0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x1, @rand_addr=0x7fffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, 0x4, 0xde, 0x4, 0x2, &(0x7f0000001000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x200, 0x4}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$inet(r0, 0x0, &(0x7f0000001000)=0x0) 2017/07/29 11:53:58 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001000-0x4)=0x10001, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000)="2f6465762f72666b696c6c00", 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000001000-0x8c)={0x0, 0x1, 0x5e0, "71756575653100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000fc1000-0x12)={@generic="8531917ea1ea4e0ad64315e7eecb0b05", 0x0}) 2017/07/29 11:53:58 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x5, 0xa, 0x6, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000002000-0x68)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:53:58 executing program 1: getegid() r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000096f000-0xf)="2f6465762f73657175656e63657200", 0xc0000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000002000-0xc)={0x0, 0x0}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000001000-0x40)={0x40, 0x400, 0xfffffffffffffff8, 0x0, &(0x7f00003c4000)="", 0x4, &(0x7f0000347000)="00000000", 0x9, &(0x7f0000b6e000-0x9)="000000000000000000"}) 2017/07/29 11:53:58 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00001c0000)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000fdf000)="2e2f66696c653000", &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00009c1000)="2e2f66696c653000", r0, r1) getegid() 2017/07/29 11:53:58 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)="2f6465762f736e642f74696d657200", 0x0, 0x40) getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)="2f6465762f736e642f74696d657200", 0x0, 0x100) 2017/07/29 11:53:58 executing program 1: r0 = getegid() setgid(r0) 2017/07/29 11:53:58 executing program 1: r0 = socket$inet6(0xa, 0xa, 0x2e7e) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000884000)={@common="6e723000000000000000000000000000", 0x800000000000007}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f72666b696c6c00", 0x200000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000000000)=0x0, &(0x7f0000663000)=0x4) getegid() [ 286.475800] binder: 22770:22772 ioctl 40206417 2003dfe0 returned -22 [ 286.508877] binder: 22778:22788 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:53:58 executing program 0: r0 = socket(0x20000000000000a, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000fb1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3d, 0x40002000, &(0x7f0000001000-0xe)=@l2={0x1f, 0x100, {0x7, 0x80000001, 0x0, 0x7fffffff, 0x1, 0x0}, 0xc22, 0x668}, 0xe) r1 = dup2(r0, r0) mq_notify(r1, &(0x7f0000001000-0x50)={0x10000000000, 0xb, 0x2, @pad=[0x7d1e, 0x81, 0x32b, 0x5e, 0x5, 0x9, 0xffffffff, 0xfffffffffffffffd]}) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000fc1000-0x12)={@generic="8531917ea1ea4e0ad64315e7eecb0b05", 0x0}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000a2e000)={@common="69726c616e3000000000000000000000", @ifru_flags=0x100}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x8936, &(0x7f0000001000-0x28)={@generic="ebd3af53a85ad108f139efd79c2620bc", @ifru_addrs=@in={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2017/07/29 11:53:58 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000521000-0x10)={0x0, 0x0}, &(0x7f00008e7000-0x4)=0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:53:58 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000001000-0xd)="2f6465762f7573626d6f6e2300", 0xfff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000000)={0xc9, {{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) socket$inet(0x2, 0x2, 0xfffffffffffffffe) accept$inet(0xffffffffffffffff, 0x0, &(0x7f00007dd000)=0x0) [ 286.511755] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 286.512446] binder: 22770:22772 ioctl 8940 20d44fe8 returned -22 [ 286.524069] binder: 22770:22772 ioctl 40206417 2003dfe0 returned -22 [ 286.533033] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 286.534069] binder: 22770:22821 ioctl 8940 20d44fe8 returned -22 [ 286.608710] binder: 22778:22823 ioctl 8940 20d44fe8 returned -22 [ 286.621210] binder: 22778:22823 ioctl 40206417 2003dfe0 returned -22 [ 286.640802] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 286.648933] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 286.654426] binder: 22778:22823 ioctl 8940 20d44fe8 returned -22 2017/07/29 11:53:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r2, 0x8000, 0x0}, {r3, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {r3, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r6, 0x89e1, &(0x7f000098d000-0x4)=0x0) write$tun(r6, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00003fa000)={0x20000004, 0x0}) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000d45000-0x18)=@generic={0xfffffffffffffc01, 0x401, 0xffffffffffffff7f}) 2017/07/29 11:53:59 executing program 5: socket$inet(0x2, 0xa, 0x0) r0 = open(&(0x7f0000d0b000-0x8)="2e2f66696c653000", 0x50042, 0x100) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000814000)={0x5, 0xced7, 0x400, 0x0, 0xf, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) accept$inet(0xffffffffffffffff, 0x0, &(0x7f00007dd000)=0x0) 2017/07/29 11:53:59 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000844000)="2f6465762f70707000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0x0, 0xffffffffffffffff, 0x0) gettid() seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) connect$unix(r0, &(0x7f0000295000-0xa)=@file={0x0, "2e2f66696c653000"}, 0xa) r2 = inotify_init() r3 = epoll_create1(0x0) flock(r2, 0xfffffffffffffffe) perf_event_open(&(0x7f0000034000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b37000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b37000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) accept$inet(r0, &(0x7f00009a6000-0x10)={0x0, 0x0, @broadcast=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000d1e000)=0x10) r4 = epoll_create(0xffff) flock(r3, 0x2) flock(r4, 0x2) dup3(r2, r3, 0x0) set_tid_address(&(0x7f0000001000)=0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffffc00, 0x0, 0x9, 0x0, 0x80000001, 0x9, 0x0, 0x0, 0xfe00000000000000, 0x0, 0xffffffff, 0x2, 0x5b, 0xfd, 0x6c10, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff}) gettid() 2017/07/29 11:53:59 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00005b0000-0x12)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x800, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r1, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 286.762623] binder: 22851:22853 ioctl 40206417 2003dfe0 returned -22 [ 286.798009] binder: 22851:22860 ioctl 8940 20d44fe8 returned -22 [ 286.810443] binder: 22851:22860 ioctl 40206417 2003dfe0 returned -22 [ 286.830819] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 286.838130] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 286.842443] binder: 22851:22861 ioctl 8940 20d44fe8 returned -22 2017/07/29 11:53:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r7, 0x89e1, &(0x7f000098d000-0x4)=0x0) write$tun(r7, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00003fa000)={0x20000004, 0x0}) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000d45000-0x18)=@generic={0xfffffffffffffc01, 0x401, 0xffffffffffffff7f}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:53:59 executing program 1: keyctl$join(0x1, 0x0) r0 = getegid() ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f000029e000-0x4)=0x0) ptrace$setsig(0x4203, r1, 0xffffffffffffff81, &(0x7f00009b3000-0x10)={0x402d, 0x7ff, 0x4, 0x9}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setgroups(0x6, &(0x7f0000003000-0x18)=[r0, r0, r0, r0, r0, r0]) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000002000-0xc)={0x0, 0x0, 0x0}, 0xc) lchown(&(0x7f0000001000-0x8)="2e2f66696c653000", r3, r0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000001000)=0x0, &(0x7f0000002000-0x4)=0x0, &(0x7f0000002000-0x4)=0x0) 2017/07/29 11:53:59 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfc5000)=nil, 0xfc5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r3 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r5, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r4, 0x0, r3, 0x0, 0x200000, 0x0) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r5, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r4, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r1, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) mmap(&(0x7f0000fc6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) bind$inet(r6, &(0x7f0000fc4000-0x9)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000fc1000-0x8)=0x0) ioctl$TCSETSW(r5, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r4, 0x0, r7, 0x0, 0x1, 0x7) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000fc2000-0x18)=@generic={0x401, 0x8, 0x9eeb}) splice(r4, 0x0, r7, 0x0, 0x1ff, 0xfffffffffffffffc) close(r5) ioctl$TIOCSTI(r1, 0x5412, 0x81) read$eventfd(r3, &(0x7f0000c63000+0x9e5)=0x0, 0x8) mmap(&(0x7f0000b21000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x0) 2017/07/29 11:53:59 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:53:59 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$inet(r0, 0x0, &(0x7f0000bfa000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000000)=0x0, &(0x7f00004f8000-0x4)=0x4) 2017/07/29 11:53:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000d7b000-0x1f)="00000000000000000000000000000000000000000000000000000000000000") getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:53:59 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) listen(r0, 0x401) r1 = socket$inet(0x2, 0xa, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000004000-0x90)={0x7, {{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000003000-0x80)=[@in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x6, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x6}, @in6={0xa, 0x3, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xfffffffffffffff9}, @in6={0xa, 0x3, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xf8c}, @in6={0xa, 0x1, 0x1, @loopback={0x0, 0x1}, 0x4}], 0x5) sendto$inet(r1, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:53:59 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e6365723200", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x9, 0x4) getegid() 2017/07/29 11:53:59 executing program 1: getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x0, &(0x7f0000000000)=0x4) 2017/07/29 11:53:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000ee3000)={0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0xc) getegid() mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000)="2f6465762f72666b696c6c00", 0x2, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) 2017/07/29 11:53:59 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000001000)="2f6465762f696e7075742f6d69636500", 0x0, 0x101000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000002000-0x4)=0x5, 0x4) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:53:59 executing program 1: getegid() r0 = syz_open_dev$sg(&(0x7f0000f99000)="2f6465762f73672300", 0x6, 0xc000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000001000-0x8)=@assoc_value={0x0, 0x1}, &(0x7f0000108000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in={{0x2, 0x2, @rand_addr=0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xf0c, 0x9, 0x4, 0x3f, 0x10}, 0xa0) [ 286.978986] binder: 22890:22893 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:53:59 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$llc(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000001000)=0x10) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="e1517d6ce8da8f3f05686e1b3747828e4de4e5ea3e9b9adf160c813918a3f5d0220738ba47e21d72fb811fc3d632880df4aca10b94fc8a70eeeef5d709dc5c62acfc02950099fc422d9360f3ec09c4a80887efcc40052dab856cb5d02541575c79919a7137f00289d893d549b56b4b105ffcda96e2c82ac49b357c2415831b1d6b83bccb7507ed65c43f392e98dd1cbbe2e687d70b246b0ba6d77e84376ad1056ab05f3273f7070ccf9c4a43") r1 = socket$inet(0x2, 0xa, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000003000-0x10)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000002000)={0x5, 0x6, 0x0, {r2, r3+10000000}, 0x0, 0x7c0000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$inet(r1, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:53:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r2, 0x8000, 0x0}, {r3, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {r3, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r6, 0x89e1, &(0x7f000098d000-0x4)=0x0) write$tun(r6, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f00003fa000)={0x20000004, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:53:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x406, r4) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:53:59 executing program 5: socket$inet(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f70707000", 0x400, 0x0) 2017/07/29 11:53:59 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000afe000-0x8e)={{{@in=@loopback=0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000205000)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000eea000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001000-0xe8)={{{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @in=@broadcast=0xffffffff, 0x2, 0x5, 0x1, 0x8, 0x8, 0x20, 0x80, 0x6, r1, r2}, {0x1, 0x4, 0x3ff, 0x4, 0x1, 0x9ca, 0xad2a, 0xff}, {0x3619, 0x10000, 0x7f, 0x3}, 0x7, 0x100, 0x1, 0x0, 0x82, 0x1}, {{@in=@local={0xac, 0x14, 0x0, 0xaa}, 0xc9e7, 0x80000001}, 0x1, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3ea, 0x0, 0x3, 0x7, 0x1, 0x8, 0x5}}, 0xe8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000002000-0x8)={0x0, 0x7}, &(0x7f0000002000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001000)=@assoc_value={r3, 0x6}, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:53:59 executing program 1: getegid() r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f00001fb000)={0x0, 0x7}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000234000)={r1, 0x1, 0x6, 0x7f}, &(0x7f0000000000)=0x10) [ 287.030412] binder: 22890:22918 ioctl 8940 20d44fe8 returned -22 [ 287.043738] binder: 22890:22918 ioctl 40206417 2003dfe0 returned -22 [ 287.058286] binder: 22890:22918 ioctl 8940 20d44fe8 returned -22 [ 287.111927] binder: 22926:22931 ioctl 40206417 2003dfe0 returned -22 [ 287.130184] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 287.149682] binder: 22926:22931 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:53:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r7, 0x89e1, &(0x7f000098d000-0x4)=0x0) write$tun(r7, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00003fa000)={0x20000004, 0x0}) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000d45000-0x18)=@generic={0xfffffffffffffc01, 0x401, 0xffffffffffffff7f}) 2017/07/29 11:53:59 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfc5000)=nil, 0xfc5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r3 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r5, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r4, 0x0, r3, 0x0, 0x200000, 0x0) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r5, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r4, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r1, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) mmap(&(0x7f0000fc6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) bind$inet(r6, &(0x7f0000fc4000-0x9)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000fc1000-0x8)=0x0) ioctl$TCSETSW(r5, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r4, 0x0, r7, 0x0, 0x1, 0x7) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000fc2000-0x18)=@generic={0x401, 0x8, 0x9eeb}) splice(r4, 0x0, r7, 0x0, 0x1ff, 0xfffffffffffffffc) close(r5) ioctl$TIOCSTI(r1, 0x5412, 0x81) read$eventfd(r3, &(0x7f0000c63000+0x9e5)=0x0, 0x8) mmap(&(0x7f0000b21000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x0) 2017/07/29 11:53:59 executing program 1: r0 = getegid() r1 = socket(0x4, 0x1, 0x5) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x112, r1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) socketpair$llc(0x1a, 0x2, 0x0, &(0x7f000035e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000cb9000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$llc(0x1a, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = inotify_init1(0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f70746d7800", 0x82400, 0x0) r11 = socket$inet6(0xa, 0x80000, 0x1) r12 = getpid() mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00002b9000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f0000002000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = perf_event_open(&(0x7f000023a000-0x78)={0x1, 0x78, 0x7ff, 0x100000001, 0x0, 0x1000, 0x0, 0x100000001, 0x8110, 0x8, 0x3, 0x8001, 0x6, 0x4, 0x0, 0xbce, 0x2, 0x2, 0x8, 0x280, 0x100, 0x100000000, 0x7, 0x2, 0x80, 0x7f, 0x0}, 0xffffffffffffffff, 0x3f, 0xffffffffffffffff, 0x8) r16 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r17 = inotify_init1(0x800) r18 = getpgid(0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x35, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, 0xc) r21 = geteuid() r22 = getpid() r23 = geteuid() r24 = inotify_init1(0x80800) r25 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r26 = syz_open_dev$usbmon(&(0x7f000048f000)="2f6465762f7573626d6f6e2300", 0x100000001, 0x10000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000f9f000)="2f6465762f72666b696c6c00", 0x280, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$unix(r1, &(0x7f0000001000-0x70)=[{&(0x7f000087e000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000000)=[{&(0x7f0000000000)="860375f3a069b1dccca2b2ee7acdcccfcb5d61b98a7b519c2756d7e7de8194096b2228b130a5328650b8fff82a5bfe42595dc0f2979afbb173fe1f2f84420db613c4a871ca4888804668466478785d3169988c0a96f00d293bcf77d67f9fe68fa825d930b8f39b17a20912610f6beed6d623716fb39ec501d872f080cbc53e752358508b4b8ca0b6aa33b02091fe033efd2ae18f28c3b0beabd1adb3cd0f72d4b3aca3ff13fafa269e7d89b0b88c187ced944a979a8f015bcc7c225312bf030a69ef0b41e54062ba0bae954f5e22dc4ee1acad02e45c1b0c5b78d1db52752e890f174812e7005661f08245568ed95dbf4f706a43fde6a9f48e627ecf47b9983c1bd74b343f039ea69b62c1be3d10215f5ca2aee96e3cb8ea37cf4fa3e94b65cb1be77bc121aea5743b82182b753797083c12990b767f8c58714eea9e8f3bed50b67d2be4e0dfbbaba0e4c2f086d899a9e3da0ac9c713775e636e1a6b7bcc91510ac1725909de239ccff109d3d1db26931d083ea939e9d708ff5e8b66a84dc5160935c55ae726c3aefdd2192e8094030e96631e8a32f0fc02f9ca8bad59b6def07b390006c7af9684b1501f02350593fd1ad28fabc4712aedf41c7b7ff6b284b15dee4168bf191b2d8a597ef96b95472428e7214b68a1642d1d2ab557f2322e4ca368050aa1af33ecf69ab82898582404081de82da2d9c7ec8d590c52ee334081c4e2fd0d4bf4e3f53d55d039eef10ab2bbd697a74935ef3e13716b3fa5a7ea1a707875678fdd88ae01f91c29a20c211ab86f3fa3e29447f178c8ee690676e2d9f71dc68cbb7c8223e5cb2f83ce3cadec0757777a242dd4ed84cd72470aa59f20ac58cdab3279f04301155c9438479c5dae6b7afdd55a7a4bf3a6d8e75465e492b545ba6e4e6c6f28c1fe57b5c1a68f1e74c9275df5e2d837ac1d029e708d4b16d23fd5e9d2bb70436a402e0326b7e74789084396f6d5d8d15428279fa11b953b23f303479e5f88ccf6077d8aeae5885bd4cf5df506851af39f7bd949beaa0a6b7c78736dd709580e61cd4a4755f5702b7685f72ece526ddfbda44d85380b2cd8b0ac1dfb289c00656a160ac4de07af2e160f79989d4c4fb07260a9e3f9f2fc74a2c7187de8aceffbeda9c1c96282f6ccc71e7b59c3aae9e327d2d46f9ed1953031008227a439f63773be1f7c436336314a6161c37264701085649b763d6678c8c3538cb67dc3d4704f458baf572b05fbc35b413ce7ea63271251b945e09e13b8442a2d9cab7bcfb6cd0cd24d1eec6e20a44e5130eddbc4e177ab9de6f1aef7469b9fae073cb08d781b6e0d88770a362ff0dd089dfd4919d3b184abaad0b708f108fc624d741a71a8c35dfbf87ac8aeb343619c3d317668882a816d26d8b0fc92909a2a451bca3318c6b8aa5adec2b8a1ce9b02a65dd40b51d8ec7ba4fd33e6ec64768bbfdd64d61e2fdda6838bcb0846ab3f57e16d5289f582e595017663b80d1c587839b1b97ada09f05915784116255cc412801e4cda0d26a300b3fc90ce9a34cc281c08f797e07ddffa6cc7c3d59e4d1a2e24006b2583917f100eaf84e5fb14476fadb85659ad66569e89684818349f5afbd5ec6d01e8e1bb8530574245757338c2d1196f9964202f7a5c5101b8cb2783cd1030f36c487ebc76d8c401c5653e6ada0cac70ffaaada72f6b229e9bfe9e131ad235119d12458eb5172e162ae388be883b16ed8d1be90d19e4f16c14b75d83f937a8ef65654e9b44505e5f5a63f9fdd0eba9a19f298781372ecd67cf705bb8f71f27f301df35c8571ae72ad88be0a484d561ce17769207f0a15ce57b70f4a80d8294b6362a47577c489f21062c3aae87f541f61f80fc007080e6ffbe8ddd7a4d7fbeccac1956e33a18bf83ac929dcf31ea89765b3cda70ea56a86cbb451f2bfaf66f76d65484cb643277f49b864a6b1557c100d1909a9b44ef155fb2fc0a8edf0dfa0806cc0e0f3a977b65bcbbfbb7d8e382dc69ef91a285e7b34d0e0d94ef91867c0353c037f49e182de732eaccaaab7149272adf069e39ba3cfb330fc7a02e4c711c81840e481d6cd19a675e512aca98960a81ed57d03e0d433311ee3ec9fa70267915a06ca352fa83042459e18a1fa5b277a5337121e9633dcd7ffeb24a2ebec76e8316d5256728ddc4ad6b0f0ac034cfb56c1c4e4350ce251e59c969e941811f7ba2c8fa3eb1c15964d6846c56f6829d065ef9884250f7104ed44a8dd6ebb96caa7e490269264830e2914f2707bf6949f2e473d2003d18da77247b2ea0758fbe94c833285515e88a8f5920bcabebd85b459405322b4eeffe803a46c5a24c83aa4bf55375309cbb52ce6dcf5483c891c674e20fbc6724b2d9918a187f0d37f6305de98f929255817881e743d9bc0b9a7d13e3d09f316166dc03858004facfabdd6fabbb5f17ace93e22f64757374de6a3cbcae7dbacd186b4eacf06b94c00b60598f262a9dd01955089a88526019b14e0bfde35d0e6ffa4fc3cd04cddaf9a50981ec024f0e8faae640332be688c56da2fc61830bd04918ac678c24c7e29ddf6456dc7b1aa045b7ee45001e188f224576eac968bd51423a22d6e1c3407668d9e71036bad95cc93af566ab2cd485ec2945a0bd406cb3998f4afff53ed071f26e75d4ad1193b291b2543b303051fb275d75dd50a5b3a19f771cd05ff4dc9c92e7f8e9170dc5dae73ee1005ac75f44d988e79c9cbf254e5b183ba115b4a49a202865d738e39f2f77fe336852428e8b1f8c16d8b99c4007de8feee33c6076fd4b37b105368689c0464d85a7789d0eb1a5190acaeff4557a306c149f01f01d6374447efa997d8f715444ceb71a5cabd913082926f8784052ec5b4e35f963d74b8871717337f152a6fff2d8b2e279cf68820e477c3fec6c22aa237a99812fa5e97d8c8f7b04b2778db7063242ed7147648c17300c75b1f82e8129eb1f53e40ab83624ad1844d022e280ea6a752c7fdbe270b3f161737ddce7e30d07cd6696417771d8903dd21a92b336176b85d6a62f7c853f69cc967205c8cf840439d7d6cee60349552ff9e0599ebda50d6a4896ca4bf4bcb85ec8bf81fada6833ce44f3a4be0060438f813cd5c7a2ee1664c608351090b4b7941e660392f105a5b5b0052c85e40b65635bfc21a1665728d475482b25aad0fc0a5599a93eaf3635895bd4e72389efbdba1027576f35f598fb6bf74849ec80bbcd2b954401bc81dde758925d8f58860e07cff19165aaf3d36caa270fa8053052afa031f478bd5db3010af2c96c533fe53237e5dde6e13e05aa0e06a31ac7e7c93c29826d44a61254df434906176ffc70bf22904fd837e62285a7b64414697420ab0b91de92ecc0ae2779ea4ad5977a45ed73b27c5c92d95d3af94d2f06e514c501b0edfadbcbd28ef7ba9e98cd4be9863647a1224b70adc90457f055e13b8a342e88b741abc8e08bef2d891d2325ebdcef19920c5b25cfdeeeeb298990e74600f0cfedf06f46edee1b93968a278f168964a5b228a5555530d5f6020053e359e8c6190fadc118733788c951e4ce1da3ba13181b64907d90468050ab29b0ac617c5a793565a2777196aeb0109168725257e4a0bac4bbffffea3039d72d6d0b6f5ec7941ff97ff599d71fdd21144adfb635892639f23ac642f53bae19a47e856dfad5368d601e5305cd179a2b6a175f36d262b9b8f3c19974c96f3bef22292f9913793762f32c23861c1be97ef1dc85eae758ac5e48de85b58390914952cce3eef675c9dfe516700d62de6a9f369c93649fd9b4387ba1e20e256c69020324e47be5fbf83fdfa3656bcd2cf862b88c15e8a278feab99c2862365a85f097b8dd7275d405ce689ff582d8d45753c90fb697783e31b62a12686b273c4c1c3030f56e8e31fd6bb7ae829598f08acb4f8139d3879d2b662ae6b6625dd701f839dd98ac5f282c2aa164ef8a15e9b83f5592a20fff10d875f0d18909dd65ca6e521221d29e6765ab45dc5b195b59a45566d017870c2bab3c5b15fc72e6e5c67f856bf1bdbc09b22cf68a170fbcc4110853d2e5e43281afc8dfca603ec01391ed27556980af3fdf80dbab043675c2201997e7aaf3d90e36ad8d89e2006f2c642e927070ce88a979a90d7062c48b69e836ab5b60cc9112e6b97c6c65485a770d50da9fe745ca0c96c217d11c436ed68b57f196311653b189c3808079987e174d34c7711f04683ae1add4e8693345aef9299df12f81d04c102d9431cc8a5688692943376103e8934d1163e7d0915ba2e536a905ee8ed1f2ac108f6fb95f26de70902a633adc166f289f81e674bf204fb092cb6b3c557b51c24def53c1ed78049b50d86407021f0c0eb77ce54067eb979f3310ca048a69e9c287359a31af27bab9c45ba405b5146dbba5186d9d30ea737ae4cc66452d5eed8b6975fe631c77c2cec3a45e99fca9d9150623064179a8ab149a03ae7a8ffffa4b8bcc9bab02da786092f0679d9fdf534f35448de280726cfe75733f6bd4261b0c19cdb9d49117464a827d94b13f79e57bbcbb619dc219d319c4f25093556bf6a726fe306869d962957d79848fc34de727b8f643b9da5a3daf3d5190cfce79f300c53abd43c16c4fc28e566b2f1ee92cea0e7ffb32a3b83c315c920d6eab0084d7d4cc8107b3e822320568f74dadee9176a90ac5c67631f6649b18ecc1c403a55ae23baa49ab19a63f474ba9ddb22a811f2aede5d69ac1cf5765608ffb7f4151c239cae45067a337b3d063053992bb67547a36b82fcaa0b286094594788d533fd4e68bcfcffa08ec6cb3c26412a5558b182cce658879052f012456476e980d824e05d7ac101fdf731967ad258119f664a5906828b5065b7ecec66207efa9ca8b8fab4b41ffc96538ec83e164fd27ddd94803a4e5c99156284e9e556278e3c128ad5a861b9f5dd5aac1411a5cd143944b7683d10367de2bfa7b2c64237769d18394b542d8442806bf6b41adc25e5877f39c0d359c81cf2b55856de9b637c130cfe6667be4448c1bc68d0cfc7a5239b79646efa5e8c575897379249c990da05e7754f62a845e448e7f2a2b0d38f02afee4532fcaa5dd8f5913d0dd397a2aadfe3baeb35cb9702c222af99b9dc192e4138e6225209a76ac09896d5cd552940b846877e3eaf01856a81042b16c80718efc7bde55cc008ef04ab87f371efeba8ef617d908808f52017da180da885e498da41b3acbea1714fbb67fa62a32b1afea03b9ecdb2a99d7dcc11543296b68bd03178630a818e971ea3cdf1db8e927915b156942be010701405325ecf3fdef5f22bdd62fd061c8954708ea45c5ef95ebd03ddfd7421e7d0542578b8c6b9402c356bc21b9d8422559b6940435de8118968574830c6ac7092e991575d802019bf6b0a6ac8ba1c718a65d60348a805c90cfbe2f5ebc45200e529fd71ff0f3a82b5c5b8786304b3ae45eb9813dbc7cbcdd076a1dffaa8dec0e674ade1ba12748689914dae9492daf8e5d286953878ba80b6d9268eb622fa7284d5ece3c8fd6542300829cfa1282a9b066494c0dab5b9d2e447534575e1aff16aca8978a00cae0fcb0e50f1642c6ee562914d1d506e06984de8bdf665504af3b7fb7336a500a2f6b436b51573322935a63778e481e89bee4f51043eb6cbc77e8e379d7a893df1cfccde7e72e9510248a8007705449433a6b876ca50cdc067c71e775bb2152f2ea70aee235e26f3f6ad48361c12651ef7383ab8de14bcc051a42eebeef808717437e40745ebd86b050909a85c164142e647a7fb7d9530612bc67757c082176a4dc", 