuous mode [ 515.408572] binder: BINDER_SET_CONTEXT_MGR already set [ 515.433761] binder: 575:577 ioctl 40046207 0 returned -16 [ 515.434429] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:41 executing program 2: r0 = epoll_create1(0x0) read(r0, &(0x7f0000000080)=""/30, 0xffc4) 2018/05/17 02:40:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:41 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000040)={[{0x5966, 0x1f, 0x7, 0xfb, 0x1, 0x8, 0x6, 0x77e, 0x8, 0x4, 0x7, 0x725f0394, 0x3}, {0x9c0, 0x7, 0x5, 0x80, 0x9, 0x8000, 0x8, 0x5, 0x2, 0x10000, 0x9, 0x24c, 0x4}, {0x80, 0x1, 0x0, 0x9, 0xe0af, 0x81, 0xaa, 0xff1c, 0x4, 0x1, 0x4, 0xff, 0x40}], 0x7}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:41 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xfc000000}, 0x1c) 2018/05/17 02:40:41 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x20000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x2, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:41 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x5000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:41 executing program 4: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3, 0x2) recvmsg$kcm(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/152, 0x98}, {&(0x7f0000000280)=""/197, 0xc5}, {&(0x7f0000000100)=""/54, 0x36}, {&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000000640)=""/89, 0x59}], 0x5, &(0x7f00000006c0)=""/67, 0x43, 0x9}, 0x2000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0xffffffffffffffe3, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000440)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000540)=0xe8) connect$can_bcm(r4, &(0x7f0000000580)={0x1d, r5}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/17 02:40:41 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="1a00000089b3bf6173c65d90fc089f2c261917a278f5d8f3d6521286c97057568c5b19e3bdd09afd532ff776f2f551dfc7926a3dd86deb1405ce701b92dcfa988822fd8919f056c5a39763ee42f153214baf3cef1cee648d1e7acf"], &(0x7f00000002c0)=0x22) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000300)={r1, @in6={{0xa, 0x4e21, 0x37, @mcast1={0xff, 0x1, [], 0x1}, 0x1ff}}, 0xfffffffffffffffd, 0x5b, 0x1, 0x1, 0x8f}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000400)={r1, 0xd6, "08a980c27460020150e49c5b5374d51846afa3d970a2a2702f31e139e3c29797965d44f2a87c5979007315b6df127b1e17060197d7a8243a79dca5e9f7193ca8e1393be5eec56fab164b344903f18d15e6bfac2c26e63523a31e1f3c50fb7133e8d7617fb1bdac791a212a69653ceed30cba42df6387190f02d685ab12298b57ba2502f154c86696debee22ef42440fbdfe0f640c838c0d5365020609c84ec2944c68c49c87820339fb1ef080da896e6281dee50a3ff4cf6b62357bc631655c2f161f6e364b671cdd84f93f724f6a1afb638a91a2f8c"}, &(0x7f0000000500)=0xde) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/162, &(0x7f0000000180)=0xa2) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x8000}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r2, 0x81}, 0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x2, 0x504, [0x20000700, 0x0, 0x0, 0x20000984, 0x20000bd4], 0x0, &(0x7f0000000000), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x15, 0x0, 0x0, 'team0\x00', 'gretap0\x00', 'veth0_to_bridge\x00', 'irlan0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xd0, 0x224, 0x254, [@cluster={'cluster\x00', 0x10, {{0x0, 0xffffffffffffffe0}}}, @vlan={'vlan\x00', 0x8}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:dhcpc_exec_t:s0\x00'}}}, @common=@redirect={'redirect\x00', 0x4}]}, @snat={'snat\x00', 0xc, {{@random="b64c3e8a9f7c"}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0x5, 0x0, 0x0, 'veth1_to_bridge\x00', 'syz_tun\x00', 'teql0\x00', 'veth0_to_bond\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x1c0, 0x1f0, 0x220, [@m802_3={'802_3\x00', 0x8}, @comment={'comment\x00', 0x100}]}, [@arpreply={'arpreply\x00', 0xc, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @arpreply={'arpreply\x00', 0xc, {{@link_local={0x1, 0x80, 0xc2}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}]}, 0x554) r3 = add_key$user(&(0x7f0000000540)='user\x00', &(0x7f0000000580)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000005c0)="4fe77e298bf076be9b594227d8b6195e867c693066076c706aea3ebab2af5b77dbc9c53579cb2b3a1916bc4eac6796e5bdada0feab7a82c3fe00ddf109cdd86c2d7b0a105d0cd67d9f7f469ce94188a563ccf65a1f255530100d47", 0x5b, 0xfffffffffffffffc) rt_sigtimedwait(&(0x7f0000000280)={0x2c79}, &(0x7f00000006c0), &(0x7f0000001c40), 0x8) keyctl$describe(0x6, r3, &(0x7f0000000c40)=""/4096, 0x1000) 2018/05/17 02:40:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfd00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 515.683610] binder_alloc: binder_alloc_mmap_handler: 604 20001000-20004000 already mapped failed -16 [ 515.704728] IPVS: ftp: loaded support on port[0] = 21 [ 515.728293] binder: BINDER_SET_CONTEXT_MGR already set [ 515.744431] binder: 604:606 ioctl 40046207 0 returned -16 2018/05/17 02:40:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae64, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:41 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xe8030000}, 0x1c) [ 515.801093] xt_cluster: node mask cannot exceed total number of nodes 2018/05/17 02:40:41 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x5000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:41 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:41 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x1f00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:41 executing program 5: mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000280)=""/189, 0xbd) [ 515.908859] xt_cluster: node mask cannot exceed total number of nodes [ 515.967122] binder_alloc: binder_alloc_mmap_handler: 634 20001000-20004000 already mapped failed -16 [ 515.981606] device lo entered promiscuous mode 2018/05/17 02:40:42 executing program 2: unshare(0x400) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x9}, &(0x7f00000000c0)=0x8) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000001c0)={r1, 0xffff, 0x97, "f01141d60724744ca80fc5f10103b0fcd9e4402c873ed1a21145deddf6c49869fd64614759ded5758e7d42ba0e6da19e4d154b1fe440d49ada09748e22917c01772bca244cdf063061e7d14a129136f8017c4c1fa24cc785bcaaf2772757de0afa62379697b662d7549a1b8412593051a9ceaea1d139c669f6a46b65ccabca627460f44cd8509ff69f27a7d32f35a15e2a009b1c5f9391"}, 0x9f) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1}, 0x8) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000100)={0x0, 0x2000000001, 0x2, &(0x7f0000000080)}) 2018/05/17 02:40:42 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x20000, &(0x7f0000000080)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) 2018/05/17 02:40:42 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xa}, 0x1c) [ 516.035881] binder: BINDER_SET_CONTEXT_MGR already set [ 516.040765] IPVS: ftp: loaded support on port[0] = 21 [ 516.071152] binder: 634:638 ioctl 40046207 0 returned -16 2018/05/17 02:40:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x40049409, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x7000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x7a00000000000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:42 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) connect$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x4, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1e) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x3, 0x2, 0x3, 0x1, 0x40}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x0, 0x7, 0x8008, 0x0, 0x22, 0xffffffff, 0x1ff, 0xffffffffffffffff, r1}, 0x20) socket$unix(0x1, 0x1000000002, 0x0) unshare(0x8000001000a) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/05/17 02:40:42 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x3, 0xf3861ef1f7164591}, 0xfff2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xffffffffffffffe0, 0x180) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x3, 0x8, 0x20, 0x2, 0x8, r4, 0x6}, 0x2c) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000080)={0xffffffff, 0xb37, &(0x7f0000000000)="abe838512ab343b2563a89d561efa22e3d830da18426e9893b254ffe0ff9903fc17d5d6a3ff08d5a0d63d89abab74f5014950d661cc2730229942deeb9c6a46a863fa732bc87bf183a655e47ee652705fbad67fa174398165a0e22255d97172c8c45ef92992f4962ece3dbd11ec75b549273daf9697565bb7bbb772c3f", &(0x7f00000001c0)="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", 0x7d, 0xfd}) 2018/05/17 02:40:42 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x1100, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:42 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xffffffff00000000}, 0x1c) 2018/05/17 02:40:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$KIOCSOUND(r3, 0x4b2f, 0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000080)=""/130) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000003c0)=ANY=[@ANYBLOB="2e706cf52e1e72277f037b05bc9aeb792aaa2f42a4bd8d55f96f8f3a15e9d93aa6ce9f63a719e18ad5215615698f1dbbd44005b0f348fba3e1be2af2022ec4c9a79165372aca214ac14d9427673290f04c3dea33c6a0e72c0c3ac64ac6916a337f5decaeb8f9a20c07061c457941293dd8fbae26d0a22dd7ed9d4c9c56cb9fffbe9feb1949fb049921276544a6fefb2d9ba51e3da41d1ddd14fed5c045754044a9962680a55b1e524f1e19919daf1678d3e14c0a0baed736c77dca942e1e7e5fdbb8686fed783de44f759bddfe4cc538fca459c7d9b85e90294c9bf6088666e46005cfd3e08f5943c9d7f834567f90153bfc413aa331ed0f2a323f", @ANYRES32=r1, @ANYBLOB="02f221165bb476c064c66e83bebcad1fcb0162741e1306ec03eed3a216a88b062240a754337f3097b5262b26d10407df8f94e313fb93a90f4775f4a7bfdb23765b7fca3f3759c091cdb8173d31dce50403e292609d788ab30c3a198b723edda5b9a139b4ab61978203911ee7bb1ff58564ad32fc5f388af533bbdae5a2bcedb691ced08d8cab56d109188c1404244cc0768d8a074be96c701cca3ced713f662e71a1bee57121d0593e689decb99c5c8096ad58fa0dc739af98a967815f784a01029501eba73fd591c0bf634c6a6db46395bf0cf8ee37e7ecf3e50689980a4b2f482261e1b82d2e99ba6e5d8a3bfc", @ANYPTR64, @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYBLOB="e63e446f63c5ef3152e33df3fba553fe79d09263cc15674a4761f017d5a13b41b958d9550bec7a07e246c481efaba4b0210546f04e353bdd8b9f07c949f81e2d5911d7ed963a9d467a3c67a451f8626ee8eae88bcdba05b473d434d6358547e3ae219bfa06ebae4a871c4a"]]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x480, 0x0, 0xd07ee511}]}) [ 516.322668] binder_alloc: binder_alloc_mmap_handler: 676 20001000-20004000 already mapped failed -16 [ 516.329452] IPVS: ftp: loaded support on port[0] = 21 [ 516.354209] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfec0], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:42 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10201, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f00000000c0)={0x9, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0x201, @tick=0xce0, 0x7952, {0x7, 0x905b}, 0xffff, 0x0, 0x100000001}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40086437, &(0x7f0000000100)={r2, 0x2}) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000280)={0x5, 0xffffffffffffcc16, 0xffff, 0x3, 0x200}) sendto$inet6(r1, &(0x7f0000000140)="381ce945f32d3da019d0944f3e944a67651c5b09681e841697a316df4f6ec8635251fe19b1bccc71a93705e006b241de719d845ee838f42b3fcbafcee80bbb108970da077f515d1ccd4f6c64e71e018d782ceebd3948a714ee563752804b98890b5093969f3b039880796e5cf4d49a82b0e072e3088759f327a7fed792081c161ac22289805977dc8fa4e5d7f1dea77ddd9781d678b73e4a4bc109757357a98eab63496ffae823868f8528e8781a68f42eb8def94bec4d7593e84197983b725864fd61bc5068eed8cac286789cc4c9e57056affd7aabcca648f3e1ef0cf4c8c6a2d1030002712b1e0db4700472027ca6e3b6967564", 0xf5, 0x20000000, &(0x7f0000000240)={0xa, 0x4e22, 0x100000001, @dev={0xfe, 0x80, [], 0x15}, 0x401}, 0x1c) [ 516.383780] binder: 676:678 ioctl 40046207 0 returned -16 2018/05/17 02:40:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4010ae42, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:42 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x100000000000000}, 0x1c) [ 516.633523] device lo entered promiscuous mode [ 516.669902] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:42 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000007811f17a22d0f8cb0000000000000008000100e0000001"], 0x1c}, 0x1}, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)={'syz0', "50caf8e063a74727188b796bb4e868914b748966958f7b43be3fc4a3eefc61178a024c290d9f7ddebb11910f5f4d3199e402b734af696ded407fbfcc2c045affe39dcee492e71412fff8d3598446fd83ed5be737a73b3c5e921429c2221e92a8ef11c2a8cdcfb935da2efc2516d71eb8a49e8e0790d3cfbcff221219f740a62a8bacd4af3b0ab16b2f610c13cf1662b0916702d136de801e6d55b47b2ba1a370f36ae1fda960a795eb8f8bac45aca91ca559b7b40b7a4ce990689a95f9e86db5cdc4e9977cdc2309a8c0320fed450052e8f078e80a3ec57f6081014b3c1f"}, 0xe2) memfd_create(&(0x7f0000000000)='syz0', 0x2) 2018/05/17 02:40:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x68, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x18], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x5460, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:42 executing program 2: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, &(0x7f00000002c0)=',') r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x8000, 0x0) recvmsg$netrom(r0, &(0x7f0000000840)={&(0x7f0000000300)=@ax25={0x3, {"2fe3c32fadec2e"}, 0x9}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000340)="438aa3c055c059e7e2b7c3b17db1d66611f8f02b2591cc210d32682bb8c2eb56a1c5f784fc169d2bf80527b374adaa345d62ac2486b7871065342ae5ada8bf1469167e6725353f3032f0f3c5827e67c21875f8fec4a12ed2e7e850f7614f67fb7c736e1a7a773586cff5e83e3b3265fcbfa6f6c0c8cda1a05adea02dec98226647", 0x81}, {&(0x7f0000000400)="d6ef96337151e54611497c70d9a1020785614635af563f317038a12b283f69921095329d23e33ea7d4a1823ccaa25465f8a414db674e1407aff195f3a41dd019cb7a629936438c42c44bd5db4f917eb5f7201169a73fb33fa3bceee0c31e3c16a9c077a88430d33d550747b25a7c481a444650575a948ba86209848f28a5aa7a7ba4cca42143d7365d71735ddb69671133457da9d2024bacf16a5baa21535f6e83146729645d808bcd28197e3bbe909ec146828e39efc2ea98", 0xb9}, {&(0x7f00000004c0)="ab25e02a09f41768a693052efacdb7b0a8c18695348b1c963ab132af96d77b18f3cb33fb", 0x24}, {&(0x7f0000000500)="cfd6021957119ee3668db30e5939064e1d4b944d8394a33ebeb2fa81657b61d994a6ce927d3c3e54b2ed340069409644fbb53d8fc237da7488e75a91bbbfb64b79abde4cae0afd5c01787351953408b0c788394a17e95ceff4aa13a620484c9d4a06da6fa015e344c9efbe77475b1c981f9c45b7190284c01b73b911e56da9f64cc9b467fa3e4e5c70fcf5542aee069979fc4f2a1a7a04e48b5298a9a2a79dc2bbc6806ad4cb504f987459b92d83cea4c259c598d9fcd277a220c9d9f8e00db440f8e8c18ff52728ee25f28c44d478e755068ee18b", 0xd5}], 0x4, &(0x7f0000000640)=[{0x18, 0x116, 0x8, "41ae3871647434ed52"}, {0xe0, 0x1ff, 0x3, "3bb83b24bb9731ec4b2955894c757d1d69f5601488527f05c3242700679bf80f4cbf3c56a652e354d450bd0264ba768d52aa4817ec69e757e4119fe8901cb734c7a822ebfc71029e16e7a8bb7a3ae5707fb6fd5cf3efa97207b4bd7beca87dc534ff015fab6873f0c4044e8227fc0e0840ff27982159a6d24d1709146beca6354e4043cfdceb56057f01320b2f530e979d5f14ce3d8c4d5a14edf20a3d81790ba72caf87fe9c2534bdbdfe9bcb171f3269c14ea666c81d3bfe08a041d6962dcf7edc7a42e58b187689474e48075c9008241cc11e"}, {0xd4, 0x108, 0x5, "a9a02875ce98e417cee910c85b7e395efe8abfb5c8eeccf7a75cb99994b879599908cdfd0dd73d71e2e2b7c1cf8bb199c8e698ac7115ac9819739b535c5d9b07f5487f6815e7ca703274d36532a73b679100558fd78c656f258ea1e572120385f2f4654f3c43513c978ec781ed06b75037afbc62c176da9ca43388334b73c452b4ec181f168d7875e7badd6ee18a8d51eec2d4d6d3e368ec5e77cc29cb526ccdbc49919de33de64a1bda0c4eaef09ebb3a7f24728d94f5bc10ecc04615452dc06ce2d1ce77"}], 