0x1000}, {&(0x7f0000001000-0x9)="a5e28e4987ec7d9953", 0x9}, {&(0x7f000091a000)="", 0x0}, {&(0x7f0000001000-0x1000)="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", 0x1000}, {&(0x7f0000d41000)="58995a1923e7950c60300989f95839a422bda8296efa6dea686c8fd37a07aa91a2ec76be96fe26c975c6d6bd4e1d512139f9820d7af2d10243420018aa2a11d35990fef261e622d7271d965bd2f2a9a7de12b58a06e256b14c05bd4d08fda596cb7dca82b2709e7d0873981f956392132ffab008e570e04636fec22ca746ae5933faa559466caf33e67547b34d323e4b12ca8471bd9691c669599d7a0f3363d090d4615faeb8be2deca03a5d14d4f817a3f7096c880fff0f10692796", 0xbc}, {&(0x7f0000324000)="3092de3dbb22156c7f46c376ddcf77023aa048972a70b39933d91ed7aeb449223f644184a6d1680fae30dd57a2c13b30dffacd0bc2d570491d24f04fc32e0af94d086ea58b9bce8708a30a5cac72abc06c6626680fe59f29a0234ecf3ea6df0ba13163063d0731b5e4378f", 0x6b}, {&(0x7f0000724000-0x79)="0b5239dd276a605baee99667080bc8621ec20651c7e869c6b2e788a1fcf84a0e4c4a725c283120e50a4c9758fe4c52b9034c1e40d2ad0fbed10e0095f89152eaae25150c74425d69a556d29e93d422143245214c30cc09a352fa8de1cfb477e7d2772ce6422d7b80ed9ef597ac2348ad4c58ed29b192f6c66c", 0x79}, {&(0x7f0000001000-0xe2)="bc86eafc0f4d9b97958d47d0b38b1b6f5799123f597738c60ac7719b68af71727232a916880639569ce2c6d7e32db4a8a74b99f0f1db48ca01a63092d3fb550248098e66525f537c7ee7b043141448f431169d2b49a9481eb95e3f8342bba86dcb29aba8caebceeba32ab7b4c9ce92c7140cf76d797ec0d826094a7b2f4ffbc821e286bbc43071be7f6bad0add098b00db3cbccb8fea1755eba93d2bb7b08b19ac9c2b3d86c019121bb036e84982b851e469656e5af1349150ef9445ef92a26f10612dba19aebc167b4da489084089333e606cbb14323eb7234062a4f0f0b40d1b97", 0xe2}, {&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001000-0x57)="87aa3c8fc817932ee5758fa904cabab4e077b48a11b47f357c1730560d89fa3be7c11f38fde2f3331000850c274599e9750684417949d48e361b0132ff37dd9b70820cd32f2098d1c300ccc3e004e76ec7ceea95f3d4ad", 0x57}], 0xa, &(0x7f00000b1000)=[@rights={0x30, 0x1, 0x1, [r2, r3, r5, r6, r7, r8, r9]}, @rights={0x18, 0x1, 0x1, [r10, r11]}, @cred={0x20, 0x1, 0x2, r12, r13, r0}, @rights={0x18, 0x1, 0x1, [r14]}, @rights={0x20, 0x1, 0x1, [r15, r16, r17]}, @cred={0x20, 0x1, 0x2, r18, r19, r0}, @cred={0x20, 0x1, 0x2, r20, r21, r0}, @cred={0x20, 0x1, 0x2, r22, r23, r0}, @rights={0x20, 0x1, 0x1, [r24, r25, r26, r4]}], 0x9, 0x0}, {&(0x7f000041d000)=@abs={0x0, 0x0, 0x2}, 0x8, &(0x7f0000000000)=[{&(0x7f00006b8000-0xe4)="65b3d9aac4523e0658fa7c02391df1bc793c99eb0ce44eb4bf8b43d151f22f76bcc29a76b4d1eb141b536944a2396d18946299d3bfcf65621022c548e53730e96573851ecbe4e333a9c45e5cb58b75349fd4751abc6de41b77aa1413d32f7306e36162d4533647ecfe27fcf321274b78b1a5446da4e1c36aba5d8d95c32d2d25138ef1e1d1d2879aa95adf607931b98b24fc42050504513bca399f4af8394a776391b8eb2e49db6b48cbbe1ea8ed9f1a71cb391e8ccc4ba99548f9e3beab022cd7d3db9d4b04460f708d9813556b3aa2cb97945ee9ad1047735336123f5134f4d8f4b90e", 0xe4}, {&(0x7f0000000000)="6d37fc6e844a3d48c97c80c0a096f3baf526b5bec00e573d6814acfa8d85c5bac2d1759947e558411b99ecaaa0f1f19c032164dd8347006ceda180431ef797367e72dcfb206c6be7912fd7c5e79f94d00cf8bb3dc3d5e5fad3581c2cbbf681686635c611d7599edfd9faf17cd42d4bc8dd70a4b4dad7c9777aadf5011b68d367c41217a36e9ea94deb4900a86a09e6b2f9c6b53434bd12f4796818b84fa8c1416670b42cf42663eeeccfa4b1ea01e31d44134d0294fe3927258204aaed514a145219de886820c78464b9b60418ad5bb1f2aa825f7f0d61fd7ce7d1f7009c0e", 0xdf}, {&(0x7f0000001000-0x98)="dd3a4ea46fcf1feecaab6dee982a2f5d5f8363b5b004c7eb24ac8607b8640095e7cb2fbaee764c1d2db51d2ab2925953037eeadc2c51dbcf8d63e47d897d5d6b72c7e541dca196c06c3f4ca7b75970ebd131446960a3c6ab32ef56d5943674e2d412a8a59be80a95d5931c16b37206a68e5a412a9ad1a322f69df3ab8abbb9233220ab3730177498962cd405fb8e61f6c4f53c0d788a9d4c30832d", 0x9b}, {&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000fc6000-0x72)="778f44928d652c6ddb0d09f8e7dba7140418cfae5ba8594a5bf1bdf1d51e27a695bb6fcb8875f5ddcbd3c48b198ecb19d408772d5c8a28fe3f114e8ee49a411c2ef35b5db924d105f23926a5cecf09b43272b4f098e8f15a37377b808b6dfcf42125111293b3077010ca506de80ed5f3a144", 0x72}, {&(0x7f00001d4000-0xd)="ea2be357a71ed588c37c1e4d11", 0xd}], 0x6, 0x0, 0x0, 0x1}], 0x2, 0x4000) 2017/07/29 11:53:59 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000003000-0x4)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000002000-0x14)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, r1}, 0x14) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000001000)={0x800000000000000, 0x6, 0x2, 0x8}) [ 287.157062] keychord: using input dev AT Translated Set 2 keyboard for fevent 2017/07/29 11:53:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:53:59 executing program 5: r0 = socket$inet(0x2, 0xa, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) prlimit64(r1, 0x6, 0x0, &(0x7f0000001000-0x10)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000069000-0x4)=0x0) r2 = creat(&(0x7f0000001000-0x8)="2e2f66696c653000", 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000001000-0x24)={0xffffffffffffefe2, 0x96, 0x3, 0x0, 0x6, 0x8, 0x9, 0x2, 0x2, 0x3, 0x1bbd, 0xb97}) 2017/07/29 11:53:59 executing program 3: mmap(&(0x7f00000a0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:53:59 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000298000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x400000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000002000-0x24)="91d15804000000000000008141e8f658b38faee5fc1d03ab383db024b8f3c39e827d238e", 0x24, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00005f5000-0xc)={@remote={0x0, 0x0, 0x0, 0x0}, @remote={0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f0000000000)=0xc) r1 = socket$inet(0x2, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000bc6000-0x11)="2f6465762f7667615f6172626974657200", 0xc00, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000002000-0x4)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000001000)=0x0, &(0x7f0000001000)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x5, 0x35, r1, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000001000)=@req={0x28, &(0x7f0000002000-0x28)={@common="6970365f767469300000000000000000", @ifru_data=&(0x7f0000000000)="4f8e3612260a99d59295aa36e8c8a197f4720a309da5d0ef56830f8d1c0685b7"}}) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:53:59 executing program 4: r0 = open(&(0x7f00002da000-0x8)="2e2f66696c653000", 0x240400, 0xa0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000000000)=0x1) socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:53:59 executing program 5: r0 = openat$binder(0xffffffffffffff9c, &(0x7f0000005000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000969000)={0x800, {0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x34, 0xffffffffffffffff, 0xb2, 0x101, 0x100000001, &(0x7f0000001000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x5, 0x3, 0x1a90a0000000000}) r2 = accept$inet(r1, 0x0, &(0x7f00007dd000)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001000-0x8)={0x0, 0x2}, &(0x7f0000001000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001000-0x8)={0x0, 0x2}, &(0x7f0000002000-0x4)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x3}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000001000-0x8)=@assoc_value={0x0, 0x1ff}, &(0x7f0000001000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001000-0x10)={0x5, 0x1, 0x8000, 0x1, 0x0}, &(0x7f0000000000)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001000-0x8)={0x0, 0x8}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000+0xe85)=@sack_info={0x0, 0x7, 0x7fffffff}, &(0x7f0000001000)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xa, "87245a04f49b78459013"}, &(0x7f0000000000)=0x14) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001000-0x108)={0x0, @in={{0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x3ff, 0x1, 0x1f, 0x5974ba70, 0x4, 0x7ff, 0xfffffffffffffffe, 0x2, 0x456d71a7, 0x4cec1925, 0x3, 0x81, 0x7, 0x7, 0x2e]}, &(0x7f0000002000-0x4)=0x108) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000+0xf84)={0x0, 0xffd}, &(0x7f0000002000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000002000-0x8)={0x0, 0x9}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000001000)={0x0, 0x2}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001000-0x10)={0x0, 0x7, &(0x7f0000001000-0x88)=[@in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x2, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x2}, @in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x67d8}, @in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000001000)=0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xabe}, &(0x7f0000002000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000002000-0x8)=@assoc_value={0x0, 0x2b}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001000)={0x0, 0x97, "b7fabcb01ef3eb3ec80c14f4ff1b484d10b2306c6f4efb242e45a36c1d542ae2dd2db28407c2ac1a35e3cbe64114704505b08a26ddb738dfbbb887599aa00106cc5e548d27e05ac335dc275215b84dab0d7edef3fad56f1fdb92bd1b2bd4c08a426427b88cf85bad7a707406046e56cc5311e09da4da5125522f6e0d9e71b02d904bf7e885ef7db8c052fe984e1372c57fbb00c9b25f1b"}, &(0x7f0000002000-0x4)=0xa0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001000-0x8)={0x0, 0x7}, &(0x7f0000001000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001000)=@assoc_value={0x0, 0x3ff}, &(0x7f0000001000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000002000-0x108)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x100, 0x7fff, 0x323, 0x1, 0x0, 0x8, 0x7, 0x6, 0x3, 0x0, 0x1f, 0xa29, 0x7, 0x1000, 0x40]}, &(0x7f0000001000-0x4)=0x108) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000001000-0x20)={0x100000000, 0x100000001, 0x820c, 0x1, 0x0, 0xffffffff, 0x9, 0x3, 0x0}, &(0x7f0000001000-0x4)=0x20) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000002000-0x8)={0x0, 0x6}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000002000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0xffff}, &(0x7f0000001000-0x4)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000001000-0x64)={0x0, 0x59, "f829c050471cbfde26e932211adbb36160b9dd06e847c76bb1b59569a5a0be6c6a4d7b676dca0d4a6480122a63bd8a3b76f542e11654db30494d371e4e6adcc839b8e11fa30c655f9b79ae5bfa3580efb937433e1a06664b00"}, &(0x7f0000000000)=0x64) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000001000)={0x0, 0x8}, &(0x7f0000002000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000000)=[{&(0x7f0000001000)=@in={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000001000-0x20)=[{&(0x7f0000000000)="6a813bbac4e4c33e336709ebeb9627ee2fa222dc8c08aef946307da08429d9d078e24a71bac449c6ea0e77dd847b821a3250b8103c7709cacd83a6fec4cbb8", 0x3f}, {&(0x7f0000000000)="5563893c619fafe41cd1083281593e08a2ce637d931062a951fe70316fd2f07ad864519a9b8aa7244ad3c03bef9d72abbb172f848e67b258ef4f3b09b2b994e117566a82932c3bdc68a7e38c09bd6dbda8705107ffe00c38123a836693a3610513ca83ab524d1b189e95d56a6eda38597ac6687e8bdee4955b0eec805d81955f0d5917f909563fada87c2a32c646ea1afe83077d34ad73693f13a9a4d189d1fa366a8e902ba4486eeb38fb3f0575316cd2181691910f0b7693a0c6104002a44cc24c1cf05a261e78a5e304f5afda877157d5324a96f771222bc484cd7126659f65c7d8faad", 0xe5}], 0x2, &(0x7f0000001000)=[@init={0x18, 0x84, 0x0, {0x7, 0x3, 0x1880000000000000, 0x40}}, @sndinfo={0x20, 0x84, 0x2, {0x8000, 0x207, 0x3, 0x3, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x2, 0x8, 0x80000001, 0x1, 0xffff, 0xeb, 0x100, r4}}, @init={0x18, 0x84, 0x0, {0xfffffffffffff000, 0x9, 0x7fff, 0x2aa}}, @sndrcv={0x30, 0x84, 0x1, {0x7f, 0x0, 0x2, 0x10001, 0xf972, 0x3, 0x5, 0x0, r5}}, @init={0x18, 0x84, 0x0, {0x8001, 0x8, 0x2, 0x8}}, @init={0x18, 0x84, 0x0, {0x1, 0x1df3e000000, 0x401, 0x2}}], 0x7, 0x8040}, {&(0x7f0000000000)=@in6={0xa, 0x1, 0x2f0f000, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8000}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000000000)="e8dc54f8001b8ac1c4cb72c1b458dbc6e876606f69a9698003a252b089e2e9e9feab72d1102a376d071c22b7c6fb59a52c9f881656a12a1d5f455690896259e6807f849ebd195e8dee5052f485d073d9d193184b096f249f809e", 0x5a}, {&(0x7f0000002000-0xf1)="a434e2bff8c602cd02580e3ad060e9577464327dae9e039df57956abc844b4cc08471e175747593b71acd224518f0677aff98d4d6cef2b8c6e9f4988b2334a83768816606ffb0a67479b1dd0373aa3df644cfd10c039324b454036c8478df976822a6e359c10838a4578d0026d636a11a38773282a7020f30792e7c0df20aedff199db5e43f369c7214a02cbada6136398ad2510bc6f0ed1fd252d943c538e000dfeea096d7769022925167ed89d177b9209c264c550d54ed557bc3c94ec78dda9380fdcffd53082632dc8f6c50d0d4cdd2a897b943b3ff642f667ac4194c18a28a2c2a8d1ff3497e80ffc778514a4e0b4", 0xf1}, {&(0x7f0000000000)="40aac2f6c31914a95c8a47176470b907902c967490a3a5fa44bcbacd953824e56d1fdbad324fbaa6eae3a6446a4ca8cff1955fa50b1b4269732a3c2e0187cd2c98e6ed14bc3b23bc3756b1893df3ee2d11171bf9e123bf33a71093450604ffeb63c7eada46", 0x65}, {&(0x7f0000001000)="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", 0x1000}, {&(0x7f0000000000)="2a037ce894140d71d86802046e974b78732cf8d7b7711316ba8db8d1bd31a2ca9ff2231146eb53210a09386435e5d81f54afc14304df4b6bd5d43a091017575999242539a71ce7ce518fe733fbca194c7e002ceb7a6884745772f059f27bee5df518d7fbdd4cee3f46f51aae34643f38f3968b707e93b18caec5606678f5fddaf4b9c0f639dc6a3a91528a870c46464de90417003bb1596be90c821ec3a5758a1bc4abca809efe8b6df5beb68069719e00eb754bb560c7aeefeb47b2038a702622e47b8c41f41485", 0xc8}, {&(0x7f0000001000)="b644eeae44cc3336b6323f2db5ff27250abfbc9f31d144feb17f6116ea128a61a5faff9a14315a567fbcc5d3cb86840420ff4ad7233002101e471f77bb1f67ac0a2e9da29b8c44f394831739156ca068326dcc5e107f677642d9fc4a6142aa1783a562949748776988a65dac21be1451ae4d27fd17fb39a45fe87977d22b943be3d2d2df9cf9f1ee5176d5fcfd30", 0x8e}, {&(0x7f0000001000-0xf1)="6bc27f67901e706ff4e57e31b1c1bd4374f9d5143cbcc2c84dc140f1f757d8096919b203eda5078d2aebcd5ac6a9e4207201c1005c853e510bf3f8632f76d941819bdf1d52f62584f7069c99f8bf5c04930b253d3da7b91badbf4be72ad55b0fb442e6447c15bdd2b9dc2fa3831990be9b5ead3b6e39853fd8bb178eb181481b4e02283eeef596dc9e0639de73ae2a86ff535473f96bd9ca8fc47fe351485f50cd8b52849d461f7ef1b8ee1aaefc3e88898e0ff47114bf00fb0a8e44fc44df3f007bc4a99fde227fcfe7425a581bf1e25e58c8bb9a49897704287ed9c43cada9884db261762a95916a30640414523c2cb5", 0xf1}, {&(0x7f0000002000-0xf9)="34c9fcdb2917f9c0acfdd65c858e06fcc24e3efe029ed135c06497bb571f01318729819e50eee26488e3671ce75a2710e3d357faa426dd30f75e19daf508cdf07262ff25d76add003dba9727faa7786c0ca29ada2b5efa8f26c081c8ca97ba7b99dc69f7f68c74adb9f9abe3201b8a96f862a2d9fa1c8f1593034ace57c30fc64a807e3c961c78166ab2551fa4754aa3bfd12a459e9af8c79505531a28799f4e01c5aa8857a21823b4a1c3fe1ff4986a653785833563babafd51b9019d3afd0dce6edc00a01e386d65ab6e0a9b3566284596f49c62d2b288ceed4548f8e0561161ac84e6698063dbad818f2a0cb94cc8ea8dee3b083a6936ac", 0xf9}, {&(0x7f0000000000)="f6e75a6436b7e90835518604d95f78a0842d19ab851c43d522275d4e9862a178228a13fb63aa9f6ad03f021f751722cd61db2ed28bc349677288c61c7ab09450e2ce6d8ff5160ef6d42b57f57514149a67b66aea342bb9124db0d31d579119e8f8ee42099fca1316a7ebfbe93fe958e808296f7f5a9ba8b749b722b3cfbf1fdddd52e4baa293d152f5987fadb54dbbfcca9df1354ed8023f0099896c74557b29b39bafb2ca8d751574394931e4706c1f9f244508624481", 0xb7}], 0x9, 0x0, 0x0, 0x200000c0}, {&(0x7f0000000000)=@in6={0xa, 0x1, 0x1, @loopback={0x0, 0x1}, 0x400}, 0x1c, &(0x7f0000002000-0x80)=[{&(0x7f0000001000-0xba)="aef708c359a978d5baa60000ad824de41aced7d1168336ed7633b067e5635917aae9da00d5032377931658af0dd28c5199b9043795211b53d775d813535165e546bddb1413cdd18d608529233ac91887b56128d91342027f9aa259fb3dbe03ba5bb39d5ae731b16c57d8df5650648785141b1014cfdb27bfe574399ef4f92b603201e0856b067bfa939b8066c55d42b3d2f9adaa7adc1f1fe5ba3d8007a169e44c685092a4970859199053f01eaa898b1bd19b89cfb61a47edc0", 0xba}, {&(0x7f0000001000-0xae)="82ecf69887aa5689ed3cfff15b2542e0403e5421946efcf496c03e498df5ec6fa49bf9caf9ae08279a3900afff58d1f5c3b81762a3e71bc65da615b9fe7d893d2153cdb80e8fc18c78434f45e6339cfcd019aa5ee3fd1ec27879772b464c1d45acb0d32beb3efcd63b78f85af03c05723b5e8b9dfff4f8bce1f84dde334235470b970abe38325c1861a6e3b413f4709e53ac69491eaf0237b6a51c1dc09d9bca10834f6d210b225991fc4fdde2a6", 0xae}, {&(0x7f0000001000-0x2d)="84f4eafd344265ce92589ef1bbc05fae92dd931ea640d97055dd0160b2b806bae5e4a60027ac470583083364da", 0x2d}, {&(0x7f0000000000+0xee5)="42a9f8b6a12ba60c3a234e87c5aac7656a354862deb46712fc13e2ee16396406fd155b501b51c33d8edadae26cad9c44bd3f5727341c15388f91145babb2ad56f5e3d8c9de14a00b945b9f8439b45197115109b85b", 0x55}, {&(0x7f0000001000-0xe6)="22c2c5f8194160b84ccfd07ed5a0008306ca8b8c2a6a799e1de9739c965a861eb35e27d25e272c42b9bb61927ff5e1b89c575e9cfa81805a9f71530490f21e529e3cbba670f91dd14be14ef5127ad842bcb5e454e82850813497ae1e955b6fc2f39685bcddb7a6ca9f0e81b699e75465f058f8998c416434413bbee95070090a31a86c7d148df272a01faa38abc0f8f4cfae306b937e532cc1bbc2481e8ecd1a87b672068650d081ce9b90e9c603095b880f9befe402f4f35f2f6167edc1a86ff65c33bc42159fb2423ced261824f6bdf26123ec714ff944147c246f90ba5f4e722896d859bf", 0xe6}, {&(0x7f0000000000)="893fbed588d1cd3cb02059", 0xb}, {&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000001000-0xc8)="385056a4ef8b21b90585055a9bfa2898491d5be522eeec43d7c64c2e28fb91633706e0c5b1958fb882f4e7383c5ef6f51bd3a92296edc420c25539835db05666dbc43fa28f3e6128fea82bd6b91bdf107640431cc2562198749b6fc90fcc9a80e34f2a5e94ae4603bef9b3ce084f87ac1225376cc331145a0196c77bb1c0d167e3550f3a57ac3f505cdf56a54608aab00374874aad56f841596a463330bf7f24af36d8308691558d76a2deb9d8b076d425b85c96f7c3ad45893414857298d890a288c4f32c6b699b", 0xc8}], 0x8, &(0x7f0000001000-0xf0)=[@sndrcv={0x30, 0x84, 0x1, {0xa1ca, 0x80000000000000, 0x8000, 0x2, 0x6, 0xae5c, 0x7, 0x9, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x3ff, 0x8002, 0x4, 0x1000, r7}}, @sndrcv={0x30, 0x84, 0x1, {0x42, 0x0, 0x208, 0x4, 0xd99, 0x1, 0x8000, 0x6, r8}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x0, 0x5, 0x7fffffff, r9}}, @sndinfo={0x20, 0x84, 0x2, {0x5, 0x0, 0x2, 0xcb, r10}}], 0x5, 0x4001}, {&(0x7f0000000000)=@in={0x2, 0x2, @rand_addr=0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000002000-0x10)=[{&(0x7f0000000000)="862639a03f7c6c80f6f61a5fbaa310c282bf351d1b2b75b53df092ade4b7ae0678ef946d09aa9d1b620b3a37124c33a3ba11d994b8f62966a7d449cc8f140b85667d69d163372dbb6752e735d704deeecb06bb5aab0c46aa5b6331b3313ae7d5b719626d9ef484e6", 0x68}], 0x1, &(0x7f0000001000-0x120)=[@sndinfo={0x20, 0x84, 0x2, {0x1, 0x8000, 0x6, 0x2, r11}}, @init={0x18, 0x84, 0x0, {0x7, 0x7, 0x1, 0x49f}}, @sndinfo={0x20, 0x84, 0x2, {0x1000, 0x8, 0x1, 0x2, r12}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x0, 0x8, 0xfff, 0x0, 0xffff, 0x9c, 0x4, r13}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x6, 0x4, 0x8, 0x5d, 0x923b, 0x87d, 0x9, r14}}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffffa, 0x20, 0x0, 0x7ff, 0x8, 0x7fffffff, 0x2, 0x800, r15}}], 0x6, 0x40}, {&(0x7f0000002000-0x1c)=@in6={0xa, 0x1, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fff}, 0x1c, &(0x7f0000001000-0x80)=[{&(0x7f0000001000)="c99d18e376769783012a8e4216aac915db19f18191ff62e70417c571d5260c6e73cbd7fb05def6dfd34aaf91e923f233a3550258d15d62e19f0c97474a12faf123c87982c3fdb912c4cd6763387618cd5ac5b07e47b85743f6e84674f3ee192be530a14f", 0x64}, {&(0x7f0000002000-0xbf)="bc5adcd18e9e8317201687bf8daa6cc5452e379536bda4982c8acb617192afe646e255d4fd7312ff33c959a5f93445db0b2fa3b51d3c87693085c823022920894d23305715c71e38e95e0d3f46e43d6704880f942b07ebae12ffe2689567f60949f11241b5129bb1debfd46f12ce2c507a8f0c2d61395450f2c8f9e6a1a3bf8081c40e1e1b17049891e6b78b63ca9304fac5bfcd33537174bad741a33c40679faa961cb53dcf3b9113e75eb23532ba7c26a5ec744427ec7a2ce02528a4b31b", 0xbf}, {&(0x7f0000001000)="ec59dc6d0120268a8da81a7ee4cde7b59b9a0080f0179f58a3de983c1e6853c4f2379708f746d738ab473ad992b54aa4a2eeabbc807ce3da525fcbe3c1861146c257797c7bbafbdf061fd019785729a0081e311597b9b2c70644d4c31e9ce69cab70326699bfb95b11d8b961ec9ee094da7f9a34f6a0387e444601c77aabd9", 0x7f}, {&(0x7f0000001000)="31a402d8611089b8bfffcccb9804280946f5a2305e00", 0x16}, {&(0x7f0000002000-0x42)="368d1907884c9fc25a0d07788729f2f89a00640b65e5c25a8225608b686ff57525aeaddb4c674abb7ac2190bf989ec2d3c9323acbe5fc08d027a5ce9f0644d95b585", 0x42}, {&(0x7f0000000000)="b36c97a4368f933def05b4b5ed315893f1d7a80293a7d1ca8d8a7f26bc6595d699c99af37675baa8cfa43ad42a04b9a35ce4d11906aa07704f295f891859969642c944e896eb04dd9d7f8c9ee7389c61a50f2a4dae43ca3c0321f7614f6c0487d572fd75dab447cffa86f8e76dcfc5ed4753b601bdfcffa46427e813c4fb51d56b9a118424682674cfb6e330afa562552e12427d59caea7d2f5302190bf34cf5faa71e7f369c8af7afc120cdb3585ffb61465194cb60497519db9d59368740295c7c61be096cc428f07accc3d6ab2179298ebb7f9a", 0xd5}, {&(0x7f0000001000-0x1000)="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", 0x1000}, {&(0x7f0000001000)="", 0x0}], 0x8, &(0x7f0000001000-0x60)=[@sndinfo={0x20, 0x84, 0x2, {0x584, 0x8, 0x3, 0xffffffffffffffff, r16}}, @init={0x18, 0x84, 0x0, {0x1, 0x2, 0xcc6, 0x6}}], 0x2, 0x800}, {&(0x7f0000001000)=@in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000002000-0x70)=[{&(0x7f0000000000)="eac15f580b76bc9c4db2d22b9931eea19b9651cf7f0bd74be0918d10f5f7d628b13ec412ed15053b62eaf8b607a7411449591005ca7a57590db4ac5ae01b9b84817fe6c48a35ab206b785bb34adef5d79106baa09563e5111616ddcb21028d56870a7cf30cfbd52118f9486bf383480778d6135454", 0x75}, {&(0x7f0000002000-0xd1)="7b131eb28436f3f08bf1aeb05e27b1dd5f507c4b890ff7cf5851bdb78d26ff85d12ffc59c2cabc7a053710e06b01b257f1a34d9fbbdd069ea18860088a9ce20b6caf06822df2cd445aa1241c600b5cc5679110497517a202708395604f281e223710f44a03ca73e22db9e43d03448b73744ea80ad9f75f18549abd620220d25e7a0b06967f9b102f087e9fbdc5ae955ab2115f4fc346a1a58c4565fcdf4a7a750254234b787bd39e2cbbf0d8c193fb75a13bce50fe0e0426db651e143393fb025bd42d7d09487ddbd3d7e9e1f4428024aa", 0xd1}, {&(0x7f0000000000)="8c27749e6d666a1b763c096123d182b500b5e21daba4c3845e68951fcd39dfbdfd240d153171b4f851c54a470fcf", 0x2e}, {&(0x7f0000000000)="6982ab8a0b2c9d290813558832daec34ab89e266d4d82455e0ded5cd349eab477dc5abedeac81abfa29e9acd2fb0249f834c7cd1a5c82c0a1e23ca017bcfeab5f7a51f0a20d0374e60025e9a44ccd095864933e138f8831ea9d345f8a9209d64d939f279f6e548bd9a0d9b1f8e0e71518636378b9f4569dfd82d7171122e4de093ac7508ce6d", 0x86}, {&(0x7f0000002000-0x1000)="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", 0x1000}, {&(0x7f0000002000-0x45)="612981bf8f2f83e36cf610326f4d854c5a2955ae84bb793604e66c13a45cab1bf06d5011f157ce6dbfd26ffa0331eee48db352fe7deaa8dd20a17f892172b9a807ea6ecdd5", 0x45}, {&(0x7f0000001000-0x14)="7d4e3ad90e096ab8418107150dc1fc471fb3192d", 0x14}], 0x7, &(0x7f0000001000)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x208, 0x4, 0xf81d, r17}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x8000, 0x2, 0x4, r18}}, @sndrcv={0x30, 0x84, 0x1, {0x5b3, 0x4, 0xc, 0xffffffff, 0x400, 0x5583, 0x4, 0x7a, r19}}, @init={0x18, 0x84, 0x0, {0x9, 0x100000, 0x3, 0x4}}, @init={0x18, 0x84, 0x0, {0x80000001, 0x5, 0x7fffffff, 0x7f}}], 0x5, 0x20000880}, {&(0x7f0000001000-0x10)=@in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000001000)=[{&(0x7f0000001000-0x22)="4f53bad8905924cba52ea55c71c898b836379250bafd5fcd25d8e165db3f419c07f6", 0x22}], 0x1, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x1, 0x3f, 0x40, 0x0}}, @init={0x18, 0x84, 0x0, {0xbc, 0xfff, 0x100000000, 0x1}}, @init={0x18, 0x84, 0x0, {0x8, 0x5, 0x10001, 0x3f37}}, @init={0x18, 0x84, 0x0, {0x8, 0x8001, 0x4, 0x1d81}}, @sndrcv={0x30, 0x84, 0x1, {0xc71, 0x9, 0x8, 0x8, 0x9, 0x7, 0x1ff, 0x40, r20}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x2, 0x81, 0x10001, r21}}], 0x6, 0x0}, {&(0x7f0000000000)=@in6={0xa, 0x3, 0xfff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x619}, 0x1c, &(0x7f0000001000)=[{&(0x7f0000001000-0x47)="cb459119fd734a3e8715141daf45ddcb93a5ef31a4c2ef83f1752f2210b2b49b2fff74f1f2f9e374abe387ca9d9aa3a868c5b87d0bbb9c44b9dc706f47b315f731373a907a6a83", 0x47}], 0x1, &(0x7f0000001000)=[@init={0x18, 0x84, 0x0, {0xffffffff, 0x8001, 0x6, 0x81}}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x0, 0x0, 0x5, r22}}, @sndrcv={0x30, 0x84, 0x1, {0xff, 0xfd5e, 0x2, 0x1, 0xffffffff7fffffff, 0x3ff, 0x8001, 0x3f, r23}}, @sndinfo={0x20, 0x84, 0x2, {0x10001, 0x0, 0x81, 0x9, r24}}, @sndrcv={0x30, 0x84, 0x1, {0x4, 0x3, 0x2, 0x1, 0xb0, 0x3f, 0x40, 0x8, r25}}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x100, 0x200, 0xfffffffffffffffd, 0x7, 0xfff, 0x72, 0x3, r26}}, @init={0x18, 0x84, 0x0, {0x72be, 0x16, 0x7f, 0x3}}, @sndrcv={0x30, 0x84, 0x1, {0xffffffffffffffff, 0x0, 0x4, 0x101, 0xffffffffffffaac9, 0x1, 0x7, 0x6, r27}}], 0x8, 0x4}], 0x8, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000002000-0x4)=0x2, &(0x7f0000002000-0x4)=0x4) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000002000-0x4)=0x4, 0x4) 2017/07/29 11:53:59 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000002000-0x20)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001000-0x4)=0x20) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002000-0x3)={r1, 0x30, "31de927a529957c5f3550108d4569d601f0327d1a91c2b769adf00038fbb31769517b6950607ebc83907208b1d076c8a"}, &(0x7f0000001000)=0x38) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000002000-0x14)={r2, 0x9, 0x3, 0x7, 0x0, 0x6}, &(0x7f0000002000-0x4)=0x14) 2017/07/29 11:53:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r2, 0x8000, 0x0}, {r3, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {r3, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r6, 0x89e1, &(0x7f000098d000-0x4)=0x0) write$tun(r6, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:53:59 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, r0, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xdbe000)=nil, 0xdbe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$setfpexc(0xc, 0x100004) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x13, &(0x7f0000db9000)=0x20000001d5, 0x4) mmap(&(0x7f0000dbe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000dbf000-0x1f)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="50ba4c6b32ca", [{[], {0x8100, 0x0, 0x2, 0x3f}}], {{0x8100, @x25={0x1, 0xfffffffffffeffff, 0x9, "7b1dbaa93abbab6b8597"}}}}) mmap(&(0x7f0000dbf000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000dbd000)="", 0x0, 0x0, &(0x7f0000dbf000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000002000-0xa0)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff, 0x40000000000, 0x6, 0x7, 0xfffffffffffff001}, &(0x7f0000000000)=0xa0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000002000-0xa0)={0x0, @in={{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7, 0x3f, 0x5, 0x7, 0x36f9}, &(0x7f0000000000)=0xa0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000002000)={0x0, 0xffffffffffffffc1}, &(0x7f0000001000-0x4)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x76ca}, &(0x7f0000001000)=0x8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x5, 0xa010, r1, 0x400000000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000dc0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000dc1000-0x11)="2f6465762f7667615f6172626974657200", 0x402, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000915000)={0x34, 0x2, 0x8000000008008, 0x1, 0xce7d, 0x8, 0x8000, 0x40000dd0, 0x0}, &(0x7f0000002000)=0x20) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000002000-0x10)={0x0, 0x7, &(0x7f0000003000-0x88)=[@in={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x79b, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5}, @in={0x2, 0x2, @rand_addr=0xf, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x7601}, @in={0x2, 0x2, @rand_addr=0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000002000)=0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000002000)={0x0, 0x5}, &(0x7f0000002000-0x4)=0x8) [ 287.263248] binder: 22959:22960 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:53:59 executing program 1: getegid() r0 = socket$inet6(0xa, 0x5, 0x81) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = dup2(r0, r1) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f000065e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x6, 0x32, r0, 0xfffffffffffffffd) fadvise64(r2, 0x0, 0x7ff, 0x7) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000001000)={0x2, [0x800, 0x80000001]}, &(0x7f0000000000)=0x8) 2017/07/29 11:53:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0x0, 0xffffffffffffffff, 0x0) gettid() io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f000000a000)="") [ 287.335609] binder: 23034:23036 ioctl 40206417 2003dfe0 returned -22 [ 287.341188] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 287.373957] binder: 22959:22960 ioctl 8940 20d44fe8 returned -22 2017/07/29 11:53:59 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000000)="00", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001000)={0x0, 0xfc, "39576608f0b5cb7f1ad08f2a2d122484447642593247ebcdbc2365ecd185b56da255a9656e19932e6d70d5418424fca68a6156fb7291bddf0e404b4d9662efd206050b0ef24b8125982a638ebc0766ae0ea9723a1d1b81be3b2eb05c1d31d7ed65cefc63763b0ff38bf76574e961a9fee5f15bd3ec274d5a0e7db1b9490f67bbdf31232df225adcb59a1c79e038bfac4a31cf64ed2883ba73205a82683815fe82ad47d7c405891f950a2b63789a692321ab0c00314072998112ebb363084084c62c320f2567c79f773641243c5a3993128679c204c8a776e52a2f1d48f4362e05418abd6b0b8a5fbabe6afb6e67abae6dae32950ad04923acae093c4"}, &(0x7f0000000000)=0x104) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001000)={r1, 0x100000001}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000701000-0xcc)=[@in6={0xa, 0x0, 0x100, @loopback={0x0, 0x1}, 0x80000001}, @in={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x9, @loopback={0x0, 0x1}, 0x0}, @in6={0xa, 0x2, 0x17de, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1ff}, @in6={0xa, 0x0, 0x80000000, @loopback={0x0, 0x1}, 0x6}, @in6={0xa, 0x1, 0xffffffff, @loopback={0x0, 0x1}, 0x0}, @in={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x9) getegid() r2 = syz_open_dev$mice(&(0x7f0000001000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0xa00) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)=0x0) [ 287.377996] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 287.384197] binder: 23034:23036 ioctl 40206417 2003dfe0 returned -22 [ 287.395673] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 287.427259] binder: 22959:22960 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:53:59 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002000-0x9)="2f6465762f70707000", 0x40000, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000002000+0x388)="73797a6b616c6c657200", &(0x7f0000003000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000001000)="00", 0xffffffffffffffff) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000004000-0x20)={0x4, 0x5, 0x0, 0x6, 0xef, 0x7, 0x9, 0xde, 0x0}, &(0x7f0000002000)=0x20) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000004000-0x8)=@assoc_value={r2, 0x2}, 0x8) keyctl$set_timeout(0xf, r1, 0x1000) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f00001ad000/0x3000)=nil, 0x4, 0x4, 0x42, &(0x7f0000911000/0x2000)=nil, 0x73}) recvfrom$ipx(r0, &(0x7f0000001000-0x87)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x87, 0x100, &(0x7f0000001000)={0x4, 0xf70, 0x4, "612fab1a6c66", 0x7f, 0x0}, 0x10) r3 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r3, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:53:59 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r7, 0x89e1, &(0x7f000098d000-0x4)=0x0) write$tun(r7, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00003fa000)={0x20000004, 0x0}) 2017/07/29 11:53:59 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x0, 0x989680}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r0, 0xfffffffffffffff7, 0x1, &(0x7f0000001000-0x98)="524a4b1dde90ed25f2881f4db6a85d268ce9aa24f5091cfbbff844591323f2f9797d1b48afe4ea7d5c23372a92855604de32fef45037b155e4db1c0c4a3810883ee32419cd5c076c045147261b47b4ff3ebf2b959c40904e58758f05a58de2ef3b3387683fcb5547a9686f66eabbc3ee9caeb69c02b08364a35c9f5b368c79445800cab5d0b1d0a258937183593a871b4fe998e35696b1e2", 0x98) r1 = open(&(0x7f0000001000)="2e2f66696c653000", 0x2000, 0x2) fcntl$dupfd(r0, 0x0, r1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000001000-0x10)={0x2800, 0x6, &(0x7f0000002000-0x6)="645430edf098"}) 2017/07/29 11:53:59 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfc5000)=nil, 0xfc5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r3 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r5, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r4, 0x0, r3, 0x0, 0x200000, 0x0) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r5, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r4, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r1, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) mmap(&(0x7f0000fc6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) bind$inet(r6, &(0x7f0000fc4000-0x9)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000fc1000-0x8)=0x0) ioctl$TCSETSW(r5, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r4, 0x0, r7, 0x0, 0x1, 0x7) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000fc2000-0x18)=@generic={0x401, 0x8, 0x9eeb}) splice(r4, 0x0, r7, 0x0, 0x1ff, 0xfffffffffffffffc) close(r5) ioctl$TIOCSTI(r1, 0x5412, 0x81) read$eventfd(r3, &(0x7f0000c63000+0x9e5)=0x0, 0x8) mmap(&(0x7f0000b21000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x0) 2017/07/29 11:53:59 executing program 5: mmap(&(0x7f0000000000/0xfbd000)=nil, 0xfbd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000fbd000-0x6e)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)="2f6465762f70746d7800", 0x106, 0x0) writev(r1, &(0x7f0000cde000)=[{&(0x7f00000d4000)="00", 0x1}], 0x1) read$eventfd(r1, &(0x7f0000fbc000-0x1)=0x0, 0x8) 2017/07/29 11:53:59 executing program 1: getegid() r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap(&(0x7f00004ba000/0x10000)=nil, 0x10000, 0x1000000, 0x810, r0, 0x15) pipe(&(0x7f0000736000+0x70b)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001000-0x8)={0x0, 0x7fff}, &(0x7f00004c9000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00004c7000)={0x6, 0x1, 0x3ff, 0x3, r3}, 0x10) connect$inet(r2, &(0x7f0000896000)={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:53:59 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0x0, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:53:59 executing program 5: openat(0xffffffffffffffff, &(0x7f000018a000-0x8)="2e2f66696c653000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r1, 0xf, &(0x7f0000a98000-0x8)={0x2, r0}) r2 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f00001fc000/0x2000)=nil, 0x2000, 0x8, 0x850, r2, 0x0) r3 = socket(0x10, 0x2, 0x10) gettid() capset(&(0x7f00001b5000-0x8)={0x19980330, r0}, &(0x7f0000780000-0x18)={0x100000001, 0x5, 0x7fff, 0x6, 0xffffffffffff9b27, 0x2}) mmap(&(0x7f0000000000/0x5af000)=nil, 0x5af000, 0x3, 0x10012, r3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000003000-0x1000)="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", 0x134) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, {0xa, 0x1, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5c) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f000062b000-0x18)=@add_del={0x2, &(0x7f0000a6e000-0x10)=@common="64756d6d793000000000000000000000", 0x4}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f000019e000-0x14)={0x0, 0x0, 0x4, 0x0, 0x0}, 0x14) r4 = memfd_create(&(0x7f0000843000)="2670707031405e00", 0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(0xffffffffffffffff, 0x89e1, &(0x7f0000ee8000)=0x0) signalfd4(0xffffffffffffffff, &(0x7f0000ceb000)={0x0}, 0x8, 0x0) r5 = gettid() r6 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xd38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0}, r5, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000ec1000-0x8)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000fbe000)=0xf1e) ioctl$sock_ifreq(r4, 0x8917, &(0x7f00005a7000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs=@generic={0x0, "b6f5a18fe0a0d1d27d638a7652e5"}}) r7 = syz_open_dev$tun(&(0x7f0000fdd000-0x1)="2f6465762f6e65742f74756e00", 0x0, 0x80080) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000fbd000-0x28)={@generic="00099402000000000000067d08cebd5c", @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) perf_event_open(&(0x7f0000fc4000)={0x5, 0x78, 0x3, 0x8, 0x5, 0x8, 0x0, 0x80, 0x1300, 0x0, 0x4000000000, 0x5, 0xff, 0x2, 0x0, 0x100, 0x4, 0x8000, 0x1000, 0x400, 0x955b, 0x6, 0x7, 0xffffffffffff0000, 0x10000, 0x5, 0x0}, r5, 0x9, r6, 0x4) poll(&(0x7f0000cf4000)=[{0xffffffffffffffff, 0x0, 0x0}], 0x1, 0x7f) socket$inet6_tcp(0xa, 0x1, 0x0) 2017/07/29 11:53:59 executing program 1: getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0xb, &(0x7f0000001000-0x10)={0x5, 0x9}) r0 = syz_open_dev$sg(&(0x7f0000d2c000-0x9)="2f6465762f73672300", 0x957b, 0x400000) mmap(&(0x7f0000148000/0x4000)=nil, 0x4000, 0x3, 0x2000000000000032, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001000-0x20)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4, 0x0, 0xff, 0xb, 0xfff, 0x8001, 0x6}, 0x20) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f000014b000-0xc)={0x0, 0x0, 0x0}, &(0x7f000014b000)=0xc) ioprio_get$pid(0x2, r1) 2017/07/29 11:53:59 executing program 1: getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x9, 0x807, 0x6, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001000)={0x0, 0x5, 0x4, 0x6, 0x6, 0x4, 0x4, 0x6, 0x0}, &(0x7f0000002000-0x4)=0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={r2, @in6={{0xa, 0x0, 0x7fff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffff8000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x8}, 0x98) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f000061e000-0x8)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000169000)=0x8) 2017/07/29 11:53:59 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r0, 0x7fff, 0xff, &(0x7f0000001000-0xd0)="a58fb8f702b9784c49ae872bf4f34a02068de13b03a5996d1bdea722da2ef893aab3e5aee59b00d87c5513c7dd5fd0716e719f00f0a794fd03d0ef2472c633d13a658b090a74ed0956238a070c6a34ae94f52b44d7e0637c97e4712556e67d1901fc6b0dc6f7b7c9758d10f944f5b327217044de79a6ac2ae26420798df0e06f2c61b9add83585e730842fc00f2c6444cb1ac8c21be3930249b3750d63e31ad053dbcb9fdf04bfae96d5d57a1e35f5d7d81dcf2a64532a7a28dc61385de21c20ba2dbbaac73440c86a5b05062f6be2ca", 0xd0) ppoll(&(0x7f0000000000)=[{r0, 0xa000, 0x0}, {r0, 0x0, 0x0}, {r0, 0x4004, 0x0}, {r0, 0x4000, 0x0}], 0x4, &(0x7f0000eba000)={0x77359400, 0x0}, &(0x7f0000a23000)={0x2}, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000-0x1)="01", 0x1, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:53:59 executing program 1: getegid() r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000c9a000)="2f6465762f6877726e6700", 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000a31000-0x4)=0x100000000, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = inotify_add_watch(r0, &(0x7f0000001000-0x8)="2e2f66696c653000", 0x1000000) inotify_rm_watch(r0, r1) 2017/07/29 11:53:59 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)="2f6465762f7573626d6f6e2300", 0xd248, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f000049a000-0x18)=[{{r1, r2/1000+10000}, 0xfff, 0x5, 0x3}], 0x18) r3 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="", 0x0, 0x7, &(0x7f0000002000-0x10)={r4, r5+10000000}) setsockopt$inet_MCAST_LEAVE_GROUP(r3, 0x0, 0x2d, &(0x7f0000000000)={0x81, {{0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) 2017/07/29 11:53:59 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r2, 0x8000, 0x0}, {r3, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {r3, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r6, 0x89e1, &(0x7f000098d000-0x4)=0x0) write$tun(r6, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:53:59 executing program 1: getegid() r0 = syz_open_dev$mice(&(0x7f0000883000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x2000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x0) getpeername$inet6(r0, &(0x7f0000e1d000)={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000000000)=0x1c) 2017/07/29 11:53:59 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00007ba000)="2f6465762f73657175656e63657200", 0x200800, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f000003d000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)="2e2f66696c653000", 0x88) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) [ 287.624397] binder: 23077:23081 ioctl 40206417 2003dfe0 returned -22 [ 287.641114] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 287.661842] binder: 23133:23134 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:00 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000001000)="2f6465762f73672300", 0xfffffffffffffffd, 0x8102) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000002000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001000)={r2, 0x1}, 0x8) [ 287.691358] binder: 23077:23081 ioctl 40206417 2003dfe0 returned -22 [ 287.711385] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 287.721265] binder: 23133:23134 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:00 executing program 1: getegid() r0 = accept4$inet(0xffffffffffffffff, &(0x7f00003f0000)={0x0, 0x0, @multicast1=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000c29000-0x4)=0x10, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f00003ae000-0x6)={0x0, 0x0, 0xffffffffffffff9c}) mmap(&(0x7f0000f08000/0x3000)=nil, 0x3000, 0x4, 0x40011, r0, 0x2) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000f08000)={0xffffffffffffffff, 0xffffffffffffffff}) 2017/07/29 11:54:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r7, 0x89e1, &(0x7f000098d000-0x4)=0x0) write$tun(r7, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) 2017/07/29 11:54:00 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfc5000)=nil, 0xfc5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r3 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r5, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r4, 0x0, r3, 0x0, 0x200000, 0x0) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r5, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r4, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) mmap(&(0x7f0000fc5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r1, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r5, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r5, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) mmap(&(0x7f0000fc6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) bind$inet(r6, &(0x7f0000fc4000-0x9)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KDGETMODE(r5, 0x4b3b, &(0x7f0000fc1000-0x8)=0x0) ioctl$TCSETSW(r5, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r4, 0x0, r7, 0x0, 0x1, 0x7) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f0000fc2000-0x18)=@generic={0x401, 0x8, 0x9eeb}) splice(r4, 0x0, r7, 0x0, 0x1ff, 0xfffffffffffffffc) close(r5) ioctl$TIOCSTI(r1, 0x5412, 0x81) read$eventfd(r3, &(0x7f0000c63000+0x9e5)=0x0, 0x8) mmap(&(0x7f0000b21000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x0) 2017/07/29 11:54:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) gettid() io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:00 executing program 1: r0 = getegid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, r1, 0x0) r2 = gettid() setgroups(0x2, &(0x7f0000001000-0x8)=[r0, r0]) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000-0xc)="2f6465762f6175746f667300", 0x1c5200, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setgroups(0x5, &(0x7f0000002000-0xd)=[r0, r0, r0, r0, r0]) mmap(&(0x7f0000300000/0x4000)=nil, 0x4000, 0x2000008, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f0000001000)={0x5, 0x0, 0x0, 0x81, 0x4, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) tkill(r2, 0x4) 2017/07/29 11:54:00 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000002000-0x44)={{0x2, 0x1, @rand_addr=0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x7, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, {0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:00 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:00 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000844000)="2f6465762f70707000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000018000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x0, &(0x7f0000176000)="") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() mmap(&(0x7f0000000000/0xb37000)=nil, 0xb37000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r2 = inotify_init() r3 = epoll_create1(0x0) flock(r2, 0xfffffffffffffffe) fcntl$getflags(r2, 0x401) perf_event_open(&(0x7f0000034000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b37000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b37000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept$inet(r3, &(0x7f0000b37000)={0x0, 0x0, @broadcast=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000b38000-0x4)=0x10) r4 = epoll_create(0xffff) flock(r3, 0x2) flock(r4, 0x2) dup2(r4, r4) dup3(r2, r3, 0x0) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_tid_address(&(0x7f0000001000)=0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x8, 0x6, 0x2, 0xce8, 0xfffffffffffffc00, 0x48e, 0x9, 0x0, 0x80000001, 0x9, 0x8, 0x7, 0xfe00000000000000, 0x5, 0xffffffff, 0x2, 0x5b, 0xfd, 0x6c10, 0x81, 0x7, 0x2, 0x7, 0x0, 0x3ff}) open(&(0x7f0000cef000-0x8)="2e2f66696c653000", 0x0, 0x120) gettid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/07/29 11:54:00 executing program 1: getegid() r0 = dup(0xffffffffffffffff) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f00009de000)={0x1f, 0x1, 0x40, 0x7f, 0xfff, 0xffffffff}) 2017/07/29 11:54:00 executing program 4: socket$inet(0x2, 0x80001, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$binder(0xffffffffffffff9c, &(0x7f0000000000+0xa6f)="2f6465762f62696e64657200", 0x100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, &(0x7f0000001000-0x4)=0x0) 2017/07/29 11:54:00 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000f50000)="2f6465762f6175746f667300", 0x800, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000001000-0x4)=0x7c73cd64, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000002000-0x4)=0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000001000-0x4)=0x0) getegid() [ 287.788623] binder: 23172:23174 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:00 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00007f9000/0x4000)=nil, 0x4000, 0x3, 0x32, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000002000-0xa0)=[{&(0x7f0000001000-0x65)="bf516996c868ecc92bda2630d575f1c787f8b4680e418e1ed07bd0dde706362ea29496fa81d82ddfd2cb8eff3acaa9f86287a07de980ba3fdc0dc2782fa4a4972f5b958d3618ae88874e8d1e737c9db9c2b86f9734550b4e9fd1e647c2d514d6b3a16b5235", 0x65}, {&(0x7f0000001000-0x1c)="042f8ac4d8b7c45ee7a3bb37eff8c27c46b28a81a44421b0d3081956", 0x1c}, {&(0x7f0000000000)="6a942706f9eae9a0228db71a571b3d8db34465c9a66a350d37cca0e3813e368399a26c093500d1d5", 0x28}, {&(0x7f0000000000)="a30ecfd301f18903394e13e9c86c47", 0xf}, {&(0x7f0000002000-0x26)="fe6e8f23303a07da32abd293983e1b873e63272fe5a9eece168ac0781f19918ee83ca591e479", 0x26}, {&(0x7f0000001000-0x70)="314ccbbc83a486a512053f7c4302cb06320318c5eb38ba1beecadc591f45ed245ed0484858349e2a0c686d415f77b8fcda0b37bb25014f0af66bef50f27e44d87ad611888e499cb864eb3c459ff32ef13f78a2e9aedb1ef4a2b8f2d229c505784d52fda68aa463fa33bfa556b5db433a", 0x70}, {&(0x7f0000002000-0x1000)="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", 0x1000}, {&(0x7f0000001000-0x90)="50cc02d1ba4c707e87da252ad570c86dc8195c99800866177bc89d181403a7728d7ff70880e4cf0afc5a8012e45d25dba1df5729833167ea7400e5d9eeb66c445da6c4dd2e17cf0d8fb5d9ae0c9db6cad65b645c47eba66a7c79fc23bf3f0c467b34010195760ddbe28e64d13f9efa9d1ea7b37eebe100dae60d268a2147a1e4825ee76c0b4da45111bbc07785b474b9", 0x90}, {&(0x7f0000000000)="", 0x0}, {&(0x7f0000002000-0x9c)="18e5b5f05025c8b7a9355af838532cf00c81dd182d1b257c44c221c47c3bdce211cd68c83a768672dac8971c4c171e9437d7508bdb3335e85e14a36a2bfc80a22c653248682df012fd4b4f0e160da38008245d9c21aa9585118598c320ca49aae6bba49ab66c05fef7a2f2158b2078e21e514f16b32322471bc5370769456da84c7c57e4bb869b30339b8c77f9b906c3ddce0efac9a4aeb6539e92a1", 0x9c}], 0xa, 0xa) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000004, 0x34, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000001000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x540f, &(0x7f0000002000)=0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@multicast1=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00007fa000)=0xe8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000003000-0x8)="2e2f66696c653000", &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003000-0xc)={r2, r3, r4}, 0xc) 2017/07/29 11:54:00 executing program 1: getegid() r0 = creat(&(0x7f000040a000)="2e2f66696c653000", 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000003, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00007c2000-0x3c)={0x0, 0x34, "34e928ab1d25b4c16a8e6cd9a6f2a5a7205af13c8543681c432858c7927c935a22a8b3366cc656cd06eecc54e12d6972800678ce"}, &(0x7f0000001000-0x4)=0x3c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001000-0x8)={r1, 0x0}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000001000-0x48)={r1, 0x40, "5411ad9772f9cd74376e1005d3454f7ca09cadd4649b3221a030863692aa6d28c60770689c23f2999af41ee038c8cca6e4653ce0590832015d18d29c1805765e"}, &(0x7f0000001000-0x4)=0x48) 2017/07/29 11:54:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r2, 0x8000, 0x0}, {r3, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {r3, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r6, 0x89e1, &(0x7f000098d000-0x4)=0x0) write$tun(r6, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:00 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_settime(0x2, &(0x7f0000000000)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:00 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f000061e000-0xd)="2f6465762f7573626d6f6e2300", 0x400, 0x2000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x5afcf0a4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000001000-0xc)={0x0, 0x80000, 0xffffffffffffff9c}) write(r1, &(0x7f0000001000-0x34)="e069320d84eb825819a092a360cc3a0dbfdc2a35f9331861f0647b5367654959f93fd5a9cfb679d51422fdb0f566eefbcff9b011", 0x34) getegid() 2017/07/29 11:54:00 executing program 1: r0 = getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000b6c000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000002000)="2e2f66696c653000", 0x25) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f0000000000)=0x4) r3 = syz_fuse_mount(&(0x7f0000000000)="2e2f66696c653000", 0x8002, r1, r0, 0x7, 0x1000000) pivot_root(&(0x7f0000002000-0x8)="2e2f66696c653000", &(0x7f0000001000)="2e2f66696c653000") r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001000-0xe)="2f6465762f6b657963686f726400", 0x40, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000001000)=0x0) r5 = dup(r3) pipe(&(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(r4, &(0x7f0000001000-0xe)="2e2f66696c65302f66696c653000", r5, &(0x7f0000000000)="2e2f66696c65302f66696c653000", 0x4) [ 287.832624] binder: 23201:23202 ioctl 401054d6 20000ffc returned -22 [ 287.844861] binder: 23201:23209 ioctl 401054d6 20000ffc returned -22 [ 287.853819] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 287.871771] binder: 23217:23219 ioctl 40206417 2003dfe0 returned -22 [ 287.898583] binder: 23172:23174 ioctl 40206417 2003dfe0 returned -22 [ 287.910959] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 287.917640] binder: 23217:23219 ioctl 40206417 2003dfe0 returned -22 [ 287.933523] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 287.941448] keychord: using input dev AT Translated Set 2 keyboard for fevent 2017/07/29 11:54:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r7, 0x89e1, &(0x7f000098d000-0x4)=0x0) write$tun(r7, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2017/07/29 