0x1cc, 0xc044}, 0x10000) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x48000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r2, 0x510, 0x70bd26, 0x25dfdbfc, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x74}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000814}, 0x20000000) 2018/05/17 02:40:42 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x7, 0x2) 2018/05/17 02:40:42 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x6, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:42 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xfec0000000000000}, 0x1c) 2018/05/17 02:40:42 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xff000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 516.806611] binder_alloc: binder_alloc_mmap_handler: 725 20001000-20004000 already mapped failed -16 [ 516.834965] IPVS: ftp: loaded support on port[0] = 21 [ 516.845777] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:42 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xfec0}, 0x1c) 2018/05/17 02:40:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000380)={0x10001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}}, 0x104) [ 516.875322] binder: 725:733 ioctl 40046207 0 returned -16 2018/05/17 02:40:42 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4068aea3, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:42 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x170, "4852041093e3b9d0203caab63ef1dcce121fbb1c6b41520de9fc7692cd0a9b9a0554a87606adee1a1f7b46d19e6cb677e00b87ff5dd6d7c9591f8f19ccdb60d7c7a66d00e090d789454b158410ab99a3965a0190042ce873f060fa7b7320659e0c4fc2d83f9b364073518d0296dc027a7bd098b12173eeb07e3c0abf83c5156fa36eda5e7403550b7a1d4ad3d7bea09fe695c02686b9255606e438748a3203b85632446b425b4fad66b67a1e18110fa12bf79e03ff264f8acb99d0b1669487a2e50ebda4cbde7aa4ebe6b464d3ba56bc73a223c8fa9e33c437f349220457458a12c6dee2c1aa48364b18b065597742ef3d8b03612b113b8a2b4986260a68d31bf28ac0911b49d8cd7140ceaef76a365880f5663a5f137d16efc788a3b554d8cda997cc8bfdd0f677b9a0d4381c4c2397cedd994c0814dc1889c94435418965cb1bd9a0ed01dd23af6932007c1ef44f42995cda292eb7f4e53970aef2621ce75856b48b745cb8deff24f36beff1bef5e3"}, &(0x7f0000001180)=0x178) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000000, 0x410a00) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={r1, 0x3f13}, 0x8) 2018/05/17 02:40:43 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x3000000, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:43 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x5, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x11000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:43 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x500}, 0x1c) 2018/05/17 02:40:43 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x40) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x50840, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={r1}) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000140)={0x57c, 0x4, 0x6, 0xad, 0x6, 0x6, 0x6, 0xff, 0x401, 0x3, 0x4}, 0xb) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x20000003e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) sendmmsg(r2, &(0x7f000000a040)=[{{&(0x7f0000000440)=@in={0x2, 0x0, @loopback=0xac141400}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)='H', 0x1}], 0x1, &(0x7f0000001940)}}], 0x1, 0x40) [ 517.062751] binder_alloc: binder_alloc_mmap_handler: 764 20001000-20004000 already mapped failed -16 2018/05/17 02:40:43 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x7], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 517.147506] binder: BINDER_SET_CONTEXT_MGR already set [ 517.160140] device lo entered promiscuous mode [ 517.169604] binder: 764:765 ioctl 40046207 0 returned -16 [ 517.243487] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae44, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x1000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000040)) 2018/05/17 02:40:44 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xe00000000000000}, 0x1c) 2018/05/17 02:40:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x500, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x100000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:44 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x900) accept4(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r1, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 2018/05/17 02:40:44 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) readv(r0, &(0x7f0000001780)=[{&(0x7f0000001240)=""/158, 0x9e}, {&(0x7f0000001300)=""/172, 0xac}, {&(0x7f00000013c0)=""/173, 0xad}, {&(0x7f0000001480)=""/133, 0x85}, {&(0x7f0000001540)=""/116, 0x74}, {&(0x7f00000015c0)=""/113, 0x71}, {&(0x7f0000000140)=""/60, 0x3c}, {&(0x7f0000001640)=""/142, 0x8e}, {&(0x7f0000001700)=""/105, 0x69}], 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') setsockopt$inet6_buf(r1, 0x29, 0x0, &(0x7f0000000040)="65054cd43238a9d13d4a3954ff54e3def5f45a7e770c628fc62dc966e31209bd25413da8da37d9f6309db84f40b3b2ae03b4c7a99542a8ae8bed39c73a7fb655a61ff52df20389c2be1168fb087aa57236d3bf7f4847f1c298adc131c7edfe048272b04531bbeec1106b80133f461beeb4a61bfa2474077c2ad2f2b8503c4757d73f7e2b152f857a2c23b17a63ba250a4a1dc1179f93ad43b6c096a82c050ca05ad69631ba25506e6cdc93fdb1b972868cf47fd57f6fc5e0bb823733a0a358d1b4b3a737981e0115dbe7c6a59cf0ff3340a832b144793c474ad732179b223949291d215374d7ae287f5a94e34aa11b63", 0xf0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x0, 0x0) readv(r2, &(0x7f0000001200)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) tee(r2, r2, 0x3f, 0x5) 2018/05/17 02:40:44 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x3000000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 518.098021] binder_alloc: binder_alloc_mmap_handler: 808 20001000-20004000 already mapped failed -16 [ 518.126121] binder: BINDER_SET_CONTEXT_MGR already set [ 518.141892] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xff00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:44 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x900) accept4(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r1, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) [ 518.154713] binder: 808:809 ioctl 40046207 0 returned -16 2018/05/17 02:40:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) write$evdev(r0, &(0x7f0000000200)=[{{0x77359400}}], 0xffa7) socketpair(0x19, 0x807, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) r2 = mmap$binder(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x8, 0x813, 0xffffffffffffffff, 0x0) write$sndseq(r1, &(0x7f0000000240)=[{0x1e3, 0x0, 0x2, 0xe9af, @tick=0x5, {0x20, 0x10000}, {0xffffffff, 0x80000001}, @quote={{0x0, 0x8}, 0x2, &(0x7f0000000100)={0x0, 0x8001, 0xffff, 0x3, @time, {0xcf, 0x8}, {0xa00, 0x800}, @time=@time={0x77359400}}}}, {0x0, 0xbc09, 0x6, 0x40, @tick=0x5, {0x9, 0x101}, {0xba, 0x6}, @addr={0x576}}, {0x8000000000000, 0x75, 0x8001, 0x400000000, @tick=0x7, {0x8, 0x9}, {0x20000, 0x2}, @addr={0x3, 0xfffffffffffffffa}}, {0x0, 0x40, 0x0, 0xffffffff, @time={0x77359400}, {0x1000, 0x89c2}, {0x1, 0x6}, @result={0x1, 0x2}}, {0x8, 0x80000000, 0x0, 0x0, @tick=0x1ff, {0x3d42, 0x7088}, {0x9, 0x5}, @control={0x6bf, 0xfffffffffffffffd, 0xddb1}}, {0x60c, 0x6ed, 0x9, 0x1ff, @tick=0x1, {0x20, 0x80000000}, {0x5, 0x1240000000}, @note={0x100000000, 0x1, 0x2, 0x8, 0x7fffffff}}, {0x1, 0xffffffffffff0e1e, 0x8, 0x10000, @tick=0x1, {0xfff, 0x3}, {0x0, 0x5}, @result={0x5, 0x401}}], 0xc4) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000040)={r2}) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/05/17 02:40:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc00caee0, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:44 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x1000000}, 0x1c) 2018/05/17 02:40:44 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f0000000000)={0x800003e, 0x4, 0x1a}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$packet(0x11, 0x0, 0x300) [ 518.477506] device lo entered promiscuous mode [ 518.502641] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x8], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:44 executing program 5: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000680)='/dev/urandom\x00', 0x20000, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)="326ca5fefe045a6fc0927eec468c65998b352177a09a0178fe481d0a416292d40c42f07c9b08b499d9dbff26816008d85e9999d7bfb13da286539cafcfc592d4b7b42418f3365d58023c493a8131b1cc83498080bc6d235f26b92d8932366f6c38927d547f512b9cc452ada97487dedc25f7348102", 0x75) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) modify_ldt$write(0x1, &(0x7f0000000000)={0x1d2, 0xffffffff, 0x5400, 0xb350, 0x8, 0x0, 0x6, 0x1, 0x7, 0x6c521918}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15", 0x4) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_aout(r2, &(0x7f0000000dc0)={{}, "", [[]]}, 0x120) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)=""/220, 0xdc}], 0x1, &(0x7f0000000d40)=""/91, 0x5b}, 0x0) 2018/05/17 02:40:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'ip6gre0\x00', {0x2, 0x4e24, @multicast1=0xe0000001}}) 2018/05/17 02:40:44 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x900) accept4(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r1, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 2018/05/17 02:40:44 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x630b, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x5452, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:44 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xf401}, 0x1c) 2018/05/17 02:40:44 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xf7ffff7f, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 518.651957] binder: 872:874 ERROR: BC_REGISTER_LOOPER called without request [ 518.655008] IPVS: ftp: loaded support on port[0] = 21 [ 518.659688] binder: 872:874 unknown command 0 2018/05/17 02:40:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x700000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:44 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x900) accept4(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r1, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 2018/05/17 02:40:44 executing program 5: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) unshare(0x2000400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4) 2018/05/17 02:40:44 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xfe80}, 0x1c) [ 518.736150] binder: 872:874 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:44 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x1, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000040)=@pic={0x2a6, 0x5ab, 0x19cc, 0x0, 0xbc, 0x20, 0x6a, 0x978, 0x60e, 0x5, 0xffff, 0x66, 0x6a50, 0xffffffffffff98cc, 0x800, 0x20}) r4 = add_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = getpgid(0xffffffffffffffff) tkill(r5, 0x8) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)='/dev/md0\x00') syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x101800) openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x800, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000640)) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000380)) 2018/05/17 02:40:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4008ae61, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:44 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 518.808523] binder: BINDER_SET_CONTEXT_MGR already set [ 518.818768] binder_alloc: binder_alloc_mmap_handler: 872 20001000-20004000 already mapped failed -16 [ 518.842311] binder: 872:904 ERROR: BC_REGISTER_LOOPER called without request [ 518.849655] binder: 872:904 unknown command 0 2018/05/17 02:40:44 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x900) accept4(r0, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 2018/05/17 02:40:44 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xf5ffffff}, 0x1c) [ 518.934230] binder: 872:874 ioctl 40046207 0 returned -16 [ 518.967321] binder: 872:904 ioctl c0306201 20000340 returned -22 [ 519.099803] device lo entered promiscuous mode [ 519.132534] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:45 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x1, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000040)=@pic={0x2a6, 0x5ab, 0x19cc, 0x0, 0xbc, 0x20, 0x6a, 0x978, 0x60e, 0x5, 0xffff, 0x66, 0x6a50, 0xffffffffffff98cc, 0x800, 0x20}) r4 = add_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = getpgid(0xffffffffffffffff) tkill(r5, 0x8) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)='/dev/md0\x00') syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x101800) openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x800, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000640)) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000380)) 2018/05/17 02:40:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x400c630f, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:45 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x900) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 2018/05/17 02:40:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0xfec0000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:45 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x3}, 0x1c) 2018/05/17 02:40:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4008ae48, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:45 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x1000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x111000, 0x0) write$vnet(r0, &(0x7f0000000200)={0x1, {&(0x7f0000000040)=""/253, 0xfd, &(0x7f00000001c0)=""/62, 0x1, 0x3}}, 0x68) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000300)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xffffffffffffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 519.254091] binder: 941:942 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 519.261176] binder: 941:942 unknown command 0 2018/05/17 02:40:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 2018/05/17 02:40:45 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x2000000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:45 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x9}, 0x1c) [ 519.303090] IPVS: ftp: loaded support on port[0] = 21 [ 519.320663] binder: 941:942 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:45 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020ae76, &(0x7f00000015c0)={0x0, r2}) [ 519.362291] binder_alloc: binder_alloc_mmap_handler: 941 20001000-20004000 already mapped failed -16 2018/05/17 02:40:45 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) [ 519.428172] binder: BINDER_SET_CONTEXT_MGR already set [ 519.428184] binder: 941:958 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 519.428204] binder: 941:958 unknown command 0 2018/05/17 02:40:45 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000080), 0x4) clock_nanosleep(0x6, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) [ 519.491373] binder: 941:942 ioctl 40046207 0 returned -16 [ 519.510444] binder: 941:958 ioctl c0306201 20000340 returned -22 [ 519.673444] device lo entered promiscuous mode [ 519.684719] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x8000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x1, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000040)=@pic={0x2a6, 0x5ab, 0x19cc, 0x0, 0xbc, 0x20, 0x6a, 0x978, 0x60e, 0x5, 0xffff, 0x66, 0x6a50, 0xffffffffffff98cc, 0x800, 0x20}) r4 = add_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = getpgid(0xffffffffffffffff) tkill(r5, 0x8) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)='/dev/md0\x00') syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x101800) openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x800, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000640)) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000380)) 2018/05/17 02:40:46 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xf401000000000000}, 0x1c) 2018/05/17 02:40:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae03, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140), 0x0) 2018/05/17 02:40:46 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xb36, &(0x7f0000000000)="9d0b0b7bdec2f4d4c34198ca15a975dd901415f02b5885b3aa6452d532f6323cf380f835eee29141235d4bf9aa9a008c3858925f94271a994e2a0cf966214d16ade3666c21b35de270dfb3feb0c3d4311ed3c33140e701d2b4d1bd5daa50ec321f8abb341ba0334c462938173683368cf6ce9f7e3ac089fc") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/17 02:40:46 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x9000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 520.419780] binder: 989:992 unknown command 32768 2018/05/17 02:40:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x2000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 520.448061] binder: 989:992 ioctl c0306201 20000340 returned -22 [ 520.465335] IPVS: ftp: loaded support on port[0] = 21 [ 520.487842] binder_alloc: binder_alloc_mmap_handler: 989 20001000-20004000 already mapped failed -16 2018/05/17 02:40:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140), 0x0) [ 520.513313] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:46 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x5c000000}, 0x1c) 2018/05/17 02:40:46 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae41, &(0x7f00000015c0)={0x0, r2}) [ 520.540975] binder_alloc: 989: binder_alloc_buf, no vma [ 520.546660] binder: 989:1008 transaction failed 29189/-3, size 0-0 line 2971 2018/05/17 02:40:46 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x1, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000040)=@pic={0x2a6, 0x5ab, 0x19cc, 0x0, 0xbc, 0x20, 0x6a, 0x978, 0x60e, 0x5, 0xffff, 0x66, 0x6a50, 0xffffffffffff98cc, 0x800, 0x20}) r4 = add_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = getpgid(0xffffffffffffffff) tkill(r5, 0x8) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)='/dev/md0\x00') syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x101800) openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x800, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000640)) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000380)) 2018/05/17 02:40:46 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 520.638395] binder: 989:992 ioctl 40046207 0 returned -16 2018/05/17 02:40:46 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140), 0x0) 2018/05/17 02:40:46 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486354, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:46 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xa000000}, 0x1c) [ 520.755605] binder: undelivered TRANSACTION_ERROR: 29189 [ 520.762062] binder: undelivered TRANSACTION_COMPLETE [ 520.784399] device lo entered promiscuous mode [ 520.789770] binder: undelivered transaction 169, process died. [ 520.821336] binder: 1036:1037 unknown command 1078485844 [ 520.850275] IPVS: ftp: loaded support on port[0] = 21 [ 520.871623] binder: 1036:1037 ioctl c0306201 20000340 returned -22 [ 520.914433] binder_alloc: binder_alloc_mmap_handler: 1036 20001000-20004000 already mapped failed -16 [ 520.941609] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4040ae79, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:47 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) fchdir(r1) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x2, [{}, {}]}, 0x48) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/05/17 02:40:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406300, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:47 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x1, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000040)=@pic={0x2a6, 0x5ab, 0x19cc, 0x0, 0xbc, 0x20, 0x6a, 0x978, 0x60e, 0x5, 0xffff, 0x66, 0x6a50, 0xffffffffffff98cc, 0x800, 0x20}) r4 = add_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = getpgid(0xffffffffffffffff) tkill(r5, 0x8) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)='/dev/md0\x00') syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x101800) openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x800, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000640)) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000380)) 2018/05/17 02:40:47 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xe803}, 0x1c) 2018/05/17 02:40:47 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40086310, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:47 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfc00, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 520.967176] binder: 1036:1048 unknown command 1078485844 [ 520.981098] binder: 1036:1037 ioctl 40046207 0 returned -16 [ 520.993120] binder: 1036:1048 ioctl c0306201 20000340 returned -22 [ 521.094220] binder: 1058:1062 unknown command 32768 [ 521.100937] binder: BINDER_SET_CONTEXT_MGR already set [ 521.109916] IPVS: ftp: loaded support on port[0] = 21 [ 521.134212] binder: 1058:1062 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 521.137158] binder: 1065:1069 ioctl 40046207 0 returned -16 2018/05/17 02:40:47 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xfc00}, 0x1c) 2018/05/17 02:40:47 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000080), 0x4) clock_nanosleep(0x6, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) [ 521.168064] binder: 1065:1069 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 521.175356] binder: 1065:1069 unknown command 0 [ 521.206527] binder: 1065:1069 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x8030ae7c, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x1, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000040)=@pic={0x2a6, 0x5ab, 0x19cc, 0x0, 0xbc, 0x20, 0x6a, 0x978, 0x60e, 0x5, 0xffff, 0x66, 0x6a50, 0xffffffffffff98cc, 0x800, 0x20}) r4 = add_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = getpgid(0xffffffffffffffff) tkill(r5, 0x8) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)='/dev/md0\x00') syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x101800) openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x800, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000640)) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000380)) 2018/05/17 02:40:47 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x280, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x5, 0x0, &(0x7f0000ffb000/0x4000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = request_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)='/dev/kvm\x00', 0xfffffffffffffffd) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0]) keyctl$chown(0x4, r4, r5, r6) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 521.248293] binder: undelivered transaction 173, process died. [ 521.254850] binder: undelivered TRANSACTION_COMPLETE [ 521.261128] binder_alloc: binder_alloc_mmap_handler: 1065 20001000-20004000 already mapped failed -16 2018/05/17 02:40:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1800000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 521.340445] binder: 1065:1078 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 521.347795] binder: 1065:1078 unknown command 0 2018/05/17 02:40:47 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x58}, 0x1c) [ 521.397166] binder: 1065:1078 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:47 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046307, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 521.455093] device lo entered promiscuous mode 2018/05/17 02:40:47 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000200)='/dev/urandom\x00', 0x1, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000240)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000040)=@pic={0x2a6, 0x5ab, 0x19cc, 0x0, 0xbc, 0x20, 0x6a, 0x978, 0x60e, 0x5, 0xffff, 0x66, 0x6a50, 0xffffffffffff98cc, 0x800, 0x20}) r4 = add_key(&(0x7f0000000280)='big_key\x00', &(0x7f00000002c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) r5 = getpgid(0xffffffffffffffff) tkill(r5, 0x8) keyctl$restrict_keyring(0x1d, r4, &(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)='/dev/md0\x00') syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x101800) openat$md(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/md0\x00', 0x800, 0x0) ioctl$KVM_GET_XSAVE(r3, 0x9000aea4, &(0x7f0000000640)) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000380)) 2018/05/17 02:40:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4070aea0, &(0x7f00000015c0)={0x0, r2}) [ 521.518262] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:47 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 521.597151] binder: 1115:1117 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 521.604932] binder: 1115:1117 unknown command 0 2018/05/17 02:40:47 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x7f00000000000000}, 0x1c) 2018/05/17 02:40:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 521.672170] binder: 1115:1117 ioctl c0306201 20000340 returned -22 [ 521.708784] binder_alloc: binder_alloc_mmap_handler: 1115 20001000-20004000 already mapped failed -16 [ 521.744380] binder: 1115:1130 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 521.752094] binder: 1115:1130 unknown command 0 2018/05/17 02:40:47 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x300000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:47 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc020660b, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:47 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 521.789195] binder: BINDER_SET_CONTEXT_MGR already set [ 521.803563] binder: 1115:1130 ioctl c0306201 20000340 returned -22 [ 521.892279] binder: 1115:1117 ioctl 40046207 0 returned -16 [ 521.904278] IPVS: ftp: loaded support on port[0] = 21 [ 521.974090] device lo entered promiscuous mode [ 522.002791] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:48 executing program 5: r0 = socket(0x1, 0x0, 0x7) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)) 2018/05/17 02:40:48 executing program 2 (fault-call:1 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 2018/05/17 02:40:48 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x7000000}, 0x1c) 2018/05/17 02:40:48 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffff8, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x100000000}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f00000000c0)={r4, 0x50a}, &(0x7f0000000100)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:48 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40086303, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4038ae7a, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:48 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x600000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 522.161659] binder: 1162:1163 BC_FREE_BUFFER u0000000000000000 no match [ 522.168569] binder: 1162:1163 unknown command 0 [ 522.170127] FAULT_INJECTION: forcing a failure. [ 522.170127] name failslab, interval 1, probability 0, space 0, times 0 [ 522.184943] CPU: 1 PID: 1169 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #79 [ 522.192149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.201516] Call Trace: [ 522.204122] dump_stack+0x1b9/0x294 [ 522.205458] binder: 1162:1163 ioctl c0306201 20000340 returned -22 [ 522.207765] ? dump_stack_print_info.cold.2+0x52/0x52 [ 522.207785] ? __mutex_lock+0x7d9/0x17f0 [ 522.207812] should_fail.cold.4+0xa/0x1a [ 522.207831] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 522.207851] ? debug_check_no_locks_freed+0x310/0x310 [ 522.231291] binder_alloc: binder_alloc_mmap_handler: 1162 20001000-20004000 already mapped failed -16 [ 522.232527] ? graph_lock+0x170/0x170 [ 522.232543] ? perf_trace_lock+0xd6/0x900 [ 522.232565] ? find_held_lock+0x36/0x1c0 [ 522.232587] ? __lock_is_held+0xb5/0x140 [ 522.232615] ? check_same_owner+0x320/0x320 [ 522.249310] binder: BINDER_SET_CONTEXT_MGR already set [ 522.251025] ? rcu_note_context_switch+0x710/0x710 [ 522.251043] ? lock_release+0xa10/0xa10 [ 522.251062] __should_failslab+0x124/0x180 [ 522.251081] should_failslab+0x9/0x14 [ 522.251101] kmem_cache_alloc_node_trace+0x26f/0x770 [ 522.263223] binder: 1162:1171 BC_FREE_BUFFER u0000000000000000 no match [ 522.263350] ? __might_sleep+0x95/0x190 [ 522.267723] binder: 1162:1171 unknown command 0 [ 522.272948] __kmalloc_node+0x33/0x70 [ 522.272965] kvmalloc_node+0x6b/0x100 [ 522.272984] seq_read+0xa33/0x1520 [ 522.299890] binder: 1162:1163 ioctl 40046207 0 returned -16 [ 522.301696] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 522.301720] ? seq_file_path+0x30/0x30 [ 522.301735] ? fsnotify_first_mark+0x330/0x330 [ 522.301760] ? seq_file_path+0x30/0x30 [ 522.301777] proc_reg_read+0x10a/0x190 [ 522.313834] binder: 1162:1171 ioctl c0306201 20000340 returned -22 [ 522.314186] do_iter_read+0x4a3/0x660 [ 522.314217] compat_readv+0x186/0x220 [ 522.362890] ? vfs_iter_read+0xb0/0xb0 [ 522.366791] ? wait_for_completion+0x870/0x870 [ 522.371401] ? mutex_lock_nested+0x16/0x20 [ 522.375646] ? mutex_lock_nested+0x16/0x20 [ 522.379892] ? __fdget_pos+0xd6/0x1e0 [ 522.383702] ? __fdget_raw+0x20/0x20 [ 522.387434] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 522.392983] do_compat_readv+0x113/0x240 [ 522.397054] ? compat_readv+0x220/0x220 [ 522.401046] ? mm_fault_error+0x380/0x380 [ 522.405219] __ia32_compat_sys_readv+0x74/0xb0 2018/05/17 02:40:48 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x4008630a, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 522.409821] do_fast_syscall_32+0x345/0xf9b [ 522.414160] ? do_int80_syscall_32+0x880/0x880 [ 522.415798] binder: BC_ATTEMPT_ACQUIRE not supported [ 522.418755] ? _raw_spin_unlock_irq+0x27/0x70 [ 522.418776] ? finish_task_switch+0x1ca/0x840 [ 522.418799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 522.418817] ? syscall_return_slowpath+0x30f/0x5c0 [ 522.418839] ? sysret32_from_system_call+0x5/0x46 [ 522.437108] binder: 1173:1174 ioctl c0306201 20000340 returned -22 [ 522.438430] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 522.438455] entry_SYSENTER_compat+0x70/0x7f [ 522.438467] RIP: 0023:0xf7f24cb9 [ 522.438475] RSP: 002b:00000000f5f200ac EFLAGS: 00000282 ORIG_RAX: 0000000000000091 [ 522.438495] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000020000140 [ 522.457288] binder_alloc: binder_alloc_mmap_handler: 1173 20001000-20004000 already mapped failed -16 [ 522.459384] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 522.459394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 522.459404] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 