11:54:00 executing program 4: socket$inet(0x2, 0xfffffffffffffffd, 0x30) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:00 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) bind$inet(r5, &(0x7f0000fc4000-0x9)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000fc1000-0x8)=0x0) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r6, 0x0, 0x1, 0x7) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000fc2000-0x18)=@generic={0x401, 0x8, 0x9eeb}) splice(r3, 0x0, r6, 0x0, 0x1ff, 0xfffffffffffffffc) close(r4) ioctl$TIOCSTI(r0, 0x5412, 0x81) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:00 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x0, 0x7f, 0x4, 0x6, 0x8, 0x40, 0x7, {0x0, @in6={{0xa, 0x0, 0x1, @loopback={0x0, 0x1}, 0xd79}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff, 0x1f, 0x5, 0x0, 0x5}}, &(0x7f0000001000)=0xb8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0x6}, &(0x7f0000002000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001000-0x14)={@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000c78000)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r4, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$llc(r5, &(0x7f0000002000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000000000)=0x10) 2017/07/29 11:54:00 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x49e000)=nil, 0x49e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x2, 0xc) mmap(&(0x7f000049e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r2, &(0x7f0000494000)="1f00000003010100f5fe06ffffffffffffff7237090012800600000006190e09de", 0x21) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000cf4000)=0x4, 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000aa1000-0xc)={0x2000000014, 0x0, 0x801, 0x8}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000fb000+0x17f)={0x0, @in6={{0xa, 0x2, 0x1, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000cd0000)=0x8c) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00007cd000-0x8)={r4, 0x1498}, &(0x7f000052c000)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000693000-0x8)={r5, 0x0}, 0x8) r6 = fcntl$getown(r2, 0x9) fcntl$setownex(r0, 0xf, &(0x7f00003a7000)={0x0, r6}) bind$inet(r3, &(0x7f0000cbd000-0x10)={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7f, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f000021d000-0x98)={0x0, @in6={{0xa, 0x3, 0x20000005, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x5}, &(0x7f0000dcc000+0xb45)=0x98) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00005e7000)={r4, 0x89d}, &(0x7f000042f000)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000979000-0x38)={&(0x7f0000520000)=@in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000f59000)=[{&(0x7f0000cae000-0x80)="5e7a29d5cec777f859b20fa29233fc5d37218bcc1dc0257fbd07542e6ab1db7e682bb32f22f7df00114d29b9b96e5a21cab27bc2b667998d232a5b1eec5ae091a3d1e9d402d1f87efe7ea429ca2b77f49c4e9a0958712aa1bdb0e2f4d7fcb091e3ebf178801bafd44785d8121f6da0c907e7ee0729d2353b1d2b04c74ef00862", 0x80}, {&(0x7f0000b19000-0xd8)="2caebfb92efd47e7710d3399971d57d89c354235d77a2d086d0371bc4f7f0b47063bd8fda4dba2abef829691918bedfd27f885cc106672f18258b89fa3c915f14a7af2537a2d613093db5a8471bf6af005b71af446313ee720fa2145457e030f00c9e1c89e393ae25f0522370171917994d809fcd03810ce5565551fbd7cddd8e48ba0193f6a0db11b26e0f538c7913e0cf27ed677891bc0011a9988a3efe84688bcc2e1fac74604bf8a82cffc66fffc9f9855eda03cadaa3c40945282a4fc81361638abf05ddf7a896f0680912ec005daaa6c54309b5c39", 0xd8}, {&(0x7f0000c5d000-0xfe)="ef2a47acbe4e1d7067705178c44744bc5401ea53925a90a8b8a7078b974bddabcc8d6af1a2e8ff525c6f15bbbba5fd489be034161590d76770e055801b0438c92025e9957c394eb8ea0e56eb5a2367bbc0283d7ce8d98566f977a5c0c2e85d6951afcfb15d00660f6da6c10fc0e4621c1e52ef1222f1b82d1fbaac07042876071f7405ddfd0752046960656dd4b7bb2d2574aedf0fd503a494a63d3f0d245512472b786e2f2c2839581ad9a366196df9740cbdb2d1e4f7981af05a7d082400f44c45f8f6c92725a460a2e280889ca9216038c8035ebf3e2bfc0435e4867fc78cb90acb31adc2636769d6840919af75c32b171dd897d989dca9affae7ea2f", 0xfe}], 0x3, &(0x7f00006d1000-0xc0)=[@sndinfo={0x20, 0x84, 0x2, {0x101, 0x8207, 0x401, 0x9, r7}}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x8004, 0xd0e, 0x2ff327b2, r8}}, @init={0x18, 0x84, 0x0, {0xffff, 0x400, 0x0, 0x90}}, @init={0x18, 0x84, 0x0, {0x9, 0x2be, 0x9, 0x80000001}}], 0x4, 0x4000}, 0x800) sendto$inet(r3, &(0x7f00009a9000)="", 0x0, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r9 = dup3(r3, r1, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r9, 0x84, 0xc, &(0x7f0000b12000-0x4)=0x0, &(0x7f0000888000-0x4)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000f7f000-0x10)={r8, 0x4, &(0x7f000002c000-0x58)=[@in6={0xa, 0x0, 0x990e, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffffd}, @in6={0xa, 0x2, 0x0, @loopback={0x0, 0x1}, 0x4}, @in6={0xa, 0x2, 0x6, @loopback={0x0, 0x1}, 0x7}, @in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f000078d000-0x4)=0x10) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f000038c000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000ffe000)=0xd2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f000068c000-0x4)=0x0, 0x4) sendmmsg(r3, &(0x7f0000d8a000-0x80)=[{{&(0x7f0000dd3000)=@hci={0x1f, 0x800000000002, 0x0}, 0x6, &(0x7f0000dd3000)=[{&(0x7f0000554000)="955b054f06ac95bd77b553f60ae5b6ede66a776e11ae74521414f51054d14989dc9e9e0be56b100c", 0x28}], 0x1, &(0x7f0000155000)=[], 0x0, 0x4804}, 0x0}, {{&(0x7f0000dd9000-0x10)=@ethernet={0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000d51000)=[{&(0x7f0000d16000-0xab)="4146228d2163fb17a955c87239684d69b8097e30aa2b460913603719778a8ba69b051bd312d467044b2c244e8f43c5bc1c714a0c1df69183dd7472e6a579c61ac5357e96171c3c4675aa8b188b5a0fbe43950d0872b03aa0de19112d798c63a999c053644baea2dfcc072f5a4fe8d2eb7cbeb49e88d72b51e5d419cb0d66c06f69eee6c9e64ba9883f3eec9b5bb00c6eba6044a67c2d7e70140161f41ec09b5b81ce4b4d12504ba429550e", 0xab}], 0x1, &(0x7f0000dd8000)=[{0xff0, 0xff, 0x5, "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"}, {0xb0, 0x1, 0x18002, "055a592e2476c176bbaeed6fef4391def591b90105d4462a021a40f75eb3ff18113d9e666f80ce3ca93b94314f511b20671398a3dd248d6e5dd0f37b5d603830dce74eb2016a28ec314687cf835b19d577527d8e6e51d716579db410cb957da54de326367be44a2a2aabcb0a42c35f2feda13ea1fea748e6ff8583fc91303bb02ad973c5b4d2f9ce35e07907beaa2895170e7b6c3ab8d32fadee"}, {0x78, 0x2011d, 0x7, "14031e97b035e7362eb55393105fd2f8d600086d7a44bc8d9c7fce1f17a76fba98c9aaf820467251030f994b35746d2978e25aaa410c1abbb220e9bd76939901c7c81b84c14692ef76a87c542eaf1fbc3e08205399bffe834cf57be6020a050e4c68182220c0"}, {0x40, 0x84, 0x9, "63af71cc8fe31dff28cbc2e95a94b70ac3e2dd131b1dcc305db3ca4751dac7d77071c8845e9ba9e90d42ed4f03ac"}], 0x4, 0x0}, 0x9}], 0x2, 0x4c081) recvfrom(r3, &(0x7f0000615000-0x43)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x43, 0x1ffb, 0x0, 0x0) getpeername$ax25(r2, &(0x7f00003a5000-0x10)={0x0, {"00000000000000"}, 0x0}, &(0x7f00006fb000)=0x10) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f000004c000)=0x2000da, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000f53000-0x10)={0x0, 0x8, &(0x7f0000013000)=[@in6={0xa, 0x2, 0xdf, @loopback={0x0, 0x1}, 0x7f}, @in6={0xa, 0x2, 0xffffffffffffff17, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8}, @in6={0xa, 0x2, 0xcdfe, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8001}, @in6={0xa, 0x2, 0xe8f3, @loopback={0x0, 0x1}, 0x2}, @in={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x8, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x596}, @in={0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}]}, &(0x7f0000088000)=0x10) 2017/07/29 11:54:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r2, 0x8000, 0x0}, {r3, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {r3, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r6, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:00 executing program 1: r0 = getegid() r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000c65000-0xc)="2f6465762f72666b696c6c00", 0x115842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000d63000)=@generic={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000feb000-0x4)=0x80) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00003a9000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_sctp(0x2, 0x0, 0x84) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f000084e000+0x7f5)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = open$dir(&(0x7f0000000000)="2e2f66696c653000", 0x2000, 0x20) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = syz_open_dev$loop(&(0x7f0000c86000-0xb)="2f6465762f6c6f6f702300", 0x1, 0x10b880) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r10 = accept$ax25(0xffffffffffffffff, &(0x7f00009fa000)={0x0, {"00000000000000"}, 0x0}, &(0x7f0000000000)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r11 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, &(0x7f0000a48000)=0x8, 0x800) socketpair(0x5, 0x5, 0x5, &(0x7f00003da000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = userfaultfd(0x80800) r14 = epoll_create1(0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x7, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r17 = socket$inet_dccp(0x2, 0x6, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ax25(0x3, 0x0, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/07/29 11:54:00 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xeb) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000002000-0xe8)="dbd23837160cd2c1342a4cd079ea039a272a46e07946b01608d4e63be92819a89db43fbe83d06b7ffdd9763d97b12172e12b445995fee4540a328f5c3fbcbd7cd6aaa3c1da96f24fad088e8b7cade943f395604a7b465fa873e4b4d4edeb8e3552adf8a1c537b7ee396bb4334e34babbc1dc7b2a9b5e51a4b5147ad57a781c365f0a410a6e159ff69b43e0d39d01cb486c5fd33f5091c072ddd5b34e4881ce06f0b8c70926404e96e7deba3534da02b4d5dbdf0363119bee17fd624357ade330146d042428b5425ae8aec612c84966323106289bcbf9e1e870c10d300918b7fa4d1e0290317c9e3c", 0xe8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) [ 288.297762] binder: 23263:23265 ioctl 40206417 2003dfe0 returned -22 [ 288.315625] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 288.332341] binder: 23263:23265 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:00 executing program 4: socketpair$inet6(0xa, 0x80000, 0x8, &(0x7f000072d000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_netdev_private(r0, 0x89fc, &(0x7f0000001000-0x10)="b039b62546586c39e0fc7a4f7f2c1b00") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000002000-0x8)="2e2f66696c653000", 0x10000, 0x123) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000002000-0xc)={0x4000000, 0x7, 0x5}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f72746300", 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$llc(r3, &(0x7f0000002000-0xc5)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc5, 0x0, &(0x7f0000000000)={0x1a, 0x6, 0x800, 0x8, 0x8, 0x823, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) socket$inet(0x2, 0xfffffffffffffffe, 0xa7c) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000003000-0x5c)={{0xa, 0x1, 0x6, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, {0xa, 0x3, 0x8000, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x6}, 0x3, [0x9, 0x7fff, 0x5, 0x5, 0x20, 0x9, 0x8000000000000000, 0x54d]}, 0x5c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:00 executing program 5: mmap(&(0x7f0000000000/0xefe000)=nil, 0xefe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000afc000-0x10)={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000046a000-0x4)=0xfffffffffffffff8, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000df4000-0x1032)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @multicast1=0xe0000001, {[]}}, @udp={0x0, 0x2, 0x8, 0x0, ""}}}}}) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000ee1000-0x81)="c2", 0x1) mmap(&(0x7f0000efe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet(r0, &(0x7f0000efe000-0xb3)="", 0x0, 0x10042, &(0x7f0000eff000-0x10)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000efe000/0x1000)=nil, 0x1000, 0x3, 0x31, r0, 0x0) setsockopt(r0, 0x0, 0x7, &(0x7f0000ec0000)="c1177c6384fc5f3efd9f928d9584b0bdb7cc732c5bb8fec58b78d39ed569c8d99bd5da1e5a530ca8a58dd80777f1d1ef43968804595f79c895ab76794d6663b71aee44710d53ddb8302c5a45db3ffcf2f2543d7f1c05e70fc0bfabb4a4fa22509b155f21e677754e1b81a6c9df3c8b2140bb2db830f4384d9558f21c92aab556e1a7006667777d30dd36c833c3fc03", 0x8f) r1 = socket$netlink(0x10, 0x3, 0xf) getsockopt$sock_timeval(r0, 0x1, 0x100000000000015, &(0x7f0000a91000-0x10)={0x0, 0x0}, &(0x7f0000efe000)=0x10) r2 = socket$inet6(0xa, 0x2, 0x0) mmap(&(0x7f0000e0f000/0x3000)=nil, 0x3000, 0x3, 0x8010, r2, 0x400000000000) mmap(&(0x7f0000eff000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f00000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x2) mmap(&(0x7f0000f01000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d1c000/0x3000)=nil, 0x3000, 0x3, 0x20013, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000f02000-0x20)={0x100020000000, 0x1, 0x1, 0xeb0, 0x81, 0x3ff, 0xfffffffffffffffd, 0xd5f, 0x0}, &(0x7f0000f02000-0x4)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000261000)={r3, @in={{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x401, 0x9, 0xee6a, 0x0}, &(0x7f0000f00000)=0xa0) mmap(&(0x7f0000f00000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000874000-0x1008)={r4, 0x1000, "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"}, &(0x7f0000f01000-0x4)=0x1008) setsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000eff000)="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", 0x1000) bind$inet6(r2, &(0x7f000000b000)={0xa, 0x2, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) mmap(&(0x7f0000000000/0xefb000)=nil, 0xefb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000bf9000)={0x4000000000000002, {{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000912000)=@generic="fc6f000f851fe8dd47e4a1d9bebd47b6") getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000b5a000)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f000059f000/0x1000)=nil, 0x1000, 0x3, 0x10000000003e, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000f02000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000dd000)="2f6465762f6175746f667300", 0x100801, 0x0) syz_emit_ethernet(0x32, &(0x7f0000df4000-0x1032)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @multicast1=0xe0000001, {[]}}, @dccp={{0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d7cc2d", 0x0, "1400f1"}, ""}}}}}) mmap(&(0x7f000098f000/0x4000)=nil, 0x4000, 0x200000000000008, 0x32, r1, 0x0) mmap(&(0x7f0000f02000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(r5, 0x29, 0x3e, &(0x7f0000297000)=0x0, &(0x7f00003cf000-0x4)=0x4) recvfrom(r0, &(0x7f00007af000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x73, 0x0, &(0x7f0000eff000-0x60)=@nfc_llcp={0x27, 0x4, 0x4, 0x5, 0x2, 0x6, "7da1291903cc672fa782e1f85ded834f398f94dd44f2aec19e13cdb67a88477cb564708831701f0ec40c514dae9a0df2af7616b5b0c5df9b5b5d971f45678d", 0xc6}, 0x60) 2017/07/29 11:54:00 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto(r0, &(0x7f0000000000)="29d219a7778ef990d64c6bf8b1b86a7a38f0", 0x12, 0x4000, &(0x7f0000000000)=@alg={0x26, "6165616400000000000000000000", 0x6, 0xf, "737464726e6700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") [ 288.353536] keychord: using input dev AT Translated Set 2 keyboard for fevent 2017/07/29 11:54:00 executing program 5: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x0, 0x32, r0, 0x0) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f000001c000-0x4)=0xfffffffffffffffa, 0x4) bind$inet(r0, &(0x7f0000001000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r0, 0x8) syz_extract_tcp_res$synack(&(0x7f0000006000)={0x42424242, 0x42424242}, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000018000-0x52)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="eed0e6c83fe1", [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @tcp={{0x1, 0x0, 0x42424242, r1, 0x8, 0x0, 0xc, 0x2, 0x400000000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x401, 0x100000001}, @fastopen={0x22, 0x11, "2b08f32082cddc3d49a817d7479cef"}]}}, {""}}}}}}) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000008000)=0x0) mmap(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x3, 0xa050, r0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f000000e000-0xb)="0000000000000000000000", &(0x7f0000004000-0x4)=0xb) mmap(&(0x7f000001c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x3, 0x810, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x3, 0x32, r0, 0x0) pipe2(&(0x7f000001d000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x807fc) link(&(0x7f0000001000)="2e2f66696c653000", &(0x7f0000004000-0x8)="2e2f66696c653000") mmap(&(0x7f000001d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f000000e000-0x24)={0x400, 0x1, 0x0, 0xb, 0x6, 0x0, 0x6, 0xfffffffffffffff7, 0x2, 0x0, 0x80000000, 0xc}) syz_extract_tcp_res(&(0x7f000001c000-0x8)={0x42424242, 0x42424242}, 0x1, 0x6) syz_emit_ethernet(0x93, &(0x7f0000004000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @tcp={{0x1, 0x0, r5, r4, 0x0, 0x0, 0x1c, 0x10, 0x0, 0x0, 0x0, {[@nop={0x1}, @timestamp={0x8, 0xa, 0x5, 0x1}, @sack={0x5, 0x16, [0x2, 0xa7, 0x2, 0x4, 0xfffffffffffffffc]}, @timestamp={0x8, 0xa, 0xa5b1, 0x290}, @md5sig={0x13, 0x12, "117a718f748f28d4fffce3e0dff56edf"}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "747baca19bfb10c48a52db7f1e5239f4"}, @eol={0x0}, @nop={0x1}, @generic={0x5, 0x6, "ca4f447f"}]}}, {"0c"}}}}}}) mmap(&(0x7f0000010000/0x3000)=nil, 0x3000, 0x100000000003, 0x50, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f0000018000)={0x42424242, 0x42424242}, 0x10000002, 0x4) syz_emit_ethernet(0x38, &(0x7f0000004000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x200, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @tcp={{0x1, 0x0, r7, r6, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x0, {[]}}, {"0c10"}}}}}}) syz_emit_ethernet(0xc5, &(0x7f0000019000-0xc5)={@random="36098300044f", @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[], {0x8100, 0x37, 0x80000001, 0x40}}], {{0x8902, @x25={0x3, 0x9, 0xff, "988e38b08e1c785a1b939c47d43bb82b5441449388a3aa39370ffe44576a2abefaced30ce03d509dd9db4d022f5ae0235de92f28c599b7a41951b290ea61ded6d622619c75c652dc3a423ee85ff67be1a6c1b0808928eb9b04ceaa560b1941a842b51962be0cb125b1fbd5d2e9e29d538cc430b50c9864d4d739e6e30f861a529d72a48962c880f9f1961deab171165b1d4cbafbe99740783aaf351946d025baf35bb65711e71c5f1d91903f6f377b6d"}}}}) mmap(&(0x7f0000018000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f000001e000)=0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x10, r8, 0x0) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r3, &(0x7f000001e000-0x10)={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @tcp={{0x1, 0x0, r4, 0x42424242, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x3, 0x2, ""}]}}, {""}}}}}}) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f0000020000-0x8)={0x42424242, 0x42424242}, 0xa5, 0x1000000b) syz_emit_ethernet(0x40, &(0x7f0000004000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [{[{0x9100, 0x2754, 0x1, 0xa0d}], {0x8100, 0x75f, 0x7f, 0x0}}], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @tcp={{0x1, 0x0, r9, r4, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x0, {[]}}, {"0c10"}}}}}}) 2017/07/29 11:54:00 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$binder(0xffffffffffffff9c, &(0x7f0000001000)="2f6465762f62696e64657200", 0x280000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002000-0xe8)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001000)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002000-0xe8)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000000000)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x8, 0x2, 0xff, 0x3, 0x80, 0xa0, 0xd96, r1, r2}, {0x4, 0x7fff, 0x2c, 0x1, 0xce09, 0x1, 0x4, 0xcc3}, {0x800000000, 0x0, 0x40000000000000, 0x6b}, 0x31, 0x6f9, 0x1bca, 0x0, 0x80, 0x3}, {{@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xfffffffffffff801, 0x94}, 0xde2b4c554fc9198b, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40000, 0x4, 0x1, 0x8000, 0x7, 0x0, 0x4}}, 0xe8) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) 2017/07/29 11:54:00 executing program 3: socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000feb000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x3, 0x3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6}, {0xa, 0x3, 0x6, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xf616}, 0x7, [0xffff, 0x1, 0x5, 0xffffffff, 0x40, 0xffffffffffff8001, 0x10001, 0x7f]}, 0x5c) mmap(&(0x7f00006e1000/0x3000)=nil, 0x3000, 0x2000008, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r1, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 288.457711] binder: 23272:23278 ioctl 40206417 2003dfe0 returned -22 [ 288.491275] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 288.506142] binder: 23272:23278 ioctl 40206417 2003dfe0 returned -22 [ 288.521137] input: failed to attach handler keychord to device input2, error: -4 2017/07/29 11:54:00 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r7, 0x89e1, &(0x7f000098d000-0x4)=0x0) write$tun(r7, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) 2017/07/29 11:54:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r2, 0x8000, 0x0}, {r3, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {r3, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() write$tun(0xffffffffffffffff, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:00 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) bind$inet(r5, &(0x7f0000fc4000-0x9)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000fc1000-0x8)=0x0) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r6, 0x0, 0x1, 0x7) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000fc2000-0x18)=@generic={0x401, 0x8, 0x9eeb}) splice(r3, 0x0, r6, 0x0, 0x1ff, 0xfffffffffffffffc) close(r4) ioctl$TIOCSTI(r0, 0x5412, 0x81) 2017/07/29 11:54:00 executing program 5: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r1 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r3, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r2, 0x0, r1, 0x0, 0x200000, 0x0) readv(r2, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x1, 0x7) close(r3) read$eventfd(r1, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:00 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) gettid() io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:00 executing program 1: getegid() r0 = open(&(0x7f00008c1000)="2e2f66696c653000", 0x280100, 0x60) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000001000-0x4)=0x4, 0x4) 2017/07/29 11:54:00 executing program 3: r0 = socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, r0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000002000-0x8)=@assoc_value={0x0, 0x1}, &(0x7f0000001000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000000)={r2, 0x4}, 0x8) r3 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r3, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:00 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) arch_prctl(0x1003, &(0x7f0000000000)="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") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) pipe(&(0x7f0000000000+0xf18)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000001000-0x4)=0x0, &(0x7f0000001000)=0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000001000)={&(0x7f0000048000/0x4000)=nil, 0x80000000, 0x0, 0x2, &(0x7f0000000000/0x1000)=nil, 0x401}) 2017/07/29 11:54:00 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)="2f6465762f73657175656e6365723200", 0x80000, 0x0) fcntl$setpipe(r0, 0x407, 0x7) getegid() 2017/07/29 11:54:00 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000001000-0xd)="2f6465762f7573626d6f6e2300", 0x80, 0x101000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00002cb000)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getegid() ioctl$TCXONC(r0, 0x540a, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000002000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001000-0x4)=0xe8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000001000)=0x7, 0x4) setuid(r1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) rt_sigtimedwait(&(0x7f0000001000)={0x8}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)={0x77359400, 0x0}, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000002000-0xc)={0x7, 0xe6b, 0x10001, 0x81, 0x7, 0x5}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000003000-0x4)=0x0) 2017/07/29 11:54:00 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0x5, 0x20200) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000d54000+0x9ec)=0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001000-0x10)={0x10000, 0x0, 0x2, 0x4, r1}, 0x10) socket$inet(0x2, 0x0, 0xbc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) 2017/07/29 11:54:00 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r2, 0x8000, 0x0}, {r3, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {r3, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r6, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:00 executing program 1: r0 = open(&(0x7f000035c000)="2e2f66696c653000", 0x200, 0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000e6a000-0x44)={0x0, 0x3c, "23270b72cfb9ff6ed3b1d12c82a73b1e72ff7aa49ff73d01f961631b31bc795619f9c5c34611bffd546cfcf819440f5ae18c246b7e415c94dee2ff3d"}, &(0x7f0000000000)=0x44) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000d7000-0xc)={r1, 0x8, 0x30}, 0xc) getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$getreaper(0x8, &(0x7f00002ed000-0x8)=0x0) r2 = memfd_create(&(0x7f0000000000)="6e6f64657600", 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000000)={0x8001, {{0xa, 0x3, 0x7bc, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) 2017/07/29 11:54:00 executing program 1: getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getitimer(0x0, &(0x7f0000000000)={{0x0, 0x0}, {0x0, 0x0}}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000002000-0x12)="2f6465762f696e7075742f6576656e742300", 0x5, 0x300) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000001000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") [ 288.614289] binder: 23373:23388 ioctl 40206417 2003dfe0 returned -22 [ 288.637740] binder: 23373:23388 ioctl 40206417 2003dfe0 returned -22 [ 288.652090] binder: 23387:23393 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:01 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)="2e2f66696c653000", &(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000000000)="6f7665726c617900", 0x8, 0x0) getegid() 2017/07/29 11:54:01 executing program 1: getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e6365723200", 0xa0000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001000-0x10)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f0000002000-0x20)={{r1, r2/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) getpriority(0x0, r3) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f000026c000)="", 0x6}) [ 288.678882] binder: 23423:23424 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r7, 0x89e1, &(0x7f000098d000-0x4)=0x0) 2017/07/29 11:54:01 executing program 1: r0 = eventfd2(0xa, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000002000-0x4)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$ax25(r1, &(0x7f0000002000-0x10)={0x3, {"d209b1731a5de1"}, 0x541}, 0x10) getresuid(&(0x7f0000154000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f0000743000)=0x0) fsync(r0) getegid() mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001000-0x10)={0x15, 0xc4, &(0x7f0000003000-0xc4)="92de5075d9833a3541662f92211a97d877952b6f8849af0075651445df370c306ae89c5c4efbaffe9641f9ecf428a8649e1b27b9c5835eab35058573f80bc0ce37ede0e0a5f0458676e303c613b1b8c4e389ff01bf3158b9242b0e4ab139cdb33c5584a037846ea7dc504c29f20007c8ba04499ff5672054af6fa4f29cf32822991ff625f350558e11ab99390184d811b402688b44ad4f0ffa24e09e9ecc0ddf4135defae7d2db4d6b90bfe7911eeac9b98e3985e05d9e683248d5e562e5f8d49ab9658a"}) [ 288.720722] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 288.728529] binder: 23387:23450 ioctl 40206417 2003dfe0 returned -22 [ 288.746314] binder: 23423:23424 ioctl 40206417 2003dfe0 returned -22 [ 288.760725] binder: 23459:23466 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:01 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) bind$inet(r5, &(0x7f0000fc4000-0x9)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000fc1000-0x8)=0x0) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r6, 0x0, 0x1, 0x7) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000fc2000-0x18)=@generic={0x401, 0x8, 0x9eeb}) splice(r3, 0x0, r6, 0x0, 0x1ff, 0xfffffffffffffffc) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:01 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000008, 0x32, r0, 0x0) getpeername$unix(r0, &(0x7f0000001000)=@abs={0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0x8) getdents(r1, &(0x7f0000001000-0xf3)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf3) r2 = openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000001000-0x15)="2f6465762f706b74636476642f636f6e74726f6c00", 0x800, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0x65ec55abfb0c6857, &(0x7f0000ed7000-0xd5)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000588000)=0xd5) getegid() 2017/07/29 11:54:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000001000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r0, 0x0) syz_extract_tcp_res(&(0x7f0000643000)={0x42424242, 0x42424242}, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000de6000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="4c6112cc15d8", [], {{0x80000800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @tcp={{0x1, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x3ff}, @nop={0x1}]}}, {""}}}}}}) r1 = request_key(&(0x7f00000d3000)="2e726571756573745f6b65795f6175746800", &(0x7f000001a000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f000033c000)="00", 0xfffffffffffffffa) keyctl$describe(0x6, r1, &(0x7f0000822000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9b) syz_extract_tcp_res(&(0x7f0000003000)={0x42424242, 0x42424242}, 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000004000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [], {{0x200000000800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @tcp={{0x1, 0x0, r3, r2, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x0, {[]}}, {""}}}}}}) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2017/07/29 11:54:01 executing program 3: mmap(&(0x7f0000986000/0x1000)=nil, 0x1000, 0x3, 0x8810, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000001000-0x4)=0x0) ptrace$peek(0xffffffffffffffff, r0, &(0x7f0000a84000-0x8)=0x0) r1 = socket$inet(0x2, 0xa, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x0}, &(0x7f0000000000)=0x8) sendto$inet(r1, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000001000)={@rand_addr=0x5, @empty=0x0, 0x0, 0xa, [@multicast2=0xe0000002, @empty=0x0, @broadcast=0xffffffff, @rand_addr=0x3ff, @multicast2=0xe0000002, @remote={0xac, 0x14, 0x0, 0xbb}, @broadcast=0xffffffff, @multicast2=0xe0000002, @broadcast=0xffffffff, @local={0xac, 0x14, 0x0, 0xaa}]}, 0x38) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x2, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1}, {0xa, 0x1, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x79}, 0x80000001, [0x0, 0x9, 0xfffffffffffffbff, 0x2, 0x2, 0x80, 0x3f, 0x80000001]}, 0x5c) 2017/07/29 11:54:01 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) fchmod(r0, 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000001000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f000022f000)=0x8, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$unix(r1, &(0x7f00004fb000-0x1002)=@file={0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000001000-0x4)=0x1002) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) 2017/07/29 11:54:01 executing program 1: getegid() r0 = dup(0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000fcc000)={0x0, 0xf5, "024f1b9dc821800b7a016656fa5ee77b6b6148e57f1cdb40331b45d706d9d73f82ac6a893a027da6c4b691329d41b9a0aaeeb525d3fde7f4500d40533286ecdc7bdd5c3d015ed0d400070d394687feb45b7ab051e182f04917af4b55991017b12399c6381a745ead0014ac6814979b7c327f3f3d534725093cfbcef09b697baa0390f5cb292375477c9134ec8bed5616cfaa08f72740f3c543f609cb308500aa1e605a2f069f1120575f8e2d8e39440b73dcc7f42978cdb02f0241685a119d1ce0aeb94ff8d96e6bba5f488ca53f8d4f39c9cd4edf78c9d035894732832b0a8c81c1887e0e744f1463891e937a8aab03fb793c4d79"}, &(0x7f0000647000-0x4)=0x100) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00001e8000-0x4)=r1, 0x4) 2017/07/29 11:54:01 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000254000/0x1000)=nil, 0x1000, 0x1000000000000003, 0x3f, r0, 0x3) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) [ 288.777644] binder: 23459:23466 ioctl 40206417 2003dfe0 returned -22 [ 288.809024] TCP: request_sock_TCP: Possible SYN flooding on port 20020. Sending cookies. Check SNMP counters. [ 288.822194] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 288.850766] binder: 23513:23514 ioctl 40206417 2003dfe0 returned -22 [ 288.867127] binder: 23513:23514 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00002e2000)={0x0, {0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x205, 0x0, 0x2, 0x0, 0x200, 0x0, 0x7, 0x2, 0x5}) pipe(&(0x7f0000146000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000b83000-0x4)=@assoc_id=0x0, &(0x7f0000b17000-0x4)=0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000003000-0x8)=@assoc_value={r3, 0x4}, 0x8) munlock(&(0x7f0000e5e000/0x4000)=nil, 0x4000) getsockname$ipx(r1, &(0x7f0000df0000-0x10)={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f00007b9000-0x4)=0x10) ioctl$TCSBRKP(r1, 0x5425, 0xa) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000b6e000-0x78)={0xa9, {0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x318, 0x1000000000000a4, 0x40000000000003, 0x1f, 0xe0, &(0x7f000095d000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x8, 0x5, 0xe07e}) r4 = open(&(0x7f0000fb4000-0x8)="2e2f66696c653000", 0x80000, 0x6) setsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000e4e000-0x3)="eebc2b", 0x3) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f000011b000)={0x200, 0x0, 0x0, 0xfffffffffffff3a7}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000deb000)={0x200000, r5, 0x1, 0x46ff}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000dec000-0x20)={0x400000000000000, 0x0, 0x10002, 0x7}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f000052d000-0x20)={0x95ee, r6, 0x6, 0xffff}) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000bc5000-0x4)=0x4) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40106437, &(0x7f00002c2000)={r7, 0x1}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00004d7000)={@multicast2=0xe0000002, @empty=0x0, 0x0, 0x7, [@empty=0x0, @broadcast=0xffffffff, @rand_addr=0x7, @rand_addr=0x100000001, @local={0xac, 0x14, 0x0, 0xaa}, @remote={0xac, 0x14, 0x0, 0xbb}, @loopback=0x7f000001]}, 0x2c) mmap(&(0x7f0000000000/0x537000)=nil, 0x537000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = inotify_init1(0x80000) r9 = syz_open_dev$tun(&(0x7f0000125000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x1) r10 = dup(r8) mmap(&(0x7f000023a000/0x3000)=nil, 0x3000, 0x1000000, 0x20100000000032, r10, 0x7fffffffffe) mmap(&(0x7f0000538000/0x1000)=nil, 0x1000, 0x3, 0x100000000000003e, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r10, 0xc0106403, &(0x7f0000538000)={0x8319, 0x110, 0x20, 0x10000000000fffd}) mmap(&(0x7f0000538000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000537000/0x1000)=nil, 0x1000, 0x3, 0x34, r4, 0x0) mmap(&(0x7f0000539000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstatfs(r9, &(0x7f0000539000)="000000000000") ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000538000)={@generic="30609402000000000000067d08cebd5c", @ifru_names=@generic="c258a511631bc3773f000000838a1c96"}) mmap(&(0x7f0000537000/0x1000)=nil, 0x1000, 0x3, 0x400000000032, r10, 0xfffffffffffffffd) mmap(&(0x7f0000539000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/07/29 11:54:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r2, 0x8000, 0x0}, {r3, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {r3, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r6, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:01 executing program 1: getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000-0xf)="2f6465762f73657175656e63657200", 0x90000, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000302000)={0x6, 0x80000000}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r1, 0x79, &(0x7f0000000000)={0x8, 0x200, 0x9, 0x6}) 2017/07/29 11:54:01 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd21000)=nil, 0xd21000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000d1d000)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000d17000-0x14)={0x200000020, 0x12ca, 0x210001, 0x0, 0x0}, 0x14) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000d15000)=0x0, 0x4) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f000097d000-0x10)={0x4, &(0x7f0000000000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r0, 0x0) mmap(&(0x7f0000d21000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r1, 0xc0106418, &(0x7f0000d22000-0x20)={0x8001, 0x6, 0x4, 0xff, 0x8, 0xcc6}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000a86000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000f5d000)=0x0) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x24, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, r1, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sync() setrlimit(0xce8c9b8ac677716b, &(0x7f0000c50000-0x10)={0x7fff, 0x3}) r5 = msgget$private(0x0, 0x20) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000f56000-0xe8)={{{@in=@local={0x0, 0x0, 0x0, 0x0}, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000b21000-0x4)=0xe8) getgroups(0x7, &(0x7f0000b65000-0x1c)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) r8 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d9d000-0xc)={0x0, 0x0, 0x0}, &(0x7f00009bd000)=0xc) msgctl$IPC_SET(r5, 0x1, &(0x7f0000b73000-0x78)={{0x3, r6, r7, r8, r9, 0x4, 0x9, 0x0, 0x0, 0x0}, 0x7, 0x9, 0x7, 0x4, 0x100, 0x7fffffff, r4, r4, 0x0, 0x0}) 2017/07/29 11:54:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() 2017/07/29 11:54:01 executing program 3: r0 = socket$inet(0x2, 0x9, 0x75) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) fcntl$getflags(r0, 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f62696e64657200", 0x40000, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000002000-0x4)=0x0) 2017/07/29 11:54:01 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000b95000-0x10)="2f6465762f73657175656e6365723200", 0x2, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000a2c000)={0x3, 0x1, 0xc1d9, 0x4, 0x8f9, 0xb4}) getegid() [ 288.928244] binder: 23525:23527 ioctl 40206417 2003dfe0 returned -22 [ 288.961111] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 288.971426] binder: 23533:23540 ioctl 5419 20001ffc returned -22 2017/07/29 11:54:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:01 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) bind$inet(r5, &(0x7f0000fc4000-0x9)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000fc1000-0x8)=0x0) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r6, 0x0, 0x1, 0x7) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000fc2000-0x18)=@generic={0x401, 0x8, 0x9eeb}) splice(r3, 0x0, r6, 0x0, 0x1ff, 0xfffffffffffffffc) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:01 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f000098e000-0x4)=0x1, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000839000)="2e2f66696c653000", 0x0) pipe2(&(0x7f0000433000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mkdirat(r1, &(0x7f0000a6a000-0x8)="2e2f66696c653000", 0x1) connect$netlink(r1, &(0x7f0000929000-0xc)={0x0, 0x0, 0x4, 0xffffffff}, 0xc) mount(&(0x7f0000213000-0x8)="2e2f66696c653000", &(0x7f000001c000)="2e2f66696c653000", &(0x7f0000983000-0x7)="6d717565756500", 0x120000f, &(0x7f0000e23000)="") creat(&(0x7f0000016000-0xc)="2e2f66696c65302f62757300", 0x0) rename(&(0x7f000035e000)="2e2f66696c65302f62757300", &(0x7f00001fd000-0x8)="2e2f66696c653000") 2017/07/29 11:54:01 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f000037e000-0x9)="2f6465762f70707000", 0x10800, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, &(0x7f0000000000)=0xffff) getegid() ioctl$TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)="2e2f66696c653000", 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000000)={&(0x7f0000000000)=[], 0x0, 0x6, 0x3ff, 0x3f, 0x8, 0x0, {0x427, 0x8001, 0x7, 0x6, 0x31, 0x2, 0x6, 0x100000000, 0x3, 0x9, 0x0, 0x7fff, 0x8, 0x6, "acd8bf342ddbfbaff25f9c97027903c7b18a56b3b99708bb4e3935786c9a3b16"}}) 2017/07/29 11:54:01 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000b98000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_getres(0x3, &(0x7f0000000000)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:01 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$random(&(0x7f0000001000-0xc)="2f6465762f72616e646f6d00", 0x0, 0x101000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = dup(r0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@broadcast=0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000002000-0x4)=0xe8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000001000)={0x0, 0x3, 0x711, 0x3, 0x6}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000001000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xf59, 0x60000000000000, 0x7, 0x0, 0x4, 0x10000, r2}) 2017/07/29 11:54:01 executing program 1: r0 = getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000002000-0x5)="7573657200", &(0x7f0000002000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000002000)="76626f786e65743100", 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = request_key(&(0x7f0000003000-0x5)="6465616400", &(0x7f0000003000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000002000)="776c616e30245e2c73656c666c6f656d30766d6e657430fa00", 0x0) keyctl$instantiate_iov(0x14, r1, &(0x7f0000001000)=[{&(0x7f0000001000)="63fcc66ea91157e1fe38603f01f6c131d27b54b547e5aedecd421ba500937cd0fe46aa01588e9aeea769826889b75f9e303274e5bcd2c6", 0x37}], 0x1, r2) r3 = syz_open_dev$sg(&(0x7f0000001000)="2f6465762f73672300", 0x7, 0x8000) write$fuse_interrupt(r3, &(0x7f0000000000)={0x10, 0x48, 0xc9adbd0}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000001000-0x12)="2e726571756573745f6b65795f6175746800", &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000000000)="8fa79c52c59a04b1905de8df3bdf172de05b7e20f573be1de08cc4aed6a48a15dc6422514f7830759d2644f52968576250f60c09a91e98494d33777997775bb74d2811fc008672ba4da60fa15877ab01cb7153ff9000afeb5208", 0x5a, 0xffffffffffffffff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, r3, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r4, r5, r0) r6 = creat(&(0x7f0000001000-0x8)="2e2f66696c653000", 0x50) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r6, 0x5414, &(0x7f0000002000-0x8)={0x9, 0x1, 0x5, 0x8}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000002000-0x10)={0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x4, &(0x7f0000004000)={0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r6, 0x10, &(0x7f0000002000)={0x0, 0x0}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_robust_list(r11, &(0x7f0000002000-0x8)=&(0x7f0000002000)={0x0, 0x0, 0x0}, &(0x7f0000005000-0x1)=0x18) timerfd_settime(r6, 0x1, &(0x7f0000004000-0x20)={{r7, r8+10000000}, {r9, r10+10000000}}, &(0x7f0000004000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f0000002000-0x28)={0x6, 0x16, 0x200, 0x40, "9c0847e808b76e5e0222371ed5fa89de3b0a03d11dd37261641f4d37fd18a5ab"}) rmdir(&(0x7f0000003000-0x8)="2e2f66696c653000") 2017/07/29 11:54:01 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000002000-0x20)=[{r0, 0x2000, 0x0}, {r0, 0x100, 0x0}, {r0, 0x200, 0x0}, {r0, 0x4000, 0x0}], 0x4, &(0x7f0000001000-0x10)={0x77359400, 0x0}, &(0x7f0000001000)={0x3}, 0x8) [ 288.977290] binder: 23541:23544 ioctl 40206417 2003dfe0 returned -22 [ 288.987793] binder: 23525:23527 ioctl 40206417 2003dfe0 returned -22 [ 288.989640] keychord: using input dev AT Translated Set 2 keyboard for fevent 2017/07/29 11:54:01 executing program 5: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r2, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r1, 0x0, r0, 0x0, 0x200000, 0x0) write(r2, &(0x7f0000fc6000-0x5f)="835029538815", 0x6) readv(r1, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x1, 0x7) close(r2) read$eventfd(r0, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:01 executing program 1: getegid() socketpair(0xb, 0x800, 0x6, &(0x7f0000a6b000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000f21000)=0x9, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000634000)={0x8, 0x3, 0x2, 0x17, 0x8, 0x3c5, 0xfffffffffffffffa, 0x9, 0x0}, &(0x7f0000002000)=0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000002000-0x4)=0x0, &(0x7f0000001000)=0x4) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000213000/0x2000)=nil, 0x2000, 0x0, r2) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000000)={r1, @in={{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x2}, 0x98) [ 289.055564] binder: 23541:23544 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r2, 0x8000, 0x0}, {r3, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {r3, 0x80, 0x0}], 0x8, 0x200) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r6, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:01 executing program 4: r0 = dup(0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timerfd_settime(r0, 0x1, &(0x7f000024b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f0000001000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) r1 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$pktcdvd(0xffffffffffffff9c, &(0x7f0000002000-0x15)="2f6465762f706b74636476642f636f6e74726f6c00", 0x904c0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) r2 = getpid() mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000001000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000)=0xb) ptrace(0x564ecf4012372637, r2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0xeb}, 0x1) 2017/07/29 11:54:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) 2017/07/29 11:54:01 executing program 1: getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000000000)="2e2f66696c653000", &(0x7f0000000000)="2c5e00", &(0x7f0000001000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000) socketpair$ax25(0x3, 0x5, 0xcf, &(0x7f0000fbe000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000001000-0x4)={0x0}, &(0x7f0000a73000-0x4)=0x4) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0, 0x800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000001000)={0x0, 0xb, 0x8, 0x7ae191d8, 0x0}, &(0x7f0000001000)=0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000002000-0x8)={r2, 0x10000}, &(0x7f0000001000)=0x8) 2017/07/29 11:54:01 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000002000-0x8)="2e2f66696c653000", 0x96) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000001000-0x46)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:01 executing program 2: io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:01 executing program 1: socketpair(0x11, 0x6, 0x200, &(0x7f0000893000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000000)={0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, "0000000000000000", "0000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getegid() [ 289.158088] binder: 23617:23621 ioctl 40206417 2003dfe0 returned -22 [ 289.169624] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 289.188117] binder: 23628:23629 ioctl 40206417 2003dfe0 returned -22 [ 289.199017] binder: 23617:23621 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:01 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) bind$inet(r5, &(0x7f0000fc4000-0x9)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000fc1000-0x8)=0x0) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r6, 0x0, 0x1, 0x7) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000fc2000-0x18)=@generic={0x401, 0x8, 0x9eeb}) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:01 executing program 1: r0 = getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0}, &(0x7f0000000000)=0x60) r2 = geteuid() fchown(r1, r2, r0) 2017/07/29 11:54:01 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000008, 0x1010, 0xffffffffffffffff, 0x56) r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x9) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000001000-0x4)={0x20}, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rename(&(0x7f0000002000-0x8)="2e2f66696c653000", &(0x7f0000002000-0x8)="2e2f66696c653000") 2017/07/29 11:54:01 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000006, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x306, @random="f8e1f750a118", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, {0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common="69726c616e3000000000000000000000"}) 2017/07/29 11:54:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:01 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000844000)="2f6465762f70707000", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0x0, 0xffffffffffffffff, 0x0) gettid() seccomp(0x1, 0x0, &(0x7f000003c000)={0x1, &(0x7f000003f000)=[{0x6, 0x0, 0x0, 0xffffffff}]}) r2 = inotify_init() r3 = epoll_create1(0x0) flock(r2, 0xfffffffffffffffe) perf_event_open(&(0x7f0000034000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b37000/0x1000)=nil, 0x1000, 0x40, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b37000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000b37000)={0x0, 0x0, @broadcast=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000b38000-0x4)=0x10) r4 = epoll_create(0xffff) flock(r3, 0x2) flock(r4, 0x2) dup3(r2, r3, 0x0) fdatasync(r1) set_tid_address(&(0x7f0000001000)=0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffffffffc00, 0x0, 0x9, 0x0, 0x80000001, 0x9, 0x0, 0x0, 0xfe00000000000000, 0x0, 0xffffffff, 0x2, 0x5b, 0xfd, 0x6c10, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff}) gettid() setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000030000-0x4)=0x9, 0x4) 2017/07/29 11:54:01 executing program 1: getegid() pipe2(&(0x7f0000297000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f000077a000)="2216c9a8d0de889e0ff51e3cd0a4297d98ba0d82f55cbf2208687dfd7fcd5b02ff019cf6e40086f24ed57bebc2cfe1d8ed9d8ba39e74e4bb8083cc13a95439137942eb23bb64fc77084e50a0fb635c949388298a044fb032dc0c15ac8b695bca2570c4a6473e00334e2c768f7645e6b30bd97f0934fa79b0b2c68e43932ca5e4ad0ccd61193734a0d23f0c39715f3f0a6ba064cab7e333aab6c8b09ac11b4e48355b706bd212ddba08") 2017/07/29 11:54:01 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000139000-0x9)="2f6465762f70707000", 0x200001, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f000035f000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") getegid() fstat(r0, &(0x7f0000e4a000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x40003, 0x32, r0, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x8000, 0x100, 0x3, 0x0}, &(0x7f0000001000-0x4)=0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001000)={r1, 0x1e809d3f}, 0x8) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x20, 0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x200}, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000002000-0x8)={0x0, 