522.459413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 522.482690] IPVS: ftp: loaded support on port[0] = 21 [ 522.643113] binder: BINDER_SET_CONTEXT_MGR already set [ 522.643131] binder: BC_ATTEMPT_ACQUIRE not supported [ 522.678142] device lo entered promiscuous mode [ 522.691120] IPVS: ftp: loaded support on port[0] = 21 [ 522.695303] binder: 1173:1174 ioctl 40046207 0 returned -16 [ 522.716969] binder: 1173:1175 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:48 executing program 5: setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2d, &(0x7f0000000380)=0xfff, 0x4) 2018/05/17 02:40:48 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020940d, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:48 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:48 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x9000000}, 0x1c) 2018/05/17 02:40:48 executing program 2 (fault-call:1 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 2018/05/17 02:40:48 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000100)={0xd5, 0x0, 0x7, 0x0, "8b613cc12549a52b59d81106f18280640b25771a215600c67c575c4a510b0dc4c0db699237d490e98ddb3d1a", 0x7fff}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000080)=0x7, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x5, 0x4, "5970aef67050f2ed84721ed423190fb08a77f4561722941a6927a0c14eb164f722a78f0fec2eef64535d977e1a4ac4c8e913267b9e37ea918df3e8c3438f0a29", "86320da748c07257f406505125b229e6190e63861a1aa7ca46acd8a2bd636ca66d784d5f84b03d03ff7ce3a59377aa290f187978000030d46a7188329e371b1c", "f1a8ec7e396573f0776b2fb1cba1f4e89ec79da926d7107da5bbdaf0789623a3", [0x8e, 0x1]}) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0x3, 0x7e73e56f17aa6d0e) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)={0x4, 0x0, [{0x80000019, 0x4, 0x81, 0x10000, 0x1}, {0x0, 0x1, 0x200, 0x2, 0x7}, {0xc0000007, 0x100000001, 0x3, 0x9ac, 0x3}, {0x80000008, 0x3f, 0x40, 0xffff, 0x7}]}) 2018/05/17 02:40:48 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfec0000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:48 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40406301, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 522.833998] binder: 1205:1206 got reply transaction with no transaction stack [ 522.835947] FAULT_INJECTION: forcing a failure. [ 522.835947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 522.841419] binder: 1205:1206 transaction failed 29201/-71, size 0-0 line 2763 [ 522.853178] CPU: 1 PID: 1203 Comm: syz-executor2 Not tainted 4.17.0-rc5+ #79 [ 522.853188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.853193] Call Trace: [ 522.853216] dump_stack+0x1b9/0x294 [ 522.853235] ? dump_stack_print_info.cold.2+0x52/0x52 [ 522.853253] ? debug_check_no_locks_freed+0x310/0x310 [ 522.893623] ? graph_lock+0x170/0x170 [ 522.897414] ? debug_check_no_locks_freed+0x310/0x310 [ 522.902594] should_fail.cold.4+0xa/0x1a [ 522.906642] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 522.911737] ? find_held_lock+0x36/0x1c0 [ 522.915781] ? graph_lock+0x170/0x170 [ 522.919570] ? lock_acquire+0x1dc/0x520 [ 522.923528] ? lock_downgrade+0x8e0/0x8e0 [ 522.927666] ? find_held_lock+0x36/0x1c0 [ 522.931733] __alloc_pages_nodemask+0x34e/0xd70 [ 522.936389] ? kasan_check_read+0x11/0x20 [ 522.940521] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 522.945526] ? rcu_read_unlock+0x35/0x70 [ 522.949571] ? __lock_is_held+0xb5/0x140 [ 522.953634] ? check_same_owner+0x320/0x320 [ 522.957945] cache_grow_begin+0x72/0x6c0 [ 522.962008] kmem_cache_alloc_node_trace+0x692/0x770 [ 522.967106] __kmalloc_node+0x33/0x70 [ 522.970903] kvmalloc_node+0x6b/0x100 [ 522.974696] seq_read+0xa33/0x1520 [ 522.978225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 522.983751] ? seq_file_path+0x30/0x30 [ 522.987633] ? fsnotify_first_mark+0x330/0x330 [ 522.992217] ? seq_file_path+0x30/0x30 [ 522.996090] proc_reg_read+0x10a/0x190 [ 522.999966] do_iter_read+0x4a3/0x660 [ 523.003757] compat_readv+0x186/0x220 [ 523.007544] ? vfs_iter_read+0xb0/0xb0 [ 523.011428] ? wait_for_completion+0x870/0x870 [ 523.016008] ? mutex_lock_nested+0x16/0x20 [ 523.020234] ? mutex_lock_nested+0x16/0x20 [ 523.024457] ? __fdget_pos+0xd6/0x1e0 [ 523.028252] ? __fdget_raw+0x20/0x20 [ 523.031957] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 523.037481] do_compat_readv+0x113/0x240 [ 523.041790] ? compat_readv+0x220/0x220 [ 523.045751] ? mm_fault_error+0x380/0x380 [ 523.049899] __ia32_compat_sys_readv+0x74/0xb0 [ 523.054472] do_fast_syscall_32+0x345/0xf9b [ 523.058782] ? do_int80_syscall_32+0x880/0x880 [ 523.063348] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 523.068179] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 523.073702] ? syscall_return_slowpath+0x30f/0x5c0 [ 523.078620] ? sysret32_from_system_call+0x5/0x46 [ 523.083452] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 523.088285] entry_SYSENTER_compat+0x70/0x7f [ 523.092678] RIP: 0023:0xf7f24cb9 [ 523.096027] RSP: 002b:00000000f5f200ac EFLAGS: 00000282 ORIG_RAX: 0000000000000091 [ 523.103734] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000020000140 [ 523.110986] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 523.118251] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 523.125515] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 523.132768] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/05/17 02:40:49 executing program 5: timer_create(0xffbffffffffffff0, &(0x7f0000000380)={0x0, 0x20, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000140)}}, &(0x7f0000000400)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x480000, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x52000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x1f, 0x4) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000180)=0x1000) 2018/05/17 02:40:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 523.164394] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:49 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x6000000}, 0x1c) 2018/05/17 02:40:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc0189436, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:49 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x10000, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x6, 0xf, 0x20, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x4}, [@nested={0x8, 0x3b, [@typed={0x4, 0x7c}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, {}, [@typed={0x8, 0x2, @ipv4=@multicast1=0xe0000001}]}, 0x1c}, 0x1}, 0x0) 2018/05/17 02:40:49 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x7}, 0x1c) [ 523.286773] binder_alloc: binder_alloc_mmap_handler: 1205 20001000-20004000 already mapped failed -16 [ 523.315477] binder: BINDER_SET_CONTEXT_MGR already set [ 523.318980] device lo entered promiscuous mode 2018/05/17 02:40:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4008ae6a, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 523.355063] binder: 1205:1206 ioctl 40046207 0 returned -16 [ 523.360509] IPVS: ftp: loaded support on port[0] = 21 [ 523.369291] binder: 1205:1235 got reply transaction with no transaction stack [ 523.376682] binder: 1205:1235 transaction failed 29201/-71, size 0-0 line 2763 [ 523.386966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/17 02:40:49 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)="2f70726f632f7379732fc647a3342f76732f73796e635f7457720000000000000000000000", 0x2, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x40, 0x0) 2018/05/17 02:40:49 executing program 2 (fault-call:1 fault-nth:2): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 2018/05/17 02:40:49 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x200000000000000}, 0x1c) [ 523.544363] binder: undelivered TRANSACTION_ERROR: 29201 [ 523.551205] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/17 02:40:49 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106308, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:49 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4010ae68, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1) 2018/05/17 02:40:49 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x1, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(khazad-generic)\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) read(r2, &(0x7f0000000100)=""/55, 0x37) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000200)) 2018/05/17 02:40:49 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xa00000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:49 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x700000000000000}, 0x1c) 2018/05/17 02:40:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0xf60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 523.747132] binder: 1277:1287 BC_INCREFS_DONE u0000000000000000 no match [ 523.754113] binder: 1277:1287 unknown command 0 [ 523.779753] IPVS: ftp: loaded support on port[0] = 21 [ 523.785158] binder: 1277:1287 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:49 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 523.847652] binder_alloc: binder_alloc_mmap_handler: 1277 20001000-20004000 already mapped failed -16 [ 523.916205] binder: BINDER_SET_CONTEXT_MGR already set [ 523.943383] binder: 1277:1299 BC_INCREFS_DONE u0000000000000000 no match [ 523.950364] binder: 1277:1299 unknown command 0 [ 523.971108] binder: 1277:1287 ioctl 40046207 0 returned -16 [ 523.982450] binder: 1277:1299 ioctl c0306201 20000340 returned -22 [ 523.990475] device lo entered promiscuous mode [ 524.009491] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:50 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xb03}], 0x1) 2018/05/17 02:40:50 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40106309, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:50 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) pause() r3 = add_key(&(0x7f0000000400)='blacklist\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000004680)="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", 0x1173, 0x0) r4 = request_key(&(0x7f0000000280)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)='-\\\x00', 0xfffffffffffffff9) keyctl$search(0xa, r3, &(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, r4) 2018/05/17 02:40:50 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0x4) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x200400) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)=""/15) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000100)={0x8, 0x4, 0x9, 0x6, 0x4, 0x8}) 2018/05/17 02:40:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae47, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfd], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:50 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x58000000}, 0x1c) 2018/05/17 02:40:50 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xe8030000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 524.107940] binder: 1313:1316 BC_ACQUIRE_DONE u0000000000000000 no match [ 524.115014] binder: 1313:1316 unknown command 0 2018/05/17 02:40:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) io_setup(0x7, &(0x7f0000000100)) io_setup(0x3, &(0x7f0000000040)) io_setup(0x1, &(0x7f0000000080)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000880)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x70, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/77, 0x4d}]}, &(0x7f0000000000)="7f0000800000", &(0x7f0000000500)=""/239, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) 2018/05/17 02:40:50 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x7f000000}, 0x1c) [ 524.169326] binder: 1313:1316 ioctl c0306201 20000340 returned -22 [ 524.195336] IPVS: ftp: loaded support on port[0] = 21 [ 524.202515] binder_alloc: binder_alloc_mmap_handler: 1313 20001000-20004000 already mapped failed -16 [ 524.212457] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:50 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc048ae65, &(0x7f00000015c0)={0x0, r2}) [ 524.235925] binder: 1313:1316 ioctl 40046207 0 returned -16 [ 524.255503] binder: 1313:1341 BC_ACQUIRE_DONE u0000000000000000 no match [ 524.262508] binder: 1313:1341 unknown command 0 [ 524.296392] binder: 1313:1341 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:50 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1100000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:50 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) io_setup(0x7, &(0x7f0000000100)) io_setup(0x3, &(0x7f0000000040)) io_setup(0x1, &(0x7f0000000080)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000880)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x70, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/77, 0x4d}]}, &(0x7f0000000000)="7f0000800000", &(0x7f0000000500)=""/239, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) 2018/05/17 02:40:50 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x630c, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 524.385900] device lo entered promiscuous mode [ 524.435970] binder: 1358:1359 unknown command 0 [ 524.461988] IPVS: ftp: loaded support on port[0] = 21 [ 524.466700] binder: 1358:1359 ioctl c0306201 20000340 returned -22 [ 524.523550] binder_alloc: binder_alloc_mmap_handler: 1358 20001000-20004000 already mapped failed -16 [ 524.552414] binder: BINDER_SET_CONTEXT_MGR already set [ 524.566413] binder: 1358:1359 ioctl 40046207 0 returned -16 [ 524.588207] binder: 1358:1368 unknown command 0 [ 524.612160] binder: 1358:1368 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:51 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xa00}, 0x1c) 2018/05/17 02:40:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc208ae62, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfd000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:51 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) io_setup(0x7, &(0x7f0000000100)) io_setup(0x3, &(0x7f0000000040)) io_setup(0x1, &(0x7f0000000080)) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000880)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x70, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/77, 0x4d}]}, &(0x7f0000000000)="7f0000800000", &(0x7f0000000500)=""/239, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) 2018/05/17 02:40:51 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x11000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xc62}], 0x1) 2018/05/17 02:40:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syslog(0x2, &(0x7f0000000000)=""/11, 0xb) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:51 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046304, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 525.397779] binder: 1383:1393 unknown command 0 [ 525.409103] IPVS: ftp: loaded support on port[0] = 21 [ 525.435270] binder: 1383:1393 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xbee}], 0x1) 2018/05/17 02:40:51 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xc048ae65, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:51 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x3e8}, 0x1c) [ 525.487578] binder_alloc: binder_alloc_mmap_handler: 1383 20001000-20004000 already mapped failed -16 2018/05/17 02:40:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4040ae77, &(0x7f00000015c0)={0x0, r2}) [ 525.535966] binder: BINDER_SET_CONTEXT_MGR already set [ 525.559140] binder: 1383:1403 unknown command 0 2018/05/17 02:40:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 525.599115] binder: 1383:1403 ioctl c0306201 20000340 returned -22 2018/05/17 02:40:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) 2018/05/17 02:40:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x776}], 0x1) [ 525.651810] binder: 1383:1393 ioctl 40046207 0 returned -16 [ 525.818451] device lo entered promiscuous mode [ 525.855436] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:51 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x8}, 0x1c) 2018/05/17 02:40:51 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r1, r2, r3) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={@remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @remote={0xfe, 0x80, [], 0xbb}, 0xf6, 0x93, 0x0, 0x400, 0xdb0, 0x8008002c, r0}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000380)=0x7, &(0x7f00000003c0)=0x4) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000400)) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000440)=0x1000) r6 = getpgid(0xffffffffffffffff) sched_setscheduler(r6, 0x1, &(0x7f0000000480)=0x8) setpriority(0x1, r6, 0x9) getpgid(r6) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)=@newtaction={0x164, 0x30, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x2, 0x1ff}, [{0x50, 0x1, @m_connmark={0x4c, 0x1a, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xc719, 0x10001, 0xffffffffffffffff, 0x10000, 0x4}, 0x40}}}, {0x14, 0x6, "7954da199d1f2e1550fe2d3884d65a"}}}}, {0x100, 0x1, @m_connmark={0xfc, 0x13, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x8}}}, {0xc4, 0x6, "3f065d2d92ac5a4639c3a3f8f7015231c8ac0622410c7e7288e60cdc5867cb0bfd9daeacda6f0fe6a5cc54972e87e668846005552145befac59e9d09359295f0dee1e6d9d04845492ef80ec5786f6c707b58477a5cf0513552979c833288ec73384781db1063c3458441fee9634a30d00fbd886dfbd5320dd90ff468e5480201aa58547951725413f296ccf02b03776eb441fa5a24e688f94a009675ed95d1f604be4dce4a91582ba4250a94f6f129d46de744fffa4576a9fbd6f08f72b2"}}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000004}, 0x10) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r4, 0x800455d1, &(0x7f0000000700)=""/4096) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001700)='/dev/autofs\x00', 0x0, 0x0) ioctl$PIO_FONTX(r7, 0x4b6c, &(0x7f0000001740)="356a792ec048beb13aafe89be2ba095844f1136afc86b185303c04551488429b609c32e1f217a00d2e45db5d58fa6b6dcb71cb451025ba57ecf17a2eb85fb926373af1e9d2e7f3719965218280a42b38a4011171c66041e8d7d25597c675a933324d19e8039f59c94e13b3c545e97022c18fdf") tkill(r6, 0x2f) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000017c0)=[@in={0x2, 0x4e24, @broadcast=0xffffffff}, @in6={0xa, 0x4e24, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x9}], 0x2c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000001800)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000001840)=[@in6={0xa, 0x4e24, 0x800000, @dev={0xfe, 0x80, [], 0xc}, 0x1}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}], 0x3c) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000001880), &(0x7f00000018c0)=0x40) prctl$getname(0x10, &(0x7f0000001900)=""/199) ioctl$DRM_IOCTL_AGP_ALLOC(r4, 0xc0106434, &(0x7f0000001a00)={0x0, 0x0, 0x1, 0x101}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40086439, &(0x7f0000001a40)={0x8, r8}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000001a80)=0x1) ioctl$SG_GET_LOW_DMA(r7, 0x227a, &(0x7f0000001ac0)) ioctl$DRM_IOCTL_VERSION(r7, 0xc0246400, &(0x7f0000001cc0)={0x1, 0x790, 0x9, 0x32, &(0x7f0000001b00)=""/50, 0x65, &(0x7f0000001b40)=""/101, 0xf7, &(0x7f0000001bc0)=""/247}) 2018/05/17 02:40:51 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:51 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x648}], 0x1) 2018/05/17 02:40:51 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xa, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x5450, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:51 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:51 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000002c0)='./file0\x00', 0x101800, 0x10) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40086437, &(0x7f0000000340)={0x0, 0xb931}) lchown(&(0x7f0000000000)='./file0\x00', r1, r2) socketpair$ax25(0x3, 0x2, 0xcf, &(0x7f0000000300)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/05/17 02:40:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xea6}], 0x1) [ 525.993235] binder: 1449:1451 got reply transaction with no transaction stack [ 526.000711] binder: 1449:1451 transaction failed 29201/-71, size 0-0 line 2763 2018/05/17 02:40:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:52 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xffffffc0}, 0x1c) [ 526.034458] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x402c582a, &(0x7f00000015c0)={0x0, r2}) [ 526.095303] binder_alloc: binder_alloc_mmap_handler: 1449 20001000-20004000 already mapped failed -16 2018/05/17 02:40:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000180)={'team_slave_1\x00', 0x3f}) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000140), 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="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"]) modify_ldt$write(0x1, &(0x7f0000000100)={0xc5e, 0x20001800, 0x4000, 0x2, 0x9, 0x9, 0xfffffffffffffff7, 0x7, 0xf1, 0x8}, 0x10) 2018/05/17 02:40:52 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x101002, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xff, 0x40000) ioctl$VT_ACTIVATE(r3, 0x5606, 0x373bc908) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xe26}], 0x1) [ 526.187330] binder: BINDER_SET_CONTEXT_MGR already set [ 526.202123] binder: 1449:1470 got reply transaction with no transaction stack [ 526.209679] binder: 1449:1470 transaction failed 29201/-71, size 0-0 line 2763 2018/05/17 02:40:52 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xc0ffffff00000000}, 0x1c) [ 526.295464] binder: 1449:1451 ioctl 40046207 0 returned -16 [ 526.355455] device lo entered promiscuous mode [ 526.399762] binder: undelivered TRANSACTION_ERROR: 29201 [ 526.404888] IPVS: ftp: loaded support on port[0] = 21 [ 526.405600] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/17 02:40:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x8010aebc, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xf38}], 0x1) 2018/05/17 02:40:52 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x630d, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:52 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r1 = accept4(r0, 0x0, &(0x7f0000000200), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0) sendmsg$rds(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x2}, 0x10, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/224, 0xe0}], 0x1, &(0x7f0000000740)}, 0x0) recvfrom$ax25(r1, &(0x7f0000000300)=""/90, 0x5a, 0x0, &(0x7f0000000000)={0x3, {"d4ad0f2391f881"}}, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2018/05/17 02:40:52 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000100)=0x67) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000001c0)={r1, 0x100000001}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) renameat2(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file0\x00', 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/05/17 02:40:52 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x3e8, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:52 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xc0ffffff}, 0x1c) [ 526.572940] binder: 1517:1518 unknown command 0 [ 526.607346] binder: 1517:1518 ioctl c0306201 20000340 returned -22 [ 526.641204] binder_alloc: binder_alloc_mmap_handler: 1517 20001000-20004000 already mapped failed -16 2018/05/17 02:40:52 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1800], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:52 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xf4010000}, 0x1c) 2018/05/17 02:40:52 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x4ec}], 0x1) 2018/05/17 02:40:52 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x8208ae63, &(0x7f00000015c0)={0x0, r2}) [ 526.662484] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:52 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xa7f, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001580)=0x19) writev(r0, &(0x7f0000001d80)=[{&(0x7f0000001c00)=';', 0x1}], 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x2040, 0x0) accept4(r1, &(0x7f0000000080)=@ipx, &(0x7f0000000100)=0x80, 0x800) 2018/05/17 02:40:52 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40046302, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 526.708776] binder: BINDER_SET_CONTEXT_MGR already set [ 526.718775] binder: 1517:1547 unknown command 0 [ 526.725126] binder: 1517:1547 ioctl c0306201 20000340 returned -22 [ 526.731634] binder: 1517:1518 ioctl 40046207 0 returned -16 2018/05/17 02:40:52 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 526.918833] binder: BC_ACQUIRE_RESULT not supported 2018/05/17 02:40:53 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x300}, 0x1c) 2018/05/17 02:40:53 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x250000, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000180)=0x4) socket$alg(0x26, 0x5, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x10c) [ 526.975953] binder: 1564:1571 ioctl c0306201 20000340 returned -22 [ 527.007655] binder_alloc: binder_alloc_mmap_handler: 1564 20001000-20004000 already mapped failed -16 [ 527.036550] binder: BINDER_SET_CONTEXT_MGR already set [ 527.048371] binder: BC_ACQUIRE_RESULT not supported [ 527.120151] binder: 1564:1580 ioctl c0306201 20000340 returned -22 [ 527.135182] binder: 1564:1571 ioctl 40046207 0 returned -16 [ 527.192833] device lo entered promiscuous mode [ 527.210520] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x899}], 0x1) 2018/05/17 02:40:53 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0xae78, &(0x7f00000015c0)={0x0, r2}) 2018/05/17 02:40:53 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x700}, 0x1c) 2018/05/17 02:40:53 executing program 5: setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000080), 0x1) futex(&(0x7f0000000ffc), 0x85, 0x2, &(0x7f0000000ff8), &(0x7f0000000ffc), 0x1f000000) 2018/05/17 02:40:53 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x34000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:53 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x400c630e, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 527.303520] binder: 1605:1607 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 527.310821] binder: 1605:1607 unknown command 0 [ 527.348296] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:53 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) syz_open_procfs(r0, &(0x7f0000000000)='net/udplite6\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") fcntl$setstatus(r1, 0x4, 0x6800) pread64(r1, &(0x7f0000003c00)=""/4096, 0xfffffffffffffdef, 0x0) 2018/05/17 02:40:53 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x2}, 0x1c) 2018/05/17 02:40:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x65}], 0x1) [ 527.374928] binder: 1605:1607 ioctl c0306201 20000340 returned -22 [ 527.412413] binder_alloc: binder_alloc_mmap_handler: 1605 20001000-20004000 already mapped failed -16 2018/05/17 02:40:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x100000000000000, r2}) [ 527.442829] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:53 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x10000, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r7 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0x5, 0x80000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x1, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000001640)='/dev/snd/pcmC#D#p\x00', 0x5, 0x8000) io_submit(r4, 0x6, &(0x7f0000001780)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x4, r3, &(0x7f0000000040)="30ac36892dde091d55c25659d82853bc55ebc890a79126192ae292aed42020de2e5395d71effec04614c920e5ba579b1fd29cd4b63ac0684f83fa709ba87e3f0b7e7fc4427d96ad60c8b5cbe5817f669620fe1a8e9bc3086de843496f08de98d9b30eb78930c2836aa6fca9706fe424c64b9b7c6b485399793b308844f553a7dea2a65c10c6b1329833e98259a454535750862076ba8b887f9e70b9a0e7022ff147d3bc3e06ba17fba177eba016cda44f9a623fdafd1302a29d31e0e49b73a26f0d3ee7ddbe123f6bfd3b78e7e6106b36167d2bad28249ae4aa84e6e1b5028cf062f33", 0xe3, 0x6, 0x0, 0x1, r5}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x7, 0x80000001, r0, &(0x7f0000000240)="607401d13c80a98ca9111d311385472ef78134cef66e663c5be0b209804f3f63a39f27bb44967bbae61fe3af134a36b05f97170a5e7c11cd707bb58145b5843c35632451cb6def902e3e72a5f8e3fccf1bcfacdfa53edbe4a1e07919b5fdac070c6e03df", 0x64, 0x5, 0x0, 0x0, r6}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x5, r0, &(0x7f0000000340)="7dcda872d31c55bdf68ca788c8e2787b044d2c8f51aed53aa3d95ea7266806be2dae56c60f136418cb9a07ba3a0a677e6d4d1986c928df53a7d6373d7097ccf64c43b649d6195a2368812c17523dd93fcf1b15617efd98aefa0cd4b6d6d6932a105ad19711965b106d9887026380c8096d59a8061f8f4ae97ca515253976a13ccc84240e752b501322753dee60ac2da23d910d214825e1eef4775432d02fdb71702cefe0a60b8b2f53ed95", 0xab, 0x7, 0x0, 0x1, r7}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x6, 0x8, r3, &(0x7f0000000480)="6bed5230d58a445385974bcd4ba052bae4605371cc5706c6348e4e39d5dcda5ba24622de206324d0194430911848a52cfb4a2ee5ef935c8bea9f65da70412f82a7c1f581ddaa29e119b4e5bf7f3245875cad37e8c0d88d596e39caeb91b30436a9a64262ef45bed4e363a006fd866e203633029fc061bc935b2b268c77ee82f75c0d4f225d009c98bc8d1b725d87b2e2a1d787bd1a05f67fb9941b44d9d6ea1166d33b3d399150728f279af3dda8796e2c6a097a364ab91d078beecd606066742b4a5f06326ceb24cbb0f39ff4140d9475f763906af76f8a3d6292a45aa0360ba42471e1092e6e0d39", 0xe9, 0x6e, 0x0, 0x1, r8}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000640)="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", 0x1000, 0x3f, 0x0, 0x1, r9}, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x5, r3, &(0x7f00000016c0)="a6e68f6ffa03f337c07fd06c560f6a33674eeb14a42103f978da550f956d9083c1e6413b5772b2f7a89d146b614c2bf09ac0a17a164c748c1baa89f56b40c15879f0946ae634456a368055851ffb36fc33971a9080cc", 0x56, 0x9, 0x0, 0x0, r3}]) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 527.475326] binder: 1605:1607 ioctl 40046207 0 returned -16 2018/05/17 02:40:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x3de}], 0x1) [ 527.574480] binder: 1605:1642 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 527.581581] binder: 1605:1642 unknown command 0 [ 527.641145] binder: 1605:1642 ioctl c0306201 20000340 returned -22 [ 527.799716] device lo entered promiscuous mode [ 527.811198] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:53 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xfffffff5}, 0x1c) 2018/05/17 02:40:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000ff0200000000000001000000000000000000000000000000"]) 2018/05/17 02:40:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xfb}], 0x1) 2018/05/17 02:40:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0xfdfdffff00000000, r2}) 2018/05/17 02:40:53 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x40030000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:53 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:53 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x37c}], 