0x3}, &(0x7f0000002000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000+0x4d7)={r2, 0x7}, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r0, 0x8010aa02, &(0x7f0000001000)={&(0x7f0000979000/0x3000)=nil, 0x3000}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000002000)=0x7ff, 0x4) 2017/07/29 11:54:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") [ 289.227806] binder: 23628:23629 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:01 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)="2f6465762f73657175656e6365723200", 0x4000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x646c}, 0x1) ioctl$TIOCNXCL(r0, 0x540d) r1 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000002000-0x4)=0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstat(r1, &(0x7f0000004000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/07/29 11:54:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r4, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:01 executing program 1: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000062000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000000000)=0x1000) getegid() 2017/07/29 11:54:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x0, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:01 executing program 5: socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(r0, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xa, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000925000-0x10)={0x2, &(0x7f0000193000-0x10)=[{0x20, 0x0, 0x0, 0xfffffffffffff034}, {0x6, 0x0, 0x0, 0x0}]}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x28, &(0x7f000071a000-0xe2)="b746308ac3796a64ccca8555346a60c453d450a57991ce8a6582d98ad63762d245aa205c135d452b253533dfdec285712b0dd95d79dabe09bb22ab48e9f13e93acdeed85a51ea894b4602fa344adab7271e28acdb7b6f8009800206d2537e046450069815705e200f7d8f7c254143f4130b6c81b81d2422ffd4779d9e12c1a3a92654a1986004700eabab1ff04269a57464a2471febd9d510000172d8f56caa0c6f80e522f72c19a89ee67f64c0fac701895fe964dac9de76700b06e1161c16c4bc1d55bca4320c14479a96c3e6a331a230aeb0bbf30fa4e439d701fec25f2ad6c38", 0xe2) syz_emit_ethernet(0x76, &(0x7f0000fb9000)={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x800, @x25={0x0, 0xff, 0xff, "3f1340178f277675e4b1c93bfe10dc064f332cf37ec1dc4c088553235c9e0400cb26a4003fef947250fe70385797e8520fc0aeb1b9f73518cbf0952b4fb14759a37ff0304baff300ffe8d3ea68fc064100000000000000bf38fc73d83f3ae1f077f5bddfd6"}}}}) r2 = socket$inet6(0xa, 0x7, 0x7) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000bfd000)=0x0, &(0x7f0000dcc000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000489000-0x8)={0x0, 0x0}, &(0x7f0000dff000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f000090e000)={r3, 0x2, &(0x7f0000d2a000-0x2c)=[@in6={0xa, 0x2, 0x8, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5f7}, @in={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f00004cc000-0x4)=0x10) mmap(&(0x7f0000000000/0x15000)=nil, 0x15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0xfffffffffffffffd) bind$inet(r4, &(0x7f0000001000)={0x2, 0x0, @rand_addr=0xfd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r4, 0xffff) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000e99000-0x8)={r3, 0x2}, &(0x7f000093d000)=0x8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f000063e000/0x2000)=nil, 0x2000, 0x8, 0x32, r4, 0x0) bind$inet(r5, &(0x7f0000005000-0x10)={0x2, 0x0, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r6, 0xfffffffd) syz_emit_ethernet(0x55, &(0x7f0000015000-0x55)={@random="f88216f453f8", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x201, @x25={0x2, 0x400, 0x13, "99277d2060ec11e2a9e453bc08d424f28b9ed8e96bb526289f79e2c412735a83347bfe19b88e96229c66e0d81a7f5ca475cbc439d482ee17444bbd6a1926884cea597eb6"}}}}) syz_emit_ethernet(0xff, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="4c6112cc15d8", [], {{0x800, @ipv4={{0x5, 0x4, 0x5, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @dccp={{0x2, 0x2, 0x4, 0x1, 0x5, 0x0, 0x0, 0x5, 0x416, "8ba5ed", 0x7fd, "008cf2"}, "b8e648d1a24de7dc81aca10197244a8a8314486f0a22d9df36d164e356b0a842f0781ce3685e26fe85cc361711ec4cf120153daf17e2eadbf5ce246b54949307a21322d5326e906b129ed9b7b67bccaf07f10e39a9517672481d12bab93f8df03735ba742ad19c97fbd238c351767e5e89160dbfe907b235279490a8d0d94f784d1d22dc76db86c57e565947f13d50bfc2c5fc050f1e0c5747a7a4c255087367ea44a929ee8404301029d02331b5007b9c24d4fa0755426c8be467298863f2834b7ba7f826e693f90a176adb54"}}}}}) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x1, 0x12110, r5, 0xfffffffffffffffc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000bbf000-0x74)=[@in6={0xa, 0x2, 0x200, @loopback={0x0, 0x1}, 0x10000}, @in6={0xa, 0x1, 0xffff, @loopback={0x0, 0x1}, 0x7fff}, @in={0x2, 0x3, @rand_addr=0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x5, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7eff}], 0x5) [ 289.240897] keychord: using input dev AT Translated Set 2 keyboard for fevent 2017/07/29 11:54:01 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0x85}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001000)={0x6, 0x200, 0x9, 0x6, r2}, &(0x7f0000000000)=0x10) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) [ 289.334773] binder: 23707:23722 ioctl 40206417 2003dfe0 returned -22 [ 289.347994] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 289.373618] binder: 23707:23722 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:01 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) bind$inet(r5, &(0x7f0000fc4000-0x9)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000fc1000-0x8)=0x0) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r6, 0x0, 0x1, 0x7) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:01 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x7, &(0x7f00007d7000/0x4000)=nil) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001000-0x8)="2e2f66696c653000", 0x0, 0x10a) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000002000-0x14)={0x20, 0x9, 0x6, 0x10000, 0x7}, 0x14) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001000)="2f6465762f6b657963686f726400", 0x202, 0x0) write$tun(r1, &(0x7f0000001000)=@pi={0x8001, 0x6, "2f8dc17398715dc26cbfe57fc4420f8caad3a904e86d1b1ca081082c5ed04a32c08280991ad7ec3340fee887896d14f05a3a5f38c27174e8c08ee411b17a133d32921601ee5a414da3d949da2950f8c0fd515cfa34b8d27bfd03ae473b1193107d7653ee924d06692a2b6a5709d502b79c0b3c542f25596d17dbfdc7a890229760cbc033a66fee1ac8be20f6ca95bdce31cada8c7dcb2600e00c8642da9867288dd116968032ece07c0c2ad1585832fefbc99a62a5e0ddcd936e2fcb52d59f"}, 0xc8) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:01 executing program 3: r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) ioctl$TIOCSPGRP(r0, 0x540f, &(0x7f0000fe1000-0x4)=r1) r2 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r2, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:01 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000002000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x10000) getegid() mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000003000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000002000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x59}, {&(0x7f0000001000)="00000000000000000000000000000000000000000000000000", 0x19}, {&(0x7f0000001000-0xa2)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa2}, {&(0x7f0000003000-0xeb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xeb}, {&(0x7f0000003000-0x46)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x46}, {&(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f0000001000-0x89)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x89}, {&(0x7f0000002000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x54}], 0x9) 2017/07/29 11:54:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/07/29 11:54:01 executing program 1: socketpair(0x1, 0x80004, 0x2f73, &(0x7f0000aa5000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00008eb000-0x20)={0xff, 0x0, 0x10003, 0x5}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f000026f000)={0x2, 0x4, 0x80000001, 0x0, 0x0}, &(0x7f0000f87000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x5029, 0x2, 0x1, 0x4, 0x10000, 0x8, 0x8, 0x6, r3}, &(0x7f0000001000-0x4)=0x20) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f000034a000-0x10)={0x7, r2}) getegid() syz_open_pts(r0, 0x12080) [ 289.382845] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 289.395558] binder: 23712:23729 ioctl 40206417 2003dfe0 returned -22 [ 289.409337] binder: 23712:23729 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:01 executing program 5: socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(r0, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xa, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000925000-0x10)={0x2, &(0x7f0000193000-0x10)=[{0x20, 0x0, 0x0, 0xfffffffffffff034}, {0x6, 0x0, 0x0, 0x0}]}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x28, &(0x7f000071a000-0xe2)="b746308ac3796a64ccca8555346a60c453d450a57991ce8a6582d98ad63762d245aa205c135d452b253533dfdec285712b0dd95d79dabe09bb22ab48e9f13e93acdeed85a51ea894b4602fa344adab7271e28acdb7b6f8009800206d2537e046450069815705e200f7d8f7c254143f4130b6c81b81d2422ffd4779d9e12c1a3a92654a1986004700eabab1ff04269a57464a2471febd9d510000172d8f56caa0c6f80e522f72c19a89ee67f64c0fac701895fe964dac9de76700b06e1161c16c4bc1d55bca4320c14479a96c3e6a331a230aeb0bbf30fa4e439d701fec25f2ad6c38", 0xe2) syz_emit_ethernet(0x76, &(0x7f0000fb9000)={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x800, @x25={0x0, 0xff, 0xff, "3f1340178f277675e4b1c93bfe10dc064f332cf37ec1dc4c088553235c9e0400cb26a4003fef947250fe70385797e8520fc0aeb1b9f73518cbf0952b4fb14759a37ff0304baff300ffe8d3ea68fc064100000000000000bf38fc73d83f3ae1f077f5bddfd6"}}}}) r2 = socket$inet6(0xa, 0x7, 0x7) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000bfd000)=0x0, &(0x7f0000dcc000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000489000-0x8)={0x0, 0x0}, &(0x7f0000dff000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f000090e000)={r3, 0x2, &(0x7f0000d2a000-0x2c)=[@in6={0xa, 0x2, 0x8, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5f7}, @in={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f00004cc000-0x4)=0x10) mmap(&(0x7f0000000000/0x15000)=nil, 0x15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0xfffffffffffffffd) bind$inet(r4, &(0x7f0000001000)={0x2, 0x0, @rand_addr=0xfd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r4, 0xffff) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000e99000-0x8)={r3, 0x2}, &(0x7f000093d000)=0x8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f000063e000/0x2000)=nil, 0x2000, 0x8, 0x32, r4, 0x0) bind$inet(r5, &(0x7f0000005000-0x10)={0x2, 0x0, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r6, 0xfffffffd) syz_emit_ethernet(0x55, &(0x7f0000015000-0x55)={@random="f88216f453f8", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x201, @x25={0x2, 0x400, 0x13, "99277d2060ec11e2a9e453bc08d424f28b9ed8e96bb526289f79e2c412735a83347bfe19b88e96229c66e0d81a7f5ca475cbc439d482ee17444bbd6a1926884cea597eb6"}}}}) syz_emit_ethernet(0xff, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="4c6112cc15d8", [], {{0x800, @ipv4={{0x5, 0x4, 0x5, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @dccp={{0x2, 0x2, 0x4, 0x1, 0x5, 0x0, 0x0, 0x5, 0x416, "8ba5ed", 0x7fd, "008cf2"}, "b8e648d1a24de7dc81aca10197244a8a8314486f0a22d9df36d164e356b0a842f0781ce3685e26fe85cc361711ec4cf120153daf17e2eadbf5ce246b54949307a21322d5326e906b129ed9b7b67bccaf07f10e39a9517672481d12bab93f8df03735ba742ad19c97fbd238c351767e5e89160dbfe907b235279490a8d0d94f784d1d22dc76db86c57e565947f13d50bfc2c5fc050f1e0c5747a7a4c255087367ea44a929ee8404301029d02331b5007b9c24d4fa0755426c8be467298863f2834b7ba7f826e693f90a176adb54"}}}}}) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x1, 0x12110, r5, 0xfffffffffffffffc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000bbf000-0x74)=[@in6={0xa, 0x2, 0x200, @loopback={0x0, 0x1}, 0x10000}, @in6={0xa, 0x1, 0xffff, @loopback={0x0, 0x1}, 0x7fff}, @in={0x2, 0x3, @rand_addr=0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x5, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7eff}], 0x5) 2017/07/29 11:54:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x0, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:01 executing program 1: getegid() r0 = openat(0xffffffffffffffff, &(0x7f0000221000)="2e2f66696c653000", 0x18600, 0x40) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000001000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2017/07/29 11:54:01 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000)="2f6465762f73657175656e63657200", 0x105200, 0x0) mq_timedsend(r0, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x0, 0x989680}) [ 289.448090] keychord: unsupported version 32769 [ 289.453641] binder: 23770:23771 ioctl 40206417 2003dfe0 returned -22 [ 289.482775] keychord: unsupported version 32769 [ 289.514453] binder: 23770:23771 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r2, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) r3 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r3, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:01 executing program 5: socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listen(r0, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xa, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000925000-0x10)={0x2, &(0x7f0000193000-0x10)=[{0x20, 0x0, 0x0, 0xfffffffffffff034}, {0x6, 0x0, 0x0, 0x0}]}, 0x10) setsockopt$inet_buf(r1, 0x0, 0x28, &(0x7f000071a000-0xe2)="b746308ac3796a64ccca8555346a60c453d450a57991ce8a6582d98ad63762d245aa205c135d452b253533dfdec285712b0dd95d79dabe09bb22ab48e9f13e93acdeed85a51ea894b4602fa344adab7271e28acdb7b6f8009800206d2537e046450069815705e200f7d8f7c254143f4130b6c81b81d2422ffd4779d9e12c1a3a92654a1986004700eabab1ff04269a57464a2471febd9d510000172d8f56caa0c6f80e522f72c19a89ee67f64c0fac701895fe964dac9de76700b06e1161c16c4bc1d55bca4320c14479a96c3e6a331a230aeb0bbf30fa4e439d701fec25f2ad6c38", 0xe2) syz_emit_ethernet(0x76, &(0x7f0000fb9000)={@empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x800, @x25={0x0, 0xff, 0xff, "3f1340178f277675e4b1c93bfe10dc064f332cf37ec1dc4c088553235c9e0400cb26a4003fef947250fe70385797e8520fc0aeb1b9f73518cbf0952b4fb14759a37ff0304baff300ffe8d3ea68fc064100000000000000bf38fc73d83f3ae1f077f5bddfd6"}}}}) r2 = socket$inet6(0xa, 0x7, 0x7) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000bfd000)=0x0, &(0x7f0000dcc000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000489000-0x8)={0x0, 0x0}, &(0x7f0000dff000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f000090e000)={r3, 0x2, &(0x7f0000d2a000-0x2c)=[@in6={0xa, 0x2, 0x8, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5f7}, @in={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f00004cc000-0x4)=0x10) mmap(&(0x7f0000000000/0x15000)=nil, 0x15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0xfffffffffffffffd) bind$inet(r4, &(0x7f0000001000)={0x2, 0x0, @rand_addr=0xfd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r4, 0xffff) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000e99000-0x8)={r3, 0x2}, &(0x7f000093d000)=0x8) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f000063e000/0x2000)=nil, 0x2000, 0x8, 0x32, r4, 0x0) bind$inet(r5, &(0x7f0000005000-0x10)={0x2, 0x0, @rand_addr=0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) listen(r6, 0xfffffffd) syz_emit_ethernet(0x55, &(0x7f0000015000-0x55)={@random="f88216f453f8", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x201, @x25={0x2, 0x400, 0x13, "99277d2060ec11e2a9e453bc08d424f28b9ed8e96bb526289f79e2c412735a83347bfe19b88e96229c66e0d81a7f5ca475cbc439d482ee17444bbd6a1926884cea597eb6"}}}}) syz_emit_ethernet(0xff, &(0x7f0000002000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @random="4c6112cc15d8", [], {{0x800, @ipv4={{0x5, 0x4, 0x5, 0x0, 0xf1, 0x0, 0x0, 0x0, 0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @dccp={{0x2, 0x2, 0x4, 0x1, 0x5, 0x0, 0x0, 0x5, 0x416, "8ba5ed", 0x7fd, "008cf2"}, "b8e648d1a24de7dc81aca10197244a8a8314486f0a22d9df36d164e356b0a842f0781ce3685e26fe85cc361711ec4cf120153daf17e2eadbf5ce246b54949307a21322d5326e906b129ed9b7b67bccaf07f10e39a9517672481d12bab93f8df03735ba742ad19c97fbd238c351767e5e89160dbfe907b235279490a8d0d94f784d1d22dc76db86c57e565947f13d50bfc2c5fc050f1e0c5747a7a4c255087367ea44a929ee8404301029d02331b5007b9c24d4fa0755426c8be467298863f2834b7ba7f826e693f90a176adb54"}}}}}) mmap(&(0x7f0000016000/0x1000)=nil, 0x1000, 0x1, 0x12110, r5, 0xfffffffffffffffc) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000bbf000-0x74)=[@in6={0xa, 0x2, 0x200, @loopback={0x0, 0x1}, 0x10000}, @in6={0xa, 0x1, 0xffff, @loopback={0x0, 0x1}, 0x7fff}, @in={0x2, 0x3, @rand_addr=0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x5, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7eff}], 0x5) 2017/07/29 11:54:01 executing program 1: r0 = getegid() r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000cb000-0xc)="2f6465762f6175746f667300", 0x101000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = geteuid() syz_fuseblk_mount(&(0x7f0000000000)="2e2f66696c653000", &(0x7f0000001000)="2e2f66696c653000", 0x0, r2, r0, 0x1f, 0x3, 0x20) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000000)=0x3ff, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x3) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind(r1, &(0x7f0000004000-0x8)=@un=@abs={0x0, 0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000003000-0xbc)={0x0, 0xb2, "bd87a04d84eed4e0067aeb972cd47d5b099a46aec96862af2325a1ad149934e86a79a401f1840f35ff54e86360db5cfd641e0600000013d958a15922e2c7d81ea9e1ac2c8ec66acf2664b7b87ef6e56dd363a632344c69c00a8fc62d1bbecc548fd1c27f80045c388001f36d7859ffc5bcbb20bc07f704ec4a20c3d37f3d0047661a677bc6d2d59125ef0678e3bd2fe137cf73b57b2367cf8d933886b46369f2a110aab876d99247fa9aff1a474af6b19633"}, &(0x7f0000002000)=0xbc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = request_key(&(0x7f0000005000-0x8)="6269675f6b657900", &(0x7f0000002000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000004000-0x1)="00", 0xffffffffffffffff) syz_open_dev$urandom(&(0x7f0000005000-0xd)="2f6465762f7572616e646f6d00", 0x0, 0xc00) keyctl$chown(0x4, r4, r2, r0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000002000-0x10)={0x9, 0x8, 0x100000000, 0xffffffffffffff55, r3}, &(0x7f0000001000-0x4)=0x10) 2017/07/29 11:54:01 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffff9c, 0xc02c5341, &(0x7f0000002000-0x68)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={r0, 0x0}) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000002000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) 2017/07/29 11:54:01 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:01 executing program 3: mmap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x3, 0x4a010, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:01 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) bind$inet(r5, &(0x7f0000fc4000-0x9)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000fc1000-0x8)=0x0) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:01 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000-0x10)="2f6465762f73657175656e6365723200", 0x80000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001000-0x108)={0x0, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x6, 0x0, 0x0, 0x2, 0x100000001, 0x43da, 0xfffffffffffff001, 0x1f, 0x0, 0x564, 0x35c, 0x4, 0xffffffffffffffff, 0x837, 0x3f]}, &(0x7f0000001000-0x4)=0x108) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffff, 0x0, 0x6, 0x90}, 0xa0) getegid() 2017/07/29 11:54:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x0, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x0, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:01 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f000041d000-0x8)="2e2f66696c653000", 0x2a800, 0x2) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000827000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001000-0xc)={0x0, @empty=0x0, @loopback=0x0}, &(0x7f0000000000)=0xc) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000001000-0x8)={r1, 0x1}) getegid() 2017/07/29 11:54:01 executing program 1: getegid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000aa8000-0x8)="2e2f66696c653000", 0x400000, 0x32) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x0, &(0x7f0000d94000-0x4)=0x4) 2017/07/29 11:54:01 executing program 1: r0 = getegid() r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000908000-0xf)="2f6465762f73657175656e63657200", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$netrom(r1, &(0x7f0000001000)=@ax25={0x3, {"747522572db5bb"}, 0x81}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001000)={0x0, 0x0, 0x0}, &(0x7f0000001000)=0xc) setgid(r0) 2017/07/29 11:54:01 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000043000)="2e2f66696c653000", &(0x7f0000b46000-0x8)="2e2f66696c653000") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x5, &(0x7f0000002000-0x10)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000000)="00", 0x1, 0x5, &(0x7f0000002000-0x10)={r0, 0x989680}) sysfs$2(0x2, 0x3, &(0x7f0000000000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") pipe(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCCBRK(r1, 0x5428) [ 289.596581] keychord: using input dev AT Translated Set 2 keyboard for fevent 2017/07/29 11:54:01 executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f72746300", 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x6) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x390, 0x4) getegid() mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000001000)=0x4) 2017/07/29 11:54:01 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00001ae000)="2f6465762f70707000", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000001000-0x8c)={0x0, @in6={{0xa, 0x1, 0x7, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1ff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00009e2000)=0x8c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x7, 0x4, 0x8, 0xe323, r1}, &(0x7f000017e000-0x4)=0x10) getegid() 2017/07/29 11:54:02 executing program 1: getegid() r0 = socket$inet6(0xa, 0x3, 0x37) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000001000-0x14)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, r1}, 0x14) [ 289.669599] binder: 23835:23842 ioctl 40206417 2003dfe0 returned -22 [ 289.691053] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 289.702090] binder: 23835:23842 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:02 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r2, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x0, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:02 executing program 1: getegid() r0 = syz_open_dev$mice(&(0x7f0000fc1000)="2f6465762f696e7075742f6d69636500", 0x0, 0x40081) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00006e8000-0xc)={0x0, 0x0, 0x0}, &(0x7f000090f000-0x4)=0xc) 2017/07/29 11:54:02 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)="2f6465762f72746300", 0x8000, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:02 executing program 5: mmap(&(0x7f00006f6000/0x3000)=nil, 0x3000, 0x3, 0x4a010, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:02 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$llc(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000002000-0x4)=0x10, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r1, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:02 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) bind$inet(r5, &(0x7f0000fc4000-0x9)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KDGETMODE(r4, 0x4b3b, &(0x7f0000fc1000-0x8)=0x0) splice(r3, 0x0, r6, 0x0, 0x1, 0x7) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:02 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0x5, 0x20200) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000d54000+0x9ec)=0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001000-0x10)={0x10000, 0x0, 0x2, 0x4, r1}, 0x10) socket$inet(0x2, 0x0, 0xbc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) 2017/07/29 11:54:02 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000db8000-0xc)="2f6465762f6175746f667300", 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000f0b000-0xb0)={{0x7, 0x2}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x400, 0x60b6, 0xb24a, 0x9, 0x69bdc875, 0x6, 0x0, 0x2, 0xdeb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r7, 0x89e1, &(0x7f000098d000-0x4)=0x0) write$tun(r7, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) [ 289.766784] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 289.787491] keychord: using input dev AT Translated Set 2 keyboard for fevent 2017/07/29 11:54:02 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x2010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000001000-0xe)="2f6465762f6b657963686f726400", 0x101000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f70707000", 0x220000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000ce6000)={&(0x7f0000001000-0x8)=[0x0, 0x0], &(0x7f0000001000-0x1c)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000926000-0xc)=[0x0, 0x0, 0x0], &(0x7f00000b9000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000002000-0xe)="2f6465762f6b657963686f726400", 0x100, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$unix(r2, &(0x7f0000001000-0x38)={&(0x7f0000001000)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000001000-0x50)=[{&(0x7f0000001000)="af9a328b56d33c851d341a2a42e8f223e436966ca4f74889519b9eaec829a13a2e75b8da655eb392b3164723e2f948d731254b3f0f8191c2e790514aed9da12829743370e634daf3bc44d48d2064a877114118fb4a9b320eb2c69628017b8eca1baf306f2a0c5b9aad64e7f3cd5adefbef3649ba9986de5bf41cb98f23c1578428fd8523a53d5426c89c45a107c455fffb420bc66c7b2f51", 