0x1) [ 527.900469] binder: 1662:1666 got transaction to invalid handle [ 527.906743] binder: 1662:1666 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:40:53 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 527.954221] binder_alloc: binder_alloc_mmap_handler: 1662 20001000-20004000 already mapped failed -16 [ 527.964674] IPVS: ftp: loaded support on port[0] = 21 [ 528.000654] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:54 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x4000000000000000}, 0x1c) 2018/05/17 02:40:54 executing program 5: perf_event_open(&(0x7f0000000200)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0xaf0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x14) 2018/05/17 02:40:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x1000000, r2}) [ 528.041987] binder: 1662:1681 got transaction to invalid handle [ 528.048247] binder: 1662:1681 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:40:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xce3}], 0x1) [ 528.102546] binder: 1662:1666 ioctl 40046207 0 returned -16 [ 528.207926] binder: undelivered TRANSACTION_ERROR: 29201 [ 528.214631] binder: undelivered TRANSACTION_ERROR: 29201 [ 528.277899] device lo entered promiscuous mode [ 528.320362] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:54 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x2, 0x40080) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x501, 0x0) fcntl$setlease(r1, 0x400, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e24, 0x9, 0x4e22, 0xe95c, 0xa, 0x80, 0xa0, 0x3e, r2, r3}, {0x200, 0x7fff, 0x5, 0x800, 0x8, 0x8, 0x80000000, 0xe6}, {0xd4, 0x8, 0x0, 0x80000000}, 0x83, 0x6e6bb4, 0x0, 0x1, 0x1}, {{@in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4d2, 0x3c}, 0x2, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x2, 0x0, 0x10, 0x100000000, 0xffffffffffffffc1, 0x1}}, 0xe8) fcntl$setlease(r0, 0x400, 0x0) dup2(r0, r1) 2018/05/17 02:40:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x8, 0x1, 0x1a, 0x9, 0xfffffffffffffc01}, 0xc) 2018/05/17 02:40:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xcc6}], 0x1) 2018/05/17 02:40:54 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x3000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:54 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x40000000}, 0x1c) 2018/05/17 02:40:54 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x40000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0xfdfdffff, r2}) [ 528.430710] binder: 1725:1730 got transaction to invalid handle [ 528.436883] binder: 1725:1730 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:40:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x5cd}], 0x1) 2018/05/17 02:40:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(seqiv(authenc(crc32c-generic,ctr-des3_ede-asm)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000180)="926cf7f10e947457a19d04958ca0edd75c9a864467252f0bf692b0475fcdbb78ac831ccf2a63f5309dd76f72633cc1ca3e04ecdcdcd15dfa765f19dc17800a22ef3fcd2da6a8ef724a2276a4b00098bd1f6a7ba259670cd5b24691ed29d7636e42308f3328c1d4ddc075034e7013ab028c7bea899edf960fc4b2afda493108afed58e7ba32b4244e1e", 0xffffffffffffff1e) 2018/05/17 02:40:54 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x600}, 0x1c) [ 528.510154] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0xfffffdfd, r2}) [ 528.557293] binder_alloc: binder_alloc_mmap_handler: 1725 20001000-20004000 already mapped failed -16 [ 528.559122] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfd00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xe40}], 0x1) [ 528.705426] binder: 1725:1730 ioctl 40046207 0 returned -16 [ 528.710932] binder: 1725:1770 got transaction to invalid handle [ 528.717463] binder: 1725:1770 transaction failed 29201/-22, size 0-0 line 2856 [ 528.841352] binder: undelivered TRANSACTION_ERROR: 29201 [ 528.847393] binder: undelivered TRANSACTION_ERROR: 29201 [ 528.870971] device lo entered promiscuous mode [ 528.906867] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:54 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xe803000000000000}, 0x1c) 2018/05/17 02:40:54 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xa79}], 0x1) 2018/05/17 02:40:54 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:54 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0xfdfdffff00000000}) 2018/05/17 02:40:54 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040)=0x80000001, 0x4) r4 = getpid() setpriority(0x0, r4, 0x100) 2018/05/17 02:40:54 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x6c000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:54 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x9, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:55 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7ff, 0x400) getpeername$inet(r0, &(0x7f00000000c0)={0x0, 0x0, @remote}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_exclusive\x00', 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x400000006, &(0x7f0000000040)=0xfffffffffffffffb, 0xff41) write$tun(r0, &(0x7f0000000240)={@void, @hdr={0x3, 0x84, 0x5, 0x100000000, 0x1, 0x7f}, @ipx={0xffff, 0xc4, 0x5, 0x4, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x1}, {@current, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x81}, "9cad91705bbc1544068ed65f7f4e2e14523bc89ade5c1d6caf5d69acb881e03c388fa1a5087ac33a7b9f1eea4cdd229b31092a3c6b57ac3755e92ee065477b397d03f6e1e5882a0c614facf96588394ce00860fe4410494af20d309c09935968795cfbe6b8889fa1104fea74d0e89d93c0cfda698fadb314e47a321f9616bc7729f6b585fa964bd7877b512eb335442ef933fe6c212dda750336716cce5cd4f77910c38445ab"}}, 0xce) sendfile(r1, r1, &(0x7f0000000000), 0x5) [ 529.011880] binder: 1790:1794 got transaction to invalid handle [ 529.018078] binder: 1790:1794 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:40:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x5b2}], 0x1) 2018/05/17 02:40:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:55 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r1, 0x2, &(0x7f0000000040)) munmap(&(0x7f0000000000/0x600000)=nil, 0x600000) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x4028700f, &(0x7f00000000c0)) 2018/05/17 02:40:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x1000000}) 2018/05/17 02:40:55 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x300000000000000}, 0x1c) [ 529.087734] IPVS: ftp: loaded support on port[0] = 21 [ 529.093180] binder_alloc: binder_alloc_mmap_handler: 1790 20001000-20004000 already mapped failed -16 [ 529.120493] binder: BINDER_SET_CONTEXT_MGR already set [ 529.150386] binder: 1790:1794 ioctl 40046207 0 returned -16 2018/05/17 02:40:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xd31}], 0x1) 2018/05/17 02:40:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:55 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000000000)={0x9d35, 0x31, 0x1, 0xffffffffffffffff}) fgetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="80797374966d2e00ae7ad1033633d6"], &(0x7f0000000140)=""/181, 0xb5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x80) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) accept4$ipx(r1, &(0x7f0000000040), &(0x7f0000000240)=0x10, 0x80000) [ 529.229477] binder: 1790:1834 got transaction to invalid handle [ 529.235722] binder: 1790:1834 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:40:55 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xe000000}, 0x1c) 2018/05/17 02:40:55 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000000)={0x2, 0x4, 0x10001, 0x1, "ba59fefefd2fe7c0ab57d3c1511ba7bd7753e4dee33ea95edb8eef1eb94a186a6373a8069b829b86d1306020", 0x5}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0xa01, 0x0) dup(r0) fstat(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r3, 0x400454cc, r4) [ 529.325724] Unknown ioctl 19252 [ 529.408699] device lo entered promiscuous mode [ 529.430236] Unknown ioctl 19252 [ 529.445599] IPVS: ftp: loaded support on port[0] = 21 [ 529.473820] binder: undelivered TRANSACTION_ERROR: 29201 [ 529.485492] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/17 02:40:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0xfdfdffff}) 2018/05/17 02:40:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x5d9}], 0x1) 2018/05/17 02:40:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:55 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x4000000}, 0x1c) 2018/05/17 02:40:55 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x500, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:55 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f0000000000)={0x9d35, 0x31, 0x1, 0xffffffffffffffff}) fgetxattr(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="80797374966d2e00ae7ad1033633d6"], &(0x7f0000000140)=""/181, 0xb5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x8000, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x80) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) accept4$ipx(r1, &(0x7f0000000040), &(0x7f0000000240)=0x10, 0x80000) 2018/05/17 02:40:55 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000040)=0x3, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/17 02:40:55 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x1f4, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xeac}], 0x1) [ 529.723680] Unknown ioctl 19252 [ 529.742704] binder: 1873:1875 got transaction to invalid handle [ 529.748877] binder: 1873:1875 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:40:55 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 529.780995] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:55 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0xfffffdfd}) 2018/05/17 02:40:55 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x7f00}, 0x1c) 2018/05/17 02:40:55 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xbbb}], 0x1) [ 529.882800] binder_alloc: binder_alloc_mmap_handler: 1873 20001000-20004000 already mapped failed -16 [ 529.910878] binder: BINDER_SET_CONTEXT_MGR already set [ 529.944146] binder: 1873:1875 ioctl 40046207 0 returned -16 [ 530.009447] binder: 1873:1904 got transaction to invalid handle [ 530.015622] binder: 1873:1904 transaction failed 29201/-22, size 0-0 line 2856 [ 530.108415] device lo entered promiscuous mode [ 530.134767] IPVS: ftp: loaded support on port[0] = 21 [ 530.136449] binder: undelivered TRANSACTION_ERROR: 29201 [ 530.145772] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/17 02:40:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000000280)={{0x3}, 'port1\x00'}) syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x80) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5, 0x4000) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000480), &(0x7f0000000240)=0x4) r2 = getpid() sendmsg$nl_netfilter(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300300000a0910072cbd7000fbdbdf25070000061000620004006a0008004300", @ANYRES32=r2, @ANYBLOB="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"], 0x330}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000340)={0xec, "4762332a41cf36ebc604bdb2ff2599f78f5cb5ea8444aee055562578010dd51871f33c4c973fed43448b8c3021e911ba0eca9622266458aa1ada50b31b2bf226096b7d53191d371155b42424a09bd72817458bf3e53c092a03d12762db487949a6023adf7453be8b96e65266e3fb5ccaf8bb606b9b34ad5fcedb70ba7f45d00a35ba62143c78b3c7ac1586895faff343cf366457a611216c3dc59edd8402ad7cc74d9f6543957abc76120f2647bcf5649372854f6d04c105f129d81ad6584750d9f052cc75353847d59ac58c18056d6672601626453a15aa525d0c3bd600a7dfc31760e799c7afac28b4d9e9"}) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000080)) 2018/05/17 02:40:56 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) sendto$unix(r1, &(0x7f0000000000)="afa8d77dad58dab1e3aa4353a60ce5c17f7498cb8af1fe2327b473db477eaf8d050c3897b662172c34d6f346979053a48ff59e21ea93418e43606ca42a3394df2510155312025dcad194729a74e5e206978951da7d65afff9029e1c5b7625b2b41358b9ee4f05cadb76a0724faf93791355818167aa1833a43f9597624b38dbca56ea22000285f9b0166682ee19e69a3b88e3b50953652fcf0f9506ae43bb32b05eebf520f0fb6305b25cb61e80d8f889ea9f4b14bd40b3698c0a3091b71499821ccab2d7bd862314e764815", 0xcc, 0x4000080, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000240)=""/194) 2018/05/17 02:40:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x2a8}], 0x1) 2018/05/17 02:40:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x100000000000000}) 2018/05/17 02:40:56 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x6}, 0x1c) 2018/05/17 02:40:56 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x100000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:56 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x6800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) [ 530.240937] binder: 1923:1927 got transaction to invalid handle [ 530.247164] binder: 1923:1927 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:40:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x379}], 0x1) 2018/05/17 02:40:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:56 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x200, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000001c0)={'veth0\x00', 0xc}) r2 = dup(r0) write(r0, &(0x7f0000000200)="3adfb525cdbede11c54ac0f6a679cb56d82a0b51953b9b2ef1aaf162edb82b5fce495678286ddcd43781cf565e41644bfe89a9a417680c9ae0a873c9af6bf1b7db3c5383ee6419355f891b1971b364ac0f07ce921929150be9c9151b2f48cd0b6c81e0e186868df9564eb35a3f1a95c79e948900562d404467a1440b1469b00f5516a3a182b31ebd088734992e096e17fd396b1877131dee20e1d823bd36b3c73f5fee462e636dd9d9e792f05ce73e359e74c45e761c92ba4f0c29ff4d93a79e34661f024cff6f32c300812972db1f1fdcf8ee0389bcb9bcb13a4ac44b7dcf95fa851de0be8f3f68dfe70bef", 0xec) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x2, 0x9, 0x3, 0x1, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r3, 0x1}, 0xc) ioctl$BLKGETSIZE64(r0, 0x80041272, &(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400000, 0x0) 2018/05/17 02:40:56 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x5800000000000000}, 0x1c) [ 530.332461] IPVS: ftp: loaded support on port[0] = 21 [ 530.334956] binder_alloc: binder_alloc_mmap_handler: 1923 20001000-20004000 already mapped failed -16 2018/05/17 02:40:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0xfffffdfd]}) 2018/05/17 02:40:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:56 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x481, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 530.422656] binder: 1923:1938 got transaction to invalid handle [ 530.422660] binder: BINDER_SET_CONTEXT_MGR already set [ 530.422679] binder: 1923:1927 ioctl 40046207 0 returned -16 [ 530.428837] binder: 1923:1938 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:40:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xb22}], 0x1) 2018/05/17 02:40:56 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffe) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0xc0505405) 2018/05/17 02:40:56 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x600000000000000}, 0x1c) 2018/05/17 02:40:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x7e3}], 0x1) 2018/05/17 02:40:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x300], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 530.640612] device lo entered promiscuous mode [ 530.723902] IPVS: ftp: loaded support on port[0] = 21 [ 