0x98}, {&(0x7f0000001000-0x5b)="262e809c74a542c209e0266a5479ae4a45130a7dee0587afe9284b3cb1134784258c8f9edf302785eba2ae6a23f0dc817516ea0eba4b35e3bcb83fa04d72a488f8ff0577de25863c2cd0372e84ce117d6c90d424101928de32116c", 0x5b}, {&(0x7f0000002000)="a45ea4e53a5ffcdd7e3f71c03cba3d3833b5822705909cd27493960c8d660857861b3fcaaf8659534754c04002b6b7b98cf2e5cfa80c8f4c06b75a2d55675356eb59580e12d723fa143b25f84331d7281eecdab0e6602798d03122839cc0f6b8d20ab9078a6c94825b1f84cc0c2b7ea22240f1acf88d1b763db84743a1a0745d4746f023e3e3adbed3349506b41e8e6870f755ab4cc231a06e09c7b322ba6a3b933cac717ae2ea04e80f571051bba75d101d1a5c712d1dc438", 0xb9}, {&(0x7f0000003000-0xfa)="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", 0xfa}, {&(0x7f0000002000)="39533636272ccc4bcb9b39795fe5a0e04ac74d7067650d40b98bc44a57e12905b7d1337dd79438941d778c4eefbfe38557971bfe97622310f5c117c30cb3837fc4ea422e0c126dd04fbfda38e8d4563243130160d827678fd6ac55aa6418b1952d458f9e935bff85335d7e14049aeccf609b905f45d7e7466a424b9cb784202a7e4eb93e6aaf2868c1f7da8a57c88357967eedf51501ec3d355b36440ad029d0de7ce98f864fa073cd560dad992e079640fc938d1944f68c9dd80fa7f7b4fbf3a4b6362f041b81f0d6cc82ab31ccedbdd9328ee112c1205eb616aaf287631f24f6bad984158d887d1386ee797aa6", 0xee}], 0x5, 0x0, 0x0, 0x8000}, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000002000-0x10)={0x7, &(0x7f0000002000-0x4)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000002000-0x10)={0x7, &(0x7f0000001000)=[0xfffffffffffff800, 0x4, 0x3, 0x19, 0xfffffffffffffff7, 0x0, 0x800]}) 2017/07/29 11:54:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000d7b000-0x1f)="00000000000000000000000000000000000000000000000000000000000000") io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) accept4$inet(0xffffffffffffff9c, &(0x7f0000a56000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a86000)=0x10, 0x80000) socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:02 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:02 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001000)={0x0, 0x86c, 0x0, 0x0, 0x9}, &(0x7f0000001000)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000002000-0x8)={r1, 0x3}, 0x8) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) [ 289.824261] binder: 23928:23930 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:02 executing program 3: r0 = dup(0xffffffffffffffff) ioctl$VT_DISALLOCATE(r0, 0x5608) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r1, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) mbind(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000006000-0x8)=0x0, 0x0, 0x0) setsockopt$ax25_buf(r3, 0x101, 0x19, &(0x7f0000bad000)="6f13cb3a999bb627af1952ab13e2d2bbd6f57a03b5cd09adea92a899c4", 0x1d) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x7, 0x0) socketpair$llc(0x1a, 0x0, 0x0, &(0x7f0000c59000)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() r7 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r7, 0x89e1, &(0x7f000098d000-0x4)=0x0) write$tun(r7, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000d9a000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) [ 289.875506] binder: 23928:23951 ioctl 40206417 2003dfe0 returned -22 [ 289.900538] binder: 23966:23968 ioctl 40206417 2003dfe0 returned -22 [ 289.914567] binder: 23953:23956 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r2, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:02 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) bind$inet(r5, &(0x7f0000fc4000-0x9)={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r6, 0x0, 0x1, 0x7) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:02 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r6, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r6, 0x100, 0x0}, {r6, 0x200, 0x0}, {r6, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r6, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:02 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000f52000-0x4)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001000)="2f6465762f73657175656e63657200", 0x341400, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$netrom(r1, &(0x7f0000001000-0x10)=@ax25={0x3, {"2759ce42a942b7"}, 0x2}, 0x10) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x0, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000d7b000-0x1f)="00000000000000000000000000000000000000000000000000000000000000") io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) accept4$inet(0xffffffffffffff9c, &(0x7f0000a56000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a86000)=0x10, 0x80000) socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f000000a000)="") [ 289.929424] binder: 23953:23978 ioctl 40206417 2003dfe0 returned -22 [ 289.952748] binder: 23966:23980 ioctl 40206417 2003dfe0 returned -22 [ 289.963233] keychord: using input dev AT Translated Set 2 keyboard for fevent 2017/07/29 11:54:02 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f000072c000)="2f6465762f70746d7800", 0x82040, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0x9, 0x480) write$fuse_poll(r0, &(0x7f0000001000-0x18)={0x18, 0x3, 0xdeb3, 0x6}, 0x18) mmap(&(0x7f0000682000/0x1000)=nil, 0x1000, 0x1000002, 0x32, r0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xc, 0x52, 0xffffffffffffffff, 0x0) accept$inet(r1, &(0x7f0000000000)={0x0, 0x0, @remote={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000002000-0x4)=0x10) sendto$inet(r1, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001000-0xc)={0x0, @rand_addr=0x0, @multicast2=0x0}, &(0x7f0000002000-0x4)=0xc) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000002000)=0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$fuse_notify_inval_entry(r0, &(0x7f0000004000-0x20)={0x20, 0x100, 0x0, 0x6, 0x8}, 0x20) 2017/07/29 11:54:02 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6877726e6700", 0x10100, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000000)={0x2, 0x6, 0x4, 0x4, 0x1000, 0x1ff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000002000-0x4)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000002000-0x8)={r2, 0x4}, 0x8) lremovexattr(&(0x7f0000000000)="2e2f66696c653000", &(0x7f0000001000-0x5)="73656c6600") socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000003000-0x8c)={r2, @in={{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) [ 289.973856] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 289.983680] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 290.009968] binder: 23990:23998 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:02 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{0xffffffffffffffff, 0x100, 0x0}, {0xffffffffffffffff, 0x200, 0x0}, {0xffffffffffffffff, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {0xffffffffffffffff, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:02 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x3, &(0x7f0000001000-0x10)={0x0, 0x0}) 2017/07/29 11:54:02 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x9010, 0xffffffffffffffff, 0x37) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) r1 = fcntl$getown(r0, 0x9) pipe(&(0x7f0000a72000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$ipx(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f0000001000-0x4)=0x10, 0x80800) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f000098d000-0x4)=r1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000002000-0x8)=0x0) 2017/07/29 11:54:02 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {0xffffffffffffffff, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000d7b000-0x1f)="00000000000000000000000000000000000000000000000000000000000000") io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) accept4$inet(0xffffffffffffff9c, &(0x7f0000a56000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a86000)=0x10, 0x80000) socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f000000a000)="") [ 290.044949] binder: 23990:23998 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:02 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000001000)={{0x0, 0x0}, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x29, &(0x7f0000001000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") 2017/07/29 11:54:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{0xffffffffffffffff, 0x100, 0x0}, {0xffffffffffffffff, 0x200, 0x0}, {0xffffffffffffffff, 0x20, 0x0}, {r3, 0x8000, 0x0}, {r4, 0x41c, 0x0}, {0xffffffffffffffff, 0x18b, 0x0}, {r5, 0x240, 0x0}, {r4, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) recvfrom(r0, &(0x7f000088f000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfd, 0x10100, &(0x7f0000128000)=@hci={0x1f, 0x9, 0x3}, 0x6) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") [ 290.140968] binder: 24052:24055 ioctl 40206417 2003dfe0 returned -22 [ 290.140997] keychord: using input dev AT Translated Set 2 keyboard for fevent 2017/07/29 11:54:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r2, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:02 executing program 1: mmap(&(0x7f0000000000/0xca1000)=nil, 0xca1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000bd8000)={0x0, 0x0, 0x33, 0x0}, 0xc) utimes(&(0x7f0000c9e000)="2e2f66696c653000", &(0x7f00003df000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000ca1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000ca2000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r1, 0x0, 0x2, 0xf) mmap(&(0x7f0000ca2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000028f000/0x4000)=nil, 0x4000, 0x200000000003, 0x20000832, r0, 0x0) mmap(&(0x7f0000ca2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlinkat(r1, &(0x7f0000683000-0x8)="2e2f66696c653000", &(0x7f00002c8000)="", 0x0) mmap(&(0x7f0000000000/0x73c000)=nil, 0x73c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000003000-0x4)=0x0) getsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f0000002000-0x89)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f000073b000)=0x89) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x0, 0x4) mmap(&(0x7f0000ca3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000ca3000)=0x0) r5 = fcntl$dupfd(r2, 0x406, r3) mmap(&(0x7f000073c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f000073c000)="6e7600", 0x3) mmap(&(0x7f000073c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f000073c000)={0x19980330, r4}, &(0x7f00001dc000-0x18)={0x0, 0x200, 0x7, 0x0, 0x7fffffff, 0x1}) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00005bd000)={{0x2, 0x0, @rand_addr=0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x1, @random="7b35ed49832c", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20, {0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="de6a316da9c1d27ed1885266f75a2973"}) recvfrom$inet(r3, &(0x7f0000003000-0x97)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x97, 0x2, &(0x7f0000003000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000003000-0x1e)="441f1a76ffda1bd9e41b665bdb5c5c000b655b1304634ca60d3712a1d5e7", 0x1e) connect$netlink(r0, &(0x7f0000036000-0xc)={0x10, 0x0, 0x3, 0x617f}, 0xc) mmap(&(0x7f0000ca3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000ca4000-0x8)="2e2f66696c653000", 0x0) socket$netlink(0x10, 0x3, 0x0) 2017/07/29 11:54:02 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000fc0000-0x8)={0x0, 0x0}, &(0x7f0000fc7000-0x4)=0x8) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r5, 0x0, 0x1, 0x7) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:02 executing program 3: mmap(&(0x7f00007c1000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x0) 2017/07/29 11:54:02 executing program 4: r0 = socket$inet(0x2, 0x200000000800000, 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, r0, 0x4) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000d7b000-0x1f)="00000000000000000000000000000000000000000000000000000000000000") io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) accept4$inet(0xffffffffffffff9c, &(0x7f0000a56000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a86000)=0x10, 0x80000) socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:02 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r3, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:02 executing program 4: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000001000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)="6879626c6100", 0x6) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) [ 290.185488] binder: 24052:24089 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00001f4000-0x34)={{0xffffffffffffffff, 0x3, 0x5, 0x0, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet_sctp(0x2, 0x0, 0x84) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000583000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000ad5000)=0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f000076b000)="2f6465762f6175746f667300", 0x2200, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000362000)={0x7, 0x42, 0x80, 0xfe, 0x0}, &(0x7f000005c000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000729000-0x8)={r4, 0x7b}, &(0x7f0000196000)=0x8) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:02 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001000-0x11)="2f6465762f7667615f6172626974657200", 0x101000, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000fc2000)=0x5) socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000003000-0x4c)={0x4, 0x10001, 0x100, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) inotify_init() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f70707000", 0x480100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000002000-0x1a)={{0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x307, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40, {0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="68b6588036bdfcfbadf426df6f1af23a"}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000000)=0x6) 2017/07/29 11:54:02 executing program 1: mmap(&(0x7f0000000000/0x936000)=nil, 0x936000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x5, 0x3, 0x7, &(0x7f0000315000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f000088f000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000aa7000)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dd8000-0x4)=@assoc_id=r2, 0x4) seccomp(0x200000000000, 0x200000000000, &(0x7f0000937000-0x10)={0x6, &(0x7f000020d000)=[{0xffffffffffffffc0, 0x6, 0x9, 0x4}, {0x2, 0x3, 0x9, 0xb3}, {0x200, 0x1, 0x0, 0x400000bc9c}, {0xdd, 0xffffffffffffff20, 0x81, 0x80000000}, {0x96, 0x7, 0x0, 0x7}, {0x3, 0x9, 0x5, 0x0}]}) sysfs$3(0x3) r3 = syz_open_dev$mice(&(0x7f0000801000)="2f6465762f696e7075742f6d69636500", 0x0, 0x2000) ioctl$TIOCCONS(r1, 0x541d) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) mmap(&(0x7f0000000000/0xfa9000)=nil, 0xfa9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x100080003, 0x0) ioctl$TIOCNXCL(r4, 0x540d) fcntl$getownex(r4, 0x10, &(0x7f00001ab000-0x8)={0x0, 0x0}) mmap(&(0x7f0000fa9000/0x1000)=nil, 0x1000, 0x2000009, 0x32, r3, 0xffffffffffffffff) mq_open(&(0x7f0000001000-0x5)="6574683000", 0x42, 0x0, &(0x7f0000213000)={0x0, 0x6, 0x4, 0x9, 0xfffffffffffffffd, 0x2, 0x0, 0x3}) mq_timedsend(r0, &(0x7f0000258000)="c44d91c2b60db2a704214983ebfaa804804a8af9f798403ba1fdc90e40ad1dd54bdaeba4649974f75e5b7bb7f50002350000000211a57c09d2d33d8cd054de8e2a9e4e1c0cbe94578e7c145d52a5628de6b9b933f829db653bf8e402f2f59dce7fbb1d9f68572099a12ea8886ad3df43abc7046f3c24ababb650000000000d00040104539c592083eb708ce1d5c7912fda07750e9807cd2a8b575e061a4ab57b551738cbff070040132ea749ab0469a060beb5d786e9000000098e1edec5bb000000012a41d32d96026ff73855ab8e8979a5a3496540ca7bf46ea901", 0xdc, 0x6, 0x0) mmap(&(0x7f0000000000/0xfc2000)=nil, 0xfc2000, 0x2, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mice(&(0x7f000043a000)="2f6465762f696e7075742f6d69636500", 0x0, 0x200000) mmap(&(0x7f00005c1000/0x3000)=nil, 0x3000, 0x800000003, 0x32, r5, 0x0) mmap(&(0x7f00006e6000/0x2000)=nil, 0x2000, 0x4000000000004, 0x42032, 0xffffffffffffffff, 0x0) r6 = openat$binder(0xffffffffffffff9c, &(0x7f00004f4000-0xc)="2f6465762f62696e64657200", 0x40, 0x0) dup3(r6, r6, 0x80000) mmap(&(0x7f000007d000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) mmap(&(0x7f00004f0000/0x4000)=nil, 0x4000, 0x0, 0x11, r6, 0x0) mincore(&(0x7f0000145000/0xc00000)=nil, 0xc00000, &(0x7f0000861000)="00000000000000000000000000000000000000000000000000000000000000000000") mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000528000-0x8)=0x0, 0x2, 0x3) memfd_create(&(0x7f0000002000-0x33)="776c616e302a6d696d655f747970652d747275737465647d26776c616e30766d6e6574312e747275737465647b5c7b47504c00", 0x0) [ 290.231290] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 290.259790] keychord: using input dev AT Translated Set 2 keyboard for fevent 2017/07/29 11:54:02 executing program 4: socket$inet(0x2, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) [ 290.272355] binder_alloc: binder_alloc_mmap_handler: 24120 204f0000-204f4000 already mapped failed -16 2017/07/29 11:54:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000d7b000-0x1f)="00000000000000000000000000000000000000000000000000000000000000") io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) accept4$inet(0xffffffffffffff9c, &(0x7f0000a56000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a86000)=0x10, 0x80000) socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:02 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept$llc(0xffffffffffffff9c, 0x0, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002000-0x8)="2e2f66696c653000", 0x185000, 0x11) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast2=0x0, @rand_addr=0x0}, &(0x7f0000001000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}) socket$inet(0x2, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002000-0xf)="2f6465762f73657175656e63657200", 0x90000, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000001000)={0x25a, 0x45c}) accept4$inet6(r1, 0x0, &(0x7f0000000000)=0x0, 0x80000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000000)={0x77359400, 0x0}, &(0x7f0000002000)={0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000004000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, r3}) [ 290.305621] binder_alloc: binder_alloc_mmap_handler: 24120 2007d000-2007e000 already mapped failed -16 [ 290.335674] binder: 24123:24147 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:02 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x0}, &(0x7f0000000000)=0x8, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x0, 0x84) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") r2 = socket(0x2, 0x80000, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000cb8000-0x2c)=[@in={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8}], 0x2) 2017/07/29 11:54:02 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) writev(r0, &(0x7f0000001000-0x10)=[{&(0x7f0000001000-0xb8)="4fb2e0fbb99bdfd3dfa9b503e0e1ab3d9e707684c8a3b5e8611a0297135c5553fe01cb06d5911d66cbd65a28a279995b30aa3e3f1413aa4acd2d7eeb1ae2a34feb9feb14e1074e9477d69861008c57ebc79fddc695a6f52e506b5b97129ea74bac0f483d80243c2631366ff3fe804633dd568449375cf9e444aba5fc634b179f4605511aeaa657db4154d827314368f63c7f163652fa65ace362a6a0373e15c3d155381d6386706fac533cb8a1fc3cecdd4a0248ada8419d", 0xb8}], 0x1) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 290.361003] binder: 24123:24147 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:02 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r3, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r2, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000d7b000-0x1f)="00000000000000000000000000000000000000000000000000000000000000") io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) accept4$inet(0xffffffffffffff9c, &(0x7f0000a56000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a86000)=0x10, 0x80000) socket$inet_sctp(0x2, 0x5, 0x84) r6 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000d7b000-0x1f)="00000000000000000000000000000000000000000000000000000000000000") io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) accept4$inet(0xffffffffffffff9c, &(0x7f0000a56000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a86000)=0x10, 0x80000) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:02 executing program 4: socket$inet(0x2, 0xfffffffffffffffe, 0x8000000000000002) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f000046d000+0xeba)="2f6465762f70707000", 0x400, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x40}, &(0x7f000068d000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000a2e000)={r1, 0x2288, 0x30, 0x6, 0x5}, &(0x7f0000000000)=0x18) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)="2f6465762f7573626d6f6e2300", 0x80000000, 0x100) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000002000)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000001000-0x68)={0xd96, 0x7, 0x8, {r3, r4+10000000}, 0xfffffffffffff86f, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:02 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6(0xa, 0x800, 0xa82, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000002000-0x4)={0x3}, 0x4) r2 = socket$inet(0x2, 0xa, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, 0xc) r5 = getuid() fstat(r1, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000005000-0x28)={@common="62637366300000000000000000000000", &(0x7f0000001000)=@ethtool_rxfh={0x47, 0x1, 0x8, 0x7, 0x4, "ac3609", 0x100, [0x3]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$netlink(r3, &(0x7f0000003000-0x38)={&(0x7f0000003000-0x2)={0x10, 0x0, 0x100000001, 0x7}, 0xc, &(0x7f0000001000-0x60)=[{&(0x7f0000002000-0x30)=[{0x30, 0x8, 0x4, 0x2, 0x100, "bb05a6c10c4a9718124605fa115b1e04359e6dccf47590a1599edc38fa0f33"}], 0x30}, {&(0x7f0000002000)=[{0x70, 0xfff, 0x400, 0x100000001, 0x1, "5536c6d9e1dc143cfe8d849200c17ffc78bcfd819673627187d373a69433be510be3e4d49a53b023377866b95d37006436a45305c3700fcb52420049d7c95c793e53f45568d25cc8d81fb9baa7a14b70ed451121b34732b05d7cfb40a6"}, {0x88, 0x7f, 0x8, 0x1, 0x0, "a2beb27444633dfb0dab58bce47669de41e0b75f1766b6f25ff5b191dc63904e696aa75d3e863d9d15224b3bfac8c9d0b1e322cdbf640a9e1aa37ec9187752047ab336c82d21f6b74b0d2e4d7dac43a2859815b0771d94d7a1152917d1b14af39a194ec8e197f25e150a239135a6c0751f4a30a8784c96"}, {0x30, 0x2, 0x408, 0x1d0b, 0x33, "e8792fb3bc84957c5b95fa54f4df6f5547baee7f2894bd0ff69a6d5771"}, {0x78, 0x101, 0x700, 0x6, 0x9, "3837d39c1eb7f9c996cc8533922806af3eae366eaf4fdf65ec4a170547489421f6444108bd71aae06d4e327e39ad717a9cfde95224f94603722990114a5a764d91350b8944c0f7da54d47bec5989762305e5519be7863369a53c018f1b65428df856a61cb8d1dc06"}, {0x30, 0xa0000000, 0x400, 0x3, 0x6, "5c6e6907eff8e59f149d2801a114ed756cb30ba577ef22a577233f65f44e"}, {0x1010, 0x0, 0x411, 0x7fffffff, 0x2, "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"}], 0x11e0}, {&(0x7f0000003000-0x28)=[{0x28, 0xff, 0xd34, 0x4a7, 0x4, "a6ffe91e9e228c3edc62a9443fc2a7c140d8c00a2775"}], 0x28}, {&(0x7f0000003000-0x220)=[{0x98, 0x200, 0x202, 0x3, 0xebbc, "6c4659647ccd16c1231591ca2cb85e6f70b827b2908d36099abffd36c94f263e562600917b4453dcb8238112fac40cce7d86403be2affba8d155573a908a00c3498319e90618c8e3b1f25c8124b6088248202f145d7a31c72c950cec897ea172730be4f6253d48fe0130cc6201cf8e8feccebe1ed4b9953382309067074d10e05b997a5db429d5"}, {0x34, 0x13, 0x2, 0x1, 0x8000000000000, "02feeaaaef232af5b63b8d8e9e0aa4a20b2900e1df5c4f5c69d47969126dd6b16b86"}, {0x70, 0xffffffffffff0000, 0x713, 0x2, 0x0, "eb6193f8916d44a8d74f19c0d45ceb62d37fc46a224c779cea291057971bf736c43f31274a3513994b7ee3c9734642ef5f65408ad6c2ccc6bfe9bbea2b95dce6e7216b25197b47084aa984432c19cf6b5706dd64f7bcc13eacd8d26b9302e385"}, {0x14, 0x200, 0x8, 0x4ed, 0x0, "4a"}, {0xd0, 0xffff, 0x5, 0x6, 0xed, "23b1d72c793cbeca7df38c902272e196230e21909eb6a6b9cecf72a19d74e03b22c868c0d9b957b60bda513cd40b8bd397c1248975982527673b77d917ad0fd4fd441f8c3bc0e908e505feab35376c571834995dc7ae4066be036fb4b08440fc97a52f1aff1e8e092ab8f1550d8ac7c60f1772bb9f92906d3bba225473b294bdf0abf004136790ae32026d6822295aa303622d93b21e230abd8a707636404fae2bd98aba691af09bedcd4e33ad2ffb89b821cbe5bcc30c8e8bff62e914b37a09"}], 0x220}, {&(0x7f0000002000)=[], 0x0}, {&(0x7f0000001000)=[{0x74, 0x4e08, 0x520, 0xd1, 0xffffffff, "cb9641f6f5df858f89664b183e3fcc97dbf1eecc7792f20466dee0b688625129718a5fdbe4febc1303a6538d3b6805b4e59cbed1c441005b0ea8b21c79d30ac961f40de14a58d036eb208dca413a904c71cb15d9dbc2e3d484f53ba03011f2ebb50a"}, {0x9c, 0x8e2, 0x0, 0xff, 0x174, "2cd1c9cde0f73ea76e0c134f1049ff9eb1c17b2e22c9d15115d8cb9c0aa0d133f1e2884fd91dfd29935ebc213f1da2b8e8e6612b92a1069a52d50e96680309b7f35fcc020d1b3190e16ef6f6e037db28d9d662fadd53902261b07b928f03e6b3776669b126c3f15bd775c3b2e4759fdc9c6cf2b5cc6b97d6e4b33f22074ff776a56b7cc3b7ef8528b062"}, {0x28, 0x675f0705, 0x504, 0x8, 0x0, "8f64a1b0d78761bd87e14dc60222ad7bcd707ad50860"}, {0xa4, 0x100000000, 0x800, 0x7, 0x20, "9d6f362d89faee1d5f1f3f5275f0289ee2008018f26ca97316ef6e70b80a8c89ed10bb51e8bc4d5a2454a886935d3c49e2b5b7d167055a4c36093f9646b6ff799a19984d62688386b10d76e1adb1c4f08421661a8154e87a80dd2c6715a0a8967368f4166bfde8ff4464650a37d3cf4ef2a0fc07729deb7baaeba0518043cdd45b21eb8dbd93b04d82f0935123a67b203372cd09"}, {0x34, 0x9, 0x200, 0x1, 0x5, "0944b7302d15faca366478328f878c70051d5c19cad8511b614b62f3fbd9d3fe2ee2"}], 0x210}], 0x6, &(0x7f0000003000-0x50)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x30, 0x1, 0x1, [r0, r1, r2, r2, r0, r0, r1]}], 0x2, 0x800}, 0x804) sendto$inet(r2, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:02 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$DRM_IOCTL_ADD_BUFS(r4, 0xc0206416, &(0x7f000003c000-0x20)={0x0, 0x4f4, 0x80000000, 0x4, 0x7, 0x3}) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r5, 0x0, 0x1, 0x7) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:02 executing program 4: socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000d7b000-0x1f)="00000000000000000000000000000000000000000000000000000000000000") io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) accept4$inet(0xffffffffffffff9c, &(0x7f0000a56000-0x10)={0x0, 0x0, @local={0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a86000)=0x10, 0x80000) r6 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f000000a000)="") [ 290.473823] keychord: using input dev AT Translated Set 2 keyboard for fevent 2017/07/29 11:54:02 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002000-0x10)={0x0, 0x3, &(0x7f0000002000-0x48)=[@in={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x9, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8000}, @in6={0xa, 0x0, 0x100000000, @loopback={0x0, 0x1}, 0x2}]}, &(0x7f0000000000)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000001000-0xa8)={0x0, 0x9d, "d549ab79934c2164a562f6b41e694e7cf21cb8b0c410bf1bbed7b23ebc178aa29604d9c3ac8e633c1df8b532748760f9ac03a13b57f38b5029ae36dea836cc9d288fc498eb7e150b6a5f3c4c439d9ca982e5a27cb71d2e19ffd496996c0243d1e3b8a25319de23f7410f9cb1660ce0284181e8ee05882ea4da653d35618315b7836f518d5f7b7c18e7360d7d2249d284c7b52206f68815094ebe0505f7"}, &(0x7f0000000000)=0xa8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000003000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000002000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000080e000/0x3000)=nil, 0x3000, 0x3, 0x112, 0xffffffffffffffff, 0x20000000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000001000-0x20)={0x80000000, 0x8, 0x8, 0x0, 0x4, 0x0, 0x9, 0xe6, 0x0}, &(0x7f0000001000-0x4)=0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000001000-0xa0)={0x0, @in={{0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x1, 0x1, 0xfeb, 0xbc}, &(0x7f0000001000)=0xa0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xf, "853732e267d977815a2de58f4619e1"}, &(0x7f0000000000)=0x18) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r0, &(0x7f000000b000)=[{&(0x7f0000006000-0x1c)=@in6={0xa, 0x2, 0x8, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c, &(0x7f0000003000)=[{&(0x7f0000006000-0xa8)="16f5c9a594d96c06055382a16ecea568880d96de1cfe1c8378e64e6fb91c017f81b1570cb8cbdd9cdd82e61bbfe37ae040db02ad4264a0c610e19a9947d64658192324bfec8d5e13088f552bb16652cabb84f4fdd65e6e8149750efe5dcce2b25ebc15838bcd84a28bcfa4cdc5976ec1ef3e822d59f8c281d31eb44abdec6fb96b0f418d8490df4d278e29f050af58c433fa866403490dcb49fa108c06c0d62c33f30f2bb7c2cd67", 0xa8}], 0x1, &(0x7f0000006000-0x120)=[@init={0x18, 0x84, 0x0, {0xffff, 0x20, 0x0, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x1000, 0x3, 0x81, 0x6, 0xfff, 0x800005, 0x7ff, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x6000000000000, 0xfffffffffffff16a, 0x200, 0x4, 0x2, 0x9b, 0x4, 0x1, r4}}, @init={0x18, 0x84, 0x0, {0xfffffffffffffff4, 0x3, 0x7ff, 0x716953f3}}, @sndrcv={0x30, 0x84, 0x1, {0x2, 0x2, 0x200, 0xff, 0x8, 0x1, 0x38, 0x7, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x492c, 0x1, 0x0, 0x8000, r4}}], 0x6, 0x0}, {&(0x7f0000007000-0x10)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000006000-0x30)=[{&(0x7f0000006000+0x530)="9523b72f8222272d2d91eeb03ca7638653505d9520abe44abf44a74d21fbc4fe0ca6a95f98247ac1bce2396e8394cf4b", 0x30}, {&(0x7f0000007000-0x4b)="286c098d0b73acc425c70edab5a8341c00690efdc4d864de14db81bd567af4020bebd956f6718209e3b9759d9e17e412835e4a2c26f1cc12b47b66a09c493d3e0aba21414990054cc01b84", 0x4b}, {&(0x7f0000002000)="2d2eada1ea0670151aa940544af5a25707cf9c2656635474850c0511fd66c67cb995230a077660", 0x27}], 0x3, &(0x7f0000007000-0x150)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0x1, 0xe1b, 0x5, r3}}, @init={0x18, 0x84, 0x0, {0x1, 0x0, 0x4, 0x0}}, @sndinfo={0x20, 0x84, 0x2, {0x40, 0x8001, 0x100000001, 0xd1ff, r4}}, @init={0x18, 0x84, 0x0, {0x7, 0x4, 0x1c, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x1000, 0x1, 0x6, 0x0, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8000, 0x6e0, 0x6, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x3f, 0x4, 0x0, 0x80000001, r5}}], 0x7, 0x20040000}, {&(0x7f0000001000)=@in6={0xa, 0x3, 0xaca, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1ff}, 0x1c, &(0x7f0000005000-0x60)=[{&(0x7f0000004000-0x4)="f4467b5e", 0x4}, {&(0x7f0000008000-0x89)="02eff4585e4ae291794aa4c2378a585a2bd2a7bc9370eea9c77355645a6921f2fb177cc446bc250f8d0fc4f2f70b1de35a763946830ec919426cb690d20afcfc3cb19340e3db02955f1400bb7af6cef1222c4480a83f1f3d3ecc285b3a9acf45ebb6ddb55e11db19a59579a7a4aba3620abb9e446b67329a36625933c8619f918e480070a2ebb29eae", 0x89}, {&(0x7f0000005000-0xe5)="5d45437047b3bd85241c2a420cb1c2a2bf1f08757a953b646fc4c6da3c06e5dd463f5c27255ece212655dd5982b95e43f7c86df30e3c1802aadce5963296cb9daaba7a6a5c8d129e90b24a10a3d65b5dc29f7f39b40826140691414ee94c90cdbd31a7d03506acdfbd9b60f2189388e741399cfe9cc83bd8aa9da51483ef05d4e8ccf78583c3a4e353fa48aa44efeba393e5659f7f6ce25b7ec95f70a87165c3771fb6d47b5bd9213de2650704c6fde3e474dacbf842293d8367b75950c814315529222e7ea5f55f41a332a8523fc635170f3ab3329141c4c3dc02ec7350886847712ff127", 0xe5}, {&(0x7f0000006000-0x63)="9a38d1af7447c9b86d1013c9776c44979d29d5ed5d84aa9804a80827f2df549d859c356de3327db9ca99c7cf60d297438f55029f40a18603ee534a9f9a14f6ef6cf1028bb925d60539d8d402cf33c79ce11ac79967fea2503b4f8fa2dc2dd5c8c1a971", 0x63}, {&(0x7f0000008000-0x92)="028eaae5394157bc32d961c67e3df704d6f324f143711fb7292597e2b93badb520e5f9885dbf6047dd7ffdc7a45c3f58a2e10148e3ae13e85f0526dc1456d4eaaba262943622a96e9c2e79973df66b3394fe50bc6d499084d2489da8bb0bad59fa07c817ec0f4f14462cc38e32c114de08c4461d83ffc52c9e68cea7ba57181787dcf0d8f0baedd66b89c91e8f42e2e26fc6", 0x92}, {&(0x7f0000008000-0x50)="5851ceb9aa5a4388acb66daef516df3f278c2fdccc58a240f2b493219390aeb04e2dfce0ea5ac15c2c458ce329873f699e40162b3cd455aafe4b4207ee9d10646ceb8f9d6e858c3de1a3b15b7ab3b98b", 0x50}], 0x6, &(0x7f0000008000-0xf0)=[@sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x2f9c, 0xec9, r2}}, @init={0x18, 0x84, 0x0, {0x8, 0x2fc, 0x0, 0x6}}, @init={0x18, 0x84, 0x0, {0x6, 0x8001, 0xee, 0x100000000}}, @init={0x18, 0x84, 0x0, {0x0, 0xffff, 0x1000, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x7a, 0x5, 0x8000, 0xc551, 0x2, 0x7, 0x8117, 0xaf, r4}}], 0x5, 0x0}, {&(0x7f0000002000-0x10)=@in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000008000-0xa0)=[{&(0x7f0000008000)="1ca43db673b2dc9bda2bbf44d2396432c5572d5d04f5e2614f51227ff8cdfbf9cab69231c911170407908fecd87ce643ee8a13c040326e3934ddd0a4fa48080117412d35137defda", 0x48}, {&(0x7f0000002000)="ccb9e7bbde074b424b0f09dd908c06cacaa0fdd8bc74f7e5dfb57e65d374b9adaa1754c33a", 0x25}, {&(0x7f0000008000)="9da2b747baa878010754cb0240ade491929259d3e45aaa1862383d9b3c8a77a2d3e0791521e66646f2d9670d341da7e97507bc39ad6c8aa5763d5f49c728b4274f3aa716bf3ae77a1c33a99ba3c197df4da0dd37971181ed8aeeb71ace69a80220c2bf22a37a359e3d6426a5be0a792dc207135fac57c86e66c19f6845ce958618fcc8593044451295e0e7a595b86207286291a88c7f9fce11744e4381510c489d883d3dc0f6667ba701603fee6a54702876609f0e8fc98852ce41675f4d3c766b110bd0a77cfb27902c70b2194682541076fe7b", 0xd4}, {&(0x7f0000007000-0xc0)="75a769e5e8e78c2b9477b6c213dbe0ba905245a826db852df278a391bc74561bf84fa7761e5228686135d3826ad08ce93ee1f3168e639839c65135d8db4b5729503450acec9a6f40bdd81e3dfc6c9913b7a34f69d711e021a01f228003bff7cab3de68047bbaaae5cb19b918b46026160e89d30d78e35746cacd7ee34b29a412703216d2d59b4f8231fa92588d11ee1ef5b8470f15b672eeb46683d4f0a6ddb903aa58a3c6a4912d9f5c1a6bf3616114ca24cfa24666e4f8592cebce780e805e", 0xc0}, {&(0x7f0000009000-0x25)="cbb255bd1d7554b048e514909ff21419e0cc7815467e30077699c8ecf9eb7b2428858f6331", 0x25}, {&(0x7f0000003000)="", 0x0}, {&(0x7f0000008000)="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", 0x1000}, {&(0x7f0000001000)="c7f1aa31b93b90a1c70fd8303632633db731400841cf23d5a3a4d3619330137f4d2c353953d3cf68d36bb541ec4d15c5e2ca84d1bc0d1c4d43eb2b8df72dff1502606fa165bfa9faf14f490c99fb6304e1ddc48b1b7e408dd4da402f4d9fb7839103d64236eb847e07a8337e0662eee72418dfc8f6f446fa974fdd20bae7e2f3c4bf88734d29e18af67fb5f271f74cb039fac2471d881c797b601b2c7be40eaf0c173beb7d1fa7d5b97457929ae1c8ffbe04b8d202fff910108c82c2d99cff0ee48b482d610e2901a34beda59278849dee8e8dbca492938341c77f0162", 0xdd}, {&(0x7f0000005000-0xf5)="2161884b18e041f965f00d49163bc2c4570a7d459a024eb7f7b155c1adc741e8ca7b1cea69161382233a24ad541a839a32ad47b4ade31626d6dfbe12e26d455f8b0e79899f10d9ad66aec202eab12e36f8de110ec99643642d3d800fe6dddb607aa95d3cbe700d4c9b1f47a62fb96a948230b564e3c99000799deac1aa7a0b6f86748f14dc2e492278397e397bd2a484bac76acdbd5290194aa6a5254391c400a5d7c61cef82cd8c2895d500ce163e2d2cdb71b9012467f6a6d9c79cc956b4103a8c32261e36bbdd1e499c56769504229353388bf8a748a55f0026b3f352c8cf66860cced6effb86052bbc13d2dcccf30cb0d5fe21", 0xf5}, {&(0x7f0000006000-0x1000)="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", 0x1000}], 0xa, &(0x7f0000003000-0x1e0)=[@sndrcv={0x30, 0x84, 0x1, {0x8f, 0x5, 0x8000, 0x4, 0x100, 0x8, 0x0, 0x6481ad00, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x9, 0x201, 0x3, 0x7f, 0x1, 0x2, 0x769f, r6}}, @init={0x18, 0x84, 0x0, {0x5, 0x4, 0x5, 0x1ff}}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffff7, 0x2, 0x8000, 0x6b0, 0x7, 0x800, 0x5, 0x100000001, r4}}, @init={0x18, 0x84, 0x0, {0x3ff, 0x700000000, 0x2, 0x1}}, @sndrcv={0x30, 0x84, 0x1, {0xff, 0x5, 0x200, 0xfffffffffffffffb, 0x20, 0x0, 0x80, 0x9, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x200, 0x3, 0x8000, 0x4, 0x10000, 0x0, 0xc31, 0x7ff, r5}}, @init={0x18, 0x84, 0x0, {0x5, 0x1ff, 0xff, 0x8001}}, @sndinfo={0x20, 0x84, 0x2, {0x0, 0x8200, 0x735, 0x7bf, r5}}, @sndrcv={0x30, 0x84, 0x1, {0x4ef, 0x0, 0x2, 0xe33, 0x1, 0x8, 0x200, 0x2, r1}}], 0xa, 0x10}, {&(0x7f000000a000-0x10)=@in={0x2, 0x0, @rand_addr=0xeacd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000004000-0x10)=[{&(0x7f0000009000)="a9a5c8bfee15b7058073346bbd9b8e6eefc7fc836e544d84b6f02ae539f4559c988dd85a17226b1baa86fa0ceb459388585258bb3276d422d0184420e9a529174baaf7386df135b292a9c8f7135fae2ad5c1f202978379b4f6643649f315a6656622a7201d3e6127a16235e39f66ef5bc2688d00e6405f99a63ac8b25335a8e3c6a7e45f5d4748b73f9e792615a11aadb36388a1a3a7d2da9beb48b1b2997ad250d2ff", 0xa3}], 0x1, 0x0, 0x0, 0x20000000}, {&(0x7f0000005000-0x10)=@in={0x2, 0x3, @rand_addr=0x50700000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000004000-0x80)=[{&(0x7f0000003000-0xb2)="14bdbf0a11e8d5d1df74422a55612159c37e72f7b7d8450d8d47bf6e04b014f5b38d4fd260f4d6fa7b26fd051d6410a36432ed128a6187b4416a3a7302e20535cf5b2986273a0ba1e231772d468f978cc8dc64d3aead060727755dcdb604a5df896f18a3299e70e98c4b8112894e10701943480ff4c87306928eae7c9a5a217685792aee8811641316a6e9a6d1b3d046eaf4c639113f6c0fe22ac7b80bf9385e0322e2f26d16b188c5e4e0bd99567c135443", 0xb2}, {&(0x7f000000b000-0x1000)="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", 0x1000}, {&(0x7f000000a000)="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", 0x1000}, {&(0x7f0000006000-0xa8)="2b638dd01af6522669e2058d3a356e15b6a8c3db9cc7193dd7cc1e951fb3d07fa9fd3959e97d472a7f198c7da6ccf5dce6440879613665d1afcdf0156122764befee6eabade7bee6e0eabaaa595038dca594ea271f08e5c78e6c99645df8f055a52cb2c421c3a5ef07c770de9802afc91fcc000922e0d7aacf3b3279101b1f88033950e543bd3f85d06d25ef95de843d44ae2900c1e3e698afc6c6a5faf894d2acff280f4ee4b1c1", 0xa8}, {&(0x7f000000a000)="71f43d8873a95cc46389a0651a352c62f2158890ac8aa53aabaee47eab443655c1f0cc6b94e247b6d82dd7b01fa895128fa46454f970a146e4443aa464033a7aa0f80f492e8765287ea3f28af939c5913a61a4c1fc404e466a947f38b5cf299c1a9d02284ab9ddb75755ec3a9bffbe4d916aad612f628bde29fcacdccdfbcdd352ae55b4", 0x84}, {&(0x7f0000008000)="228945218ba6ea03d03df186fc6af581b5dbbc086dc17370a3252efe9d71a32e27690519b632f74dd426c9abb45d76bd075a3e155c901f1bfd52c1682588f0bae3cbe694c2c48bfcae7c7e3c38039be5a8ce6c847bbd58a88661e25e4c957daa99bcda9c1b1aa4e67dee5cdec7350a6e40e61969f552f1ccc7f2c5c26482574be3918f7a16efad4e401cc43999fe5712e2491d560ca4c4901fe0dd84931c724b2ea80d428548ba2710a5b14e87571751357112b28ddab0098be6e47486aba9022eaeea9944ae161aef018dd09ec15a90f1785c2552db878aa05d30238544688d85daf84a", 0xe4}, {&(0x7f000000a000+0x23b)="5cdc3b98acac53ee30108583a7eef5981a15cf5312a624adff8c1c0bca9395bb778e158127d2a77d20bce47e4def82aea4fc4c617cbc2c476279ecb9c9981f18ce89bbceb868f555904c0aa7f06865628bcf8d8750248ffbde265cab7b44f09ba750fbc20e0538e462e57212699180d995c186b6993a01b6589b5d9adcdfcff37650510af97c3c9179a69446746bddc323834705e63eef36cf53b2ce524be2226d1e78868646fd3beb58ff58aef15d1760e8c443bcdf2fbdb2844fcf1dbfe319221a2d6ad7dab2d1fe1532321a263e6455", 0xd1}, {&(0x7f000000a000)="e438d95787d244db37e50d84d5905bc3cb46ce724e33880f2d89017afa85be1a92dd765b7e3e7a9f29edddae2b7e143b6959a38eab4033d69dc8701ddf628581c6e02f2e18b97d9afd6e0e3ff4598a68e7a3f0204644338dcbc0bc9ce64f514a70aab51e44de2ae45365f88db0c327c0c69b2fbbe366b2bc1bf6d375ac70bf4b41cae70a653efad010ecfeef132f4d8ca8bbf358784f969ef05ccdc9bcf228c12a847019fd6d61becb1bbef1ab1befdc7260091e0e4d82f42174edc2ae27a3a596935cc73dc23f048dce38a47ca4454974e5af43ed6e4935e3d64400774029c822801bc3e3aba0da969c", 0xea}], 0x8, 0x0, 0x0, 0x40005}], 0x6, 0x4800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = creat(&(0x7f0000001000-0x8)="2e2f66696c653000", 0xe0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0bc5351, &(0x7f0000001000)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xffffffff80000007, "ced3f4b76f570bce", "2e6044be50b40d0e13089bcb2bb15213a0dbb5f0cc0c8c4e76d8412f85ee88df", 0x10001, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000212000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x4500) ioctl$TUNDETACHFILTER(r0, 0x401054d6, &(0x7f0000e37000)=0x40) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x0, 0x84) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:02 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r4, 0x100, 0x0}, {r4, 0x200, 0x0}, {r4, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r4, 0x18b, 0x0}, {r3, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000d7b000-0x1f)="00000000000000000000000000000000000000000000000000000000000000") io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f000000a000)="") [ 290.516835] binder: 24188:24215 ioctl 40206417 2003dfe0 returned -22 [ 290.539274] binder: 24188:24215 ioctl 40206417 2003dfe0 returned -22 [ 290.559499] binder: 24236:24238 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:02 executing program 4: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000d20000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001000-0x4)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001000-0x18)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7, r1}) socket$inet(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000001000)="", 0x0, 0x0, &(0x7f0000002000-0x10)={0x77359400, 0x0}) 2017/07/29 11:54:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r3, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:02 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r2, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r2, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 290.560776] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 290.604891] binder: 24255:24259 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:02 executing program 3: socketpair(0xd, 0x0, 0xfffffffffffffff9, &(0x7f0000458000+0xc7a)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f6175746f667300", 0x400200, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) linkat(r0, &(0x7f0000000000)="2e2f66696c653000", r1, &(0x7f0000000000)="2e2f66696c653000", 0x1400) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r2, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:02 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r3, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000d7b000-0x1f)="00000000000000000000000000000000000000000000000000000000000000") r6 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f000000a000)="") [ 290.627208] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 290.637631] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 290.645704] binder: 24255:24259 ioctl 40206417 2003dfe0 returned -22 [ 290.653805] binder: 24236:24252 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r4, 0x100, 0x0}, {r4, 0x200, 0x0}, {r4, 0x20, 0x0}, {r2, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r4, 0x18b, 0x0}, {r3, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r3, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 290.671402] binder: 24281:24282 ioctl 40206417 2003dfe0 returned -22 [ 290.693975] binder: 24281:24282 ioctl 40206417 2003dfe0 returned -22 [ 290.705454] binder: 24291:24292 ioctl 40206417 2003dfe0 returned -22 [ 290.717933] binder: 24293:24294 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000f60000-0xc)={0x40000002, 0x0}) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r5, 0x0, 0x1, 0x7) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x1000007, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000685000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) writev(r1, &(0x7f0000f3e000-0x20)=[{&(0x7f0000f9b000-0xf3)="0a18f0e15b030d5025212c31d0fd70ddacacbc89dd1db2651d8e1da0307f4a942b9795bda02d4c4f6bb4abf1e8f34c4f85110dcf4b352a5bc34b165da8774fa8ecba39a8741ec5fefdebbe7edbd7f4e8d579a06c3adf6522d2843d1633e89f1608ecae1a0ed8977e49a867b1ef56c11c6fa846885edbe8c58115708ea2755b44c06f45b6e6339306144ca1c25cb21a9a7cbc11445a11e66070a77fda16807aab861a905c503a32070919fbeeda46d64889a33f5882abc4d0cae91055b3aecd8ab438ad24ada6908b7db2f787d7a923371515bda1fe1e2f939368d24072f05610e0ca5cda8bc08968e7078389cfe90879c27276", 0xf3}, {&(0x7f0000892000-0x1)="91", 0x1}], 0x2) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:03 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r4, 0x100, 0x0}, {r4, 0x200, 0x0}, {r4, 0x20, 0x0}, {r2, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r4, 0x18b, 0x0}, {r3, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r2, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:03 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000002000-0x2)="e948", 0x2, 0x0, &(0x7f0000000000)={0x2, 0x2, @rand_addr=0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r4, 0x100, 0x0}, {r4, 0x200, 0x0}, {r4, 0x20, 0x0}, {r2, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r4, 0x18b, 0x0}, {r3, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x406, r4) r5 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f000000a000)="") [ 290.723975] binder: 24291:24296 ioctl 40206417 2003dfe0 returned -22 [ 290.745397] binder: 24293:24294 ioctl 40206417 2003dfe0 returned -22 [ 290.754256] binder: 24304:24307 ioctl 40206417 2003dfe0 returned -22 [ 290.765675] binder: 24308:24310 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r4, 0x100, 0x0}, {r4, 0x200, 0x0}, {r4, 0x20, 0x0}, {r2, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r4, 0x18b, 0x0}, {r3, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 6: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) r2 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r4, 0x100, 0x0}, {r4, 0x200, 0x0}, {r4, 0x20, 0x0}, {r2, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r4, 0x18b, 0x0}, {r3, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 290.773863] binder: 24304:24307 ioctl 40206417 2003dfe0 returned -22 [ 290.789702] binder: 24322:24323 ioctl 40206417 2003dfe0 returned -22 [ 290.804865] binder: 24308:24310 ioctl 40206417 2003dfe0 returned -22 [ 290.808121] binder: 24329:24330 ioctl 40206417 2003dfe0 returned -22 [ 290.811463] binder: 24322:24323 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r2, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() r4 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = fcntl$dupfd(r1, 0x406, r4) ioctl$EVIOCGBITKEY(r5, 0x80404521, &(0x7f0000d7b000-0x1f)="00000000000000000000000000000000000000000000000000000000000000") io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r5, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r3, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) 2017/07/29 11:54:03 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x4, 0x80801) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000002000-0xb6)="038dbc215ed847153e0204ba72efef145191b3771b2510ea56dc146e0e70c7ee3fe8576caf6f6223eedaebd51db596307e3a7e0501e941be7d7dfc71ecb0c12b204230e9fd21cc40759d05e2bcb0a74edb374037b5523bde4d63106636edc2cc571ac82483f3f1f563a34f7b2ce1ba7bdda130ced8160bbe438e7f4c4082064ae7ebde92e1dbf7d4551ddf243dfb6bd2a9596423749c25ffb59d218eacc8ead9a94798a79d577ed2445121fb6ba647cec3a6eb5846a7", 0xb6) r1 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r1, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:03 executing program 6: syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r3, 0x100, 0x0}, {r3, 0x200, 0x0}, {r3, 0x20, 0x0}, {r1, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r3, 0x18b, 0x0}, {r2, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000285000-0x28)={0x5, 0x49, 0xffff, 0xaa5, 0x1ff}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000646000-0x11)="2f6465762f7667615f6172626974657200", 0x400, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x71) [ 290.824113] binder: 24329:24334 ioctl 40206417 2003dfe0 returned -22 [ 290.846464] binder: 24342:24343 ioctl 40206417 2003dfe0 returned -22 [ 290.846648] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 290.851568] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 290.863520] binder: 24346:24347 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(r0, &(0x7f0000fc4000-0x30)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x6) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r5, 0x0, 0x1, 0x7) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) poll(&(0x7f00000c9000-0x40)=[{r5, 0x100, 0x0}, {r5, 0x200, 0x0}, {r5, 0x20, 0x0}, {r3, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r5, 0x18b, 0x0}, {r4, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0x0, 0xffffffffffffffff, 0x0) gettid() r2 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:03 executing program 6: syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 290.870254] binder: 24346:24347 ioctl 40206417 2003dfe0 returned -22 [ 290.888405] binder: 24342:24343 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{0xffffffffffffffff, 0x100, 0x0}, {0xffffffffffffffff, 0x200, 0x0}, {0xffffffffffffffff, 0x20, 0x0}, {r3, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {0xffffffffffffffff, 0x18b, 0x0}, {r4, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 4: mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000000e000-0x8)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0x38000)=nil, 0x38000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000031000-0x6)="2e2f62757300", 0x0) r1 = open(&(0x7f000001e000-0xc)="2e2f6275732f66696c653000", 0x880c0, 0x0) truncate(&(0x7f0000030000)="2e2f6275732f66696c653000", 0xe88c) mmap(&(0x7f0000038000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PIO_CMAP(r1, 0x4b70, &(0x7f0000039000-0x30)={0x49, 0x1, 0xd, 0x1ff, 0x5, 0x80}) mmap(&(0x7f0000004000/0xc000)=nil, 0xc000, 0x3, 0x12, r1, 0x0) mmap(&(0x7f0000038000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000038000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000039000/0x1000)=nil, 0x1000, 0x3, 0x400000000032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000039000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000039000)="2e2f6275732f66696c653000", &(0x7f000001f000-0x9)="2f6465762f73672300", &(0x7f0000039000)="00", 0x1, 0x1) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000012000)="2f6465762f7667615f6172626974657200", 0x2000, 0x0) utimensat(r1, &(0x7f0000038000)="2e2f6275732f66696c653000", &(0x7f0000039000-0x20)={{0x0, 0x0}, {0x77359400, 0x0}}, 0x0) getdents64(r0, &(0x7f0000007000-0x12)="000000000000000000000000000000000000000000000000", 0x18) mmap(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open(&(0x7f0000039000)="2e2f6275732f66696c653000", 0x2102, 0x0) fallocate(r1, 0x1, 0x0, 0x100) 2017/07/29 11:54:03 executing program 6: syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unshare(0x400) socketpair$inet(0x2, 0x4, 0x100, &(0x7f0000a51000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00004a9000-0xc)={@remote={0x0, 0x0, 0x0, 0x0}, @multicast1=0x0, 0x0}, &(0x7f0000079000-0x4)=0xc) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000b5d000)="2f6465762f6175746f667300", 0x80, 0x0) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f000032b000)="95fc91a5ce7f871477eb3cf63e4801b911101a2dc9370f98578f7f22ff5ef05bc64d8ef85ad614e5df40119637dc4c18c4c6bdec0d0b0e2d05ddf59c6370487d0e02be08801b05ba177d3aaed86252565e1ad2b62d65517ddd43a52ba37c34f2a13a4d2fa225cad41a5688c80ba0246fd1902a87de09f085de985306b0258cae959285556485359c1c52ba02e057e09987d1ddecf7b8bd954d8c603f2313ed1440e1a5b8b4c4", 0xa6) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000e40000-0x50)={{0x7fffffff, 0x5}, {0x1, 0xfffffffffffff001}, 0x2, 0x1, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000dc0000)="6c7000", 0x3) bind$inet(r2, &(0x7f0000f4c000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r2, &(0x7f00001f1000-0x1)="0c", 0x1, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000d0e000)={0x7, {{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000001000-0x44)={{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x643a3a3d89ae8f09, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, {0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common="67726530000000000000000000000000"}) sendto$inet(r2, &(0x7f0000dbe000-0x1000)="e385970b267b7ea3ede6d105e34d6d1bad0897911a2cf520ddc4712e17fa3fb6b9aa0e2abfce681a3dc763f4db8444ea59b78de5efdf2167be5d0b8321950ee871b900321d5899bdf8140b9abcc4e5e780da2778e640887a750167009b9556b371f437519df2ab044c80aac08c95f392e4602f827577f4976445e88313d7b4338facb3534bb090bd95563b8188559ecf68526777ea785972065c0a1986f5d79490c3696cc3c227b44f205a22d18991d1b7289ce2e5372d4b1b19bee230676659ddd7d6e34635a1eb19d54333566e5bcc47e2bbc009ab012f34960533193ff3790583d2e2f6da7521a78545b33d1ea2bdad79b7696113ea1fc09f2d101b3a73c41e814487a13abea4cbc05fd9a524fa9d14d666b2d01004d2b00ccbb61f24bf36b0942b4b4fa09ecd630d37e39d424f95ddc7d9b22fe48a6bc9482fef82a2e297236622fa3f508d20d74d1156d1341e085dc60468b90fecda00d05e853f2c161fc3e743e2e5d7790000d79911d59ea005b6f50af3649667bb18bff907321602ee5dbd6bdb6d578b