530.738545] binder: undelivered TRANSACTION_ERROR: 29201 [ 530.748449] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/17 02:40:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0x100000000000000]}) 2018/05/17 02:40:56 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xff00000000000000}, 0x1c) 2018/05/17 02:40:56 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dsp\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/181, 0xde053c0ccee2d5a3) pipe(&(0x7f0000000140)) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x10813, r0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x101b00, 0x0) ppoll(&(0x7f0000000200)=[{r0}], 0x1, &(0x7f0000000240), &(0x7f0000000280), 0x8) 2018/05/17 02:40:56 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:56 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x300, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x700], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xc87}], 0x1) 2018/05/17 02:40:56 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x4000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 530.916076] binder: 1996:2020 got transaction to invalid handle [ 530.922260] binder: 1996:2020 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:40:56 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x8db}], 0x1) 2018/05/17 02:40:57 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xff00}, 0x1c) 2018/05/17 02:40:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0xfdfdffff00000000]}) [ 530.975319] IPVS: ftp: loaded support on port[0] = 21 [ 530.994692] binder_alloc: binder_alloc_mmap_handler: 1996 20001000-20004000 already mapped failed -16 2018/05/17 02:40:57 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x800) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4008641a, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[0x6, 0x9, 0x6, 0xb1, 0xfffffffffffffff8]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 531.058364] binder: 1996:2027 got transaction to invalid handle [ 531.064566] binder: 1996:2027 transaction failed 29201/-22, size 0-0 line 2856 [ 531.066846] binder: BINDER_SET_CONTEXT_MGR already set [ 531.219659] device lo entered promiscuous mode [ 531.225722] binder: 1996:2020 ioctl 40046207 0 returned -16 [ 531.250565] IPVS: ftp: loaded support on port[0] = 21 [ 531.283457] binder: undelivered TRANSACTION_ERROR: 29201 [ 531.289750] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/17 02:40:57 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff00000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:57 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x40043311, &(0x7f0000001200)) close(r0) 2018/05/17 02:40:57 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xd70}], 0x1) 2018/05/17 02:40:57 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0x1000000]}) 2018/05/17 02:40:57 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x900}, 0x1c) 2018/05/17 02:40:57 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0xa00000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:57 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfec00000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:57 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f00000001c0)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000200)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, r4}, 0x14) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 531.970272] binder: 2066:2068 transaction failed 29201/-28, size 0-0 line 2971 [ 531.974786] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x1d8}], 0x1) 2018/05/17 02:40:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:58 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x4}, 0x1c) [ 532.035398] binder_alloc: binder_alloc_mmap_handler: 2066 20001000-20004000 already mapped failed -16 2018/05/17 02:40:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0xfdfdffff]}) 2018/05/17 02:40:58 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f00000002c0), 0x15}}], 0x1, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000040)={r0, 0x100000000}) [ 532.154156] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:40:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1100], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/17 02:40:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xa82}], 0x1) [ 532.199138] binder_alloc: 2066: binder_alloc_buf, no vma [ 532.204751] binder: 2066:2082 transaction failed 29189/-3, size 0-0 line 2971 2018/05/17 02:40:58 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x5c00000000000000}, 0x1c) 2018/05/17 02:40:58 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x81, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x80000000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x111d}, 0x8) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000180)=0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x13) [ 532.300792] binder: 2066:2068 ioctl 40046207 0 returned -16 [ 532.369743] device lo entered promiscuous mode [ 532.427164] binder: undelivered TRANSACTION_ERROR: 29189 [ 532.433578] binder: undelivered TRANSACTION_ERROR: 29201 [ 532.468742] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0x0, 0x1000000]}) 2018/05/17 02:40:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x18], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:58 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xfe80000000000000}, 0x1c) 2018/05/17 02:40:58 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x402, 0x0) write$sndseq(r0, &(0x7f0000000140)=[{0xfd, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x40000000000004}, @result}], 0x26f) 2018/05/17 02:40:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x47a}], 0x1) 2018/05/17 02:40:58 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xe, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:58 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x600000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r0, r3, 0xb, 0x2}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 532.583130] binder: 2134:2135 transaction failed 29201/-28, size 0-0 line 2971 2018/05/17 02:40:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x50}], 0x1) 2018/05/17 02:40:58 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect(r0, &(0x7f0000000240)=@nl=@unspec, 0x80) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x8, 0x5, 0x98, &(0x7f0000ff9000/0x4000)=nil, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffffff, 0x6, 0x1, 0x10001, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) 2018/05/17 02:40:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 532.636756] binder_alloc: binder_alloc_mmap_handler: 2134 20001000-20004000 already mapped failed -16 [ 532.670966] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:58 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x5c00}, 0x1c) [ 532.703959] binder: BINDER_SET_CONTEXT_MGR already set [ 532.746182] binder_alloc: 2134: binder_alloc_buf, no vma [ 532.751816] binder: 2134:2146 transaction failed 29189/-3, size 0-0 line 2971 2018/05/17 02:40:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000100)=0x8c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000001c0)={r4, 0xcdf, 0x50, "3a7a8493fd2799ee682925e8d0bfc7aa00f8418a9192759fd6bc45d2113a40cb0374d785206c3eaa022622e822435b50ff6c9d5257853bf916eb5c0a6e558dbc5ab51b3a974b3dfa9a3ce4afe58337ec"}, 0x58) 2018/05/17 02:40:58 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x420}], 0x1) 2018/05/17 02:40:58 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0x0, 0xfdfdffff]}) [ 532.816179] binder: 2134:2135 ioctl 40046207 0 returned -16 2018/05/17 02:40:58 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 532.943550] binder: undelivered TRANSACTION_ERROR: 29189 [ 532.949441] binder: undelivered TRANSACTION_ERROR: 29201 [ 533.044636] device lo entered promiscuous mode [ 533.087194] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:59 executing program 5: r0 = gettid() ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) timer_create(0xffbffffffffffff4, &(0x7f0000000380)={0x0, 0x0, 0x1}, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x7fffffff}, 0x8) rt_sigqueueinfo(r0, 0x0, &(0x7f0000000040)={0xb, 0x0, 0x100000001}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)) 2018/05/17 02:40:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000340)={0x2, 0x100000001, 0x0, 'queue0\x00', 0x1000}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0xd4, r5, 0x400, 0x70bd2a, 0x25dfdbfc, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1f}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x88a0}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4d7}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c090) 2018/05/17 02:40:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfd00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:59 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xff000000}, 0x1c) 2018/05/17 02:40:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xac}], 0x1) 2018/05/17 02:40:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0x0, 0xfffffdfd]}) 2018/05/17 02:40:59 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0xa000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:59 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x30, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 533.190250] binder: 2197:2213 got transaction to invalid handle [ 533.196462] binder: 2197:2213 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:40:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x3db}], 0x1) [ 533.253655] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:59 executing program 5: mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8) msync(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x7) mbind(&(0x7f000007a000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000000), 0x512e, 0x0) 2018/05/17 02:40:59 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xfe800000}, 0x1c) 2018/05/17 02:40:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0x0, 0x100000000000000]}) [ 533.277933] binder_alloc: binder_alloc_mmap_handler: 2197 20001000-20004000 already mapped failed -16 [ 533.306629] binder: BINDER_SET_CONTEXT_MGR already set [ 533.340145] binder: 2197:2213 ioctl 40046207 0 returned -16 2018/05/17 02:40:59 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4e) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, r0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) flistxattr(r1, &(0x7f0000000040)=""/216, 0xd8) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/05/17 02:40:59 executing program 5: r0 = socket(0x10, 0x80002, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x200, 0x0) epoll_pwait(r1, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x1, &(0x7f0000000100)={0x100}, 0x8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0xffffffffffffffc0, 0x4) socketpair(0x11, 0x4, 0x7, &(0x7f0000000200)) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) recvmsg$kcm(r0, &(0x7f0000000800)={&(0x7f0000000080)=@generic, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000001c00)=""/4096, 0x1000}, 0x2) recvmmsg(r0, &(0x7f0000003b00)=[{{&(0x7f0000003380)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f00000039c0), 0x0, &(0x7f0000003a40)=""/187, 0xbb}}], 0x1, 0x2, &(0x7f0000003bc0)) 2018/05/17 02:40:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 533.407367] binder: 2197:2239 got transaction to invalid handle [ 533.413569] binder: 2197:2239 transaction failed 29201/-22, size 0-0 line 2856 [ 533.595811] device lo entered promiscuous mode [ 533.600822] binder: undelivered TRANSACTION_ERROR: 29201 [ 533.606763] binder: undelivered TRANSACTION_ERROR: 29201 [ 533.619910] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x70b}], 0x1) 2018/05/17 02:40:59 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:40:59 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xfc}, 0x1c) 2018/05/17 02:40:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0x0, 0xfdfdffff00000000]}) 2018/05/17 02:40:59 executing program 5: futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x140, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x101000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) socketpair$inet6(0xa, 0x3, 0x8001, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'teql0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}}) 2018/05/17 02:40:59 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x3, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:40:59 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'veth0\x00', 0x600}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 533.790239] binder: 2277:2281 got transaction to invalid handle [ 533.796406] binder: 2277:2281 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:40:59 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:40:59 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x7b0}], 0x1) [ 533.834331] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:40:59 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x1f4}, 0x1c) [ 533.860675] binder_alloc: binder_alloc_mmap_handler: 2277 20001000-20004000 already mapped failed -16 2018/05/17 02:40:59 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = memfd_create(&(0x7f0000000000)='/dev/kvm\x00', 0x2) r4 = getpid() ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000040)=r4) 2018/05/17 02:40:59 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0x0, 0x0, 0xfdfdffff00000000]}) [ 533.933255] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:41:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0xff00], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 533.956280] binder: 2277:2287 got transaction to invalid handle [ 533.962596] binder: 2277:2287 transaction failed 29201/-22, size 0-0 line 2856 [ 534.024118] binder: 2277:2281 ioctl 40046207 0 returned -16 [ 534.111115] device lo entered promiscuous mode [ 534.133515] binder: undelivered TRANSACTION_ERROR: 29201 [ 534.141525] binder: undelivered TRANSACTION_ERROR: 29201 [ 534.171336] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:41:00 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xe6c}], 0x1) 2018/05/17 02:41:00 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0xc0fe}, 0x1c) 2018/05/17 02:41:00 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0x0, 0x0, 0x1000000]}) 2018/05/17 02:41:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:41:00 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x48000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:41:00 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x203ff, 0x40) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x5, 0x7ff, 0x5, 0xfffffffffffffff8, 0x6, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e22, 0x100000001, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}, [0x401, 0x100000000, 0x2, 0x9, 0x200, 0xe9, 0x162c7d26, 0x9, 0xfffffffffffffc01, 0x0, 0x5, 0x1, 0x0, 0x1, 0x81]}, &(0x7f00000001c0)=0x100) process_vm_writev(0x0, &(0x7f0000000240), 0x10f, &(0x7f0000000440), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x364) mlock2(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) 2018/05/17 02:41:00 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0xa9911f974e87a42f, &(0x7f00000000c0)=0x7, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffffffffff80, 0x80) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000040)={{0x2, 0x4e20, @multicast2=0xe0000002}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x48, {0x2, 0x4e21}, 'vcan0\x00'}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000100)=0xffffffff00000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/05/17 02:41:00 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfffffdef, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:41:00 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 534.936678] binder: 2331:2332 got transaction to invalid handle [ 534.941652] IPVS: ftp: loaded support on port[0] = 21 [ 534.943056] binder: 2331:2332 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:41:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x44d}], 0x1) 2018/05/17 02:41:01 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x400000000000000}, 0x1c) 2018/05/17 02:41:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0x0, 0x0, 0xfdfdffff]}) 2018/05/17 02:41:01 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x1, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f00000001c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) getresuid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) syz_fuse_mount(&(0x7f0000000200)='./file0\x00', 0x1000, r5, r6, 0x4921, 0x1000000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x3, 0x100000000}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f00000000c0)={0x20, 0x5, 0x169, 0x0, r7}, 0x10) [ 535.110906] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/17 02:41:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:41:01 executing program 5: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f0000000080)=0x1) close(r0) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x2000, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) [ 535.135144] binder_alloc: binder_alloc_mmap_handler: 2331 20001000-20004000 already mapped failed -16 [ 535.140764] binder: 2331:2352 got transaction to invalid handle [ 535.150857] binder: 2331:2352 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:41:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xb64}], 0x1) 2018/05/17 02:41:01 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x0, @empty={[0x1f4]}}, 0x1c) 2018/05/17 02:41:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 535.272530] binder: 2331:2332 ioctl 40046207 0 returned -16 [ 535.385786] binder: undelivered TRANSACTION_ERROR: 29201 [ 535.413811] binder: undelivered TRANSACTION_ERROR: 29201 [ 535.509409] device lo entered promiscuous mode [ 535.527874] IPVS: ftp: loaded support on port[0] = 21 2018/05/17 02:41:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0x0, 0x0, 0xfffffdfd]}) 2018/05/17 02:41:01 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x0, @empty={[0xc0ffffff00000000]}}, 0x1c) 2018/05/17 02:41:01 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:41:01 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x6b65a878, 0x4) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x2, @loopback={0x0, 0x1}}, 0x1c) r1 = accept4(r0, &(0x7f00000001c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0xfffffffffffffed5, 0x800) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000140)={{0x3b, @multicast2=0xe0000002, 0x4e20, 0x0, 'wrr\x00', 0x39, 0xffffffffffff7fff, 0x6b}, {@loopback=0x7f000001, 0x4e24, 0x4, 0x40, 0x10001}}, 0x44) 2018/05/17 02:41:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xbcb}], 0x1) 2018/05/17 02:41:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:41:01 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080)={0x80000001, 0xffffffff, 0x1, 0x7}, 0x8) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200000, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000040)={"73797a6b61e63d002bd960c9554ed265", 0x1}) 2018/05/17 02:41:01 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x200000000000000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) [ 535.622563] binder: 2399:2408 got transaction to invalid handle [ 535.628776] binder: 2399:2408 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:41:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:41:01 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4000000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x20000, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x101000, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000240)) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000200)=0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x8, 0x0, 0x9, 0xfffffffffffffff8, 0x0, 0x7, 0x0, 0xc, 0x5, 0xcdec, 0xa0, 0x5, 0x5, 0x5, 0x1, 0x8, 0x28, 0x6, 0x7619, 0xb67b, 0x1, 0x800, 0x7, 0x4, 0x93c, 0x3ff, 0x80000000, 0x1, 0x10000, 0x90, 0xfffffffffffffd90, 0x9, 0xfff, 0x5, 0x97b2, 0x4, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x400, 0x200, 0x41499325, 0x0, 0x5, 0x6, 0x8}, r6, 0xc, r0, 0x9) 2018/05/17 02:41:01 executing program 5: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfffffdef, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:41:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x84b}], 0x1) [ 535.690924] IPVS: ftp: loaded support on port[0] = 21 [ 535.706161] binder_alloc: binder_alloc_mmap_handler: 2399 20001000-20004000 already mapped failed -16 2018/05/17 02:41:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2, 0x0, [0x0, 0x0, 0x100000000000000]}) 2018/05/17 02:41:01 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x0, @empty={[0xffffffc0]}}, 0x1c) [ 535.778351] binder: BINDER_SET_CONTEXT_MGR already set [ 535.799715] IPVS: ftp: loaded support on port[0] = 21 [ 535.814396] binder: 2399:2417 got transaction to invalid handle [ 535.820631] binder: 2399:2417 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:41:01 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 535.862425] binder: 2399:2408 ioctl 40046207 0 returned -16 2018/05/17 02:41:01 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:41:01 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0xa9e}], 0x1) 2018/05/17 02:41:01 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x0, @empty={[0xe803000000000000]}}, 0x1c) [ 535.925183] binder: undelivered TRANSACTION_ERROR: 29201 [ 535.931435] binder: undelivered TRANSACTION_ERROR: 29201 [ 535.933935] Unknown ioctl -2147199793 2018/05/17 02:41:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000000)=0x3000) r2 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r2}) eventfd(0x4) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x105800) ioctl$SG_SCSI_RESET(r3, 0x2284, 0x0) 2018/05/17 02:41:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 536.021465] Unknown ioctl -2147199793 [ 536.033950] binder: 2448:2449 got transaction to invalid handle [ 536.040344] binder: 2448:2449 transaction failed 29201/-22, size 0-0 line 2856 [ 536.073772] device lo entered promiscuous mode 2018/05/17 02:41:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x564}], 0x1) [ 536.128017] binder_alloc: binder_alloc_mmap_handler: 2448 20001000-20004000 already mapped failed -16 [ 536.142712] binder: BINDER_SET_CONTEXT_MGR already set [ 536.148276] IPVS: ftp: loaded support on port[0] = 21 [ 536.167136] binder: 2448:2449 ioctl 40046207 0 returned -16 2018/05/17 02:41:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) 2018/05/17 02:41:02 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x0, @empty={[0xfec0000000000000]}}, 0x1c) [ 536.245946] binder: 2448:2469 got transaction to invalid handle [ 536.250863] device lo entered promiscuous mode [ 536.252151] binder: 2448:2469 transaction failed 29201/-22, size 0-0 line 2856 2018/05/17 02:41:02 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$llc(r1, &(0x7f0000000100)={0x1a, 0x8, 0x9, 0xce1, 0x9f3, 0x4, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0xfffffffffffffff7, 0xf62, 0x2, 0xf6, 0x5, 0x2, 0xfff, 0x5, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0x7, 0x9}, 0x8) 2018/05/17 02:41:02 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/4096, 0x993}], 0x1) 2018/05/17 02:41:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x2) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000200)={{r3, r4/1000+30000}, {r5, r6/1000+30000}}, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000040)) r7 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x0, r7}) keyctl$join(0x1, &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000015c0)={0x0, r7}) 2018/05/17 02:41:02 executing program 0: r0 = socket$inet6(0xa, 0x100040000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xfffffffffffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000080)=0xeeffffffffffffff, 0xc409f983e8afaf53) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x1000000004e20, 0x0, @empty={[0xf4010000]}}, 0x1c) 2018/05/17 02:41:02 executing program 5: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfffffdef, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:41:02 executing program 7: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0xfffffdfd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)}, 0x8000}}], 0x0, 0x0, &(0x7f0000000280)}) 2018/05/17 02:41:02 executing program 6: unshare(0x40000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0xfe800000, 0x0, &(0x7f0000000140)={0xa, 0x4e21}, 0x1c) 2018/05/17 02:41:02 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) [ 536.426369] binder: undelivered TRANSACTION_ERROR: 29201 [ 536.432804] binder: undelivered TRANSACTION_ERROR: 29201 [ 536.476719] IPVS: ftp: loaded support on port[0] = 21 [ 536.491722] kasan: CONFIG_KASAN_INLINE enabled [ 536.496810] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 536.504287] general protection fault: 0000 [#1] SMP KASAN [ 536.508669] binder: 2500:2501 got transaction to invalid handle [ 536.509823] Dumping ftrace buffer: [ 536.509830] (ftrace buffer empty) [ 536.509835] Modules linked in: [ 536.509855] CPU: 0 PID: 2494 Comm: syz-executor1 Not tainted 4.17.0-rc5+ #79 [ 536.509868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 536.515954] binder: 2500:2501 transaction failed 29201/-22, size 0-0 line 2856 [ 536.519457] RIP: 0010:__radix_tree_delete+0x74/0x230 [ 536.519465] RSP: 0018:ffff880194c17168 EFLAGS: 00010246 [ 536.519478] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffc90002ec8000 [ 536.519501] RDX: 000000000000004a RSI: ffffffff8769130d RDI: ffff8801953919e8 [ 536.575187] RBP: ffff880194c17208 R08: ffff8801b4b202c0 R09: ffffed0032a72321 [ 536.582440] R10: ffff880194c17318 R11: ffff88019539190f R12: 0000000000000000 [ 536.589703] R13: ffff8801953919e8 R14: 0000000000000002 R15: ffff880194c17290 [ 536.596959] FS: 0000000000000000(0000) GS:ffff8801dae00000(0063) knlGS:00000000f5fe0b40 [ 536.605168] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 536.611032] CR2: 000000002f422000 CR3: 00000001b1b33000 CR4: 00000000001426f0 [ 536.618295] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.625551] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 536.632805] Call Trace: [ 536.635378] ? find_held_lock+0x36/0x1c0 [ 536.639433] ? radix_tree_tag_clear+0x490/0x490 [ 536.644086] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 536.649088] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 536.653840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 536.659365] radix_tree_delete_item+0x148/0x2d0 [ 536.664024] ? radix_tree_lookup+0x30/0x30 [ 536.668247] ? kvm_vm_ioctl_hv_eventfd+0x1d0/0x24b [ 536.673164] ? __mutex_lock+0x40/0x17f0 [ 536.677129] idr_remove+0x46/0x60 [ 536.680568] kvm_vm_ioctl_hv_eventfd+0x1df/0x24b [ 536.685312] kvm_arch_vm_ioctl+0x155e/0x2690 [ 536.689714] ? print_usage_bug+0xc0/0xc0 [ 536.693762] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 536.698765] ? kvm_vm_ioctl_irq_line+0x160/0x160 [ 536.703504] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 536.708247] ? retint_kernel+0x10/0x10 [ 536.712115] ? graph_lock+0x170/0x170 [ 536.715912] ? _raw_spin_unlock_irqrestore+0xa1/0xc0 [ 536.720999] ? graph_lock+0x170/0x170 [ 536.724785] ? __lock_is_held+0xb5/0x140 [ 536.728830] ? print_usage_bug+0xc0/0xc0 [ 536.732886] ? debug_check_no_locks_freed+0x310/0x310 [ 536.738063] ? __lock_is_held+0xb5/0x140 [ 536.742111] ? __account_cfs_rq_runtime+0x600/0x600 [ 536.747204] ? __lock_acquire+0x7f5/0x5140 [ 536.751423] ? __perf_event_task_sched_out+0x2e8/0x1a30 [ 536.756771] ? zap_class+0x720/0x720 [ 536.760477] ? debug_check_no_locks_freed+0x310/0x310 [ 536.765657] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 536.771179] ? __perf_event_task_sched_in+0x247/0xb80 [ 536.776355] ? perf_trace_lock+0xd6/0x900 [ 536.780506] kvm_vm_ioctl+0x246/0x1d90 [ 536.784376] ? find_held_lock+0x36/0x1c0 [ 536.788425] ? kvm_set_memory_region+0x50/0x50 [ 536.792992] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 536.797995] ? zap_class+0x720/0x720 [ 536.801785] ? retint_kernel+0x10/0x10 [ 536.805657] ? graph_lock+0x170/0x170 [ 536.809444] ? _raw_spin_unlock_irq+0x56/0x70 [ 536.813932] ? find_held_lock+0x36/0x1c0 [ 536.817984] ? lock_downgrade+0x8e0/0x8e0 [ 536.822120] ? rcu_is_watching+0x85/0x140 [ 536.826252] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 536.831431] ? __fget+0x40c/0x650 [ 536.834870] ? kmem_cache_free_bulk+0x1b1/0x1d0 [ 536.839526] ? expand_files.part.8+0x9a0/0x9a0 [ 536.844094] ? kasan_check_read+0x11/0x20 [ 536.848228] ? kasan_check_write+0x14/0x20 [ 536.852450] ? __fget_light+0x2ef/0x430 [ 536.856425] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 536.861168] kvm_vm_compat_ioctl+0x13b/0x420 [ 536.865564] ? kvm_vm_ioctl+0x1d90/0x1d90 [ 536.869696] ? __ia32_compat_sys_futex+0x3de/0x5e0 [ 536.874620] ? exit_to_usermode_loop+0x87/0x310 [ 536.879278] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 536.884801] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 536.889975] ? kvm_vm_ioctl+0x1d90/0x1d90 [ 536.894111] __ia32_compat_sys_ioctl+0x221/0x640 [ 536.898854] do_fast_syscall_32+0x345/0xf9b [ 536.903161] ? do_int80_syscall_32+0x880/0x880 [ 536.907724] ? _raw_spin_unlock_irq+0x27/0x70 [ 536.912203] ? finish_task_switch+0x1ca/0x840 [ 536.916685] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 536.922214] ? syscall_return_slowpath+0x30f/0x5c0 [ 536.927144] ? sysret32_from_system_call+0x5/0x46 [ 536.931972] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 536.936805] entry_SYSENTER_compat+0x70/0x7f [ 536.941296] RIP: 0023:0xf7fe4cb9 [ 536.944644] RSP: 002b:00000000f5fe00ac EFLAGS: 00000282 ORIG_RAX: 0000000000000036 [ 536.952449] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 000000004018aebd [ 536.959704] RDX: 0000000020000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 536.966957] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.974208] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 536.981461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 536.988716] Code: 46 9a 88 48 c7 45 88 a0 12 69 87 c7 00 f1 f1 f1 f1 c7 40 04 00 f2 f2 f2 c7 40 08 f3 f3 f3 f3 e8 e3 1b 10 fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 0f 85 97 01 00 00 48 8d 55 d8 4c 8d 7a c0 49 8b 1e [ 537.007941] RIP: __radix_tree_delete+0x74/0x230 RSP: ffff880194c17168 [ 537.014711] ---[ end trace d0e6de9ce871e8f9 ]--- [ 537.019493] Kernel panic - not syncing: Fatal exception [ 537.025395] Dumping ftrace buffer: [ 537.028921] (ftrace buffer empty) [ 537.032619] Kernel Offset: disabled [ 537.036227] Rebooting in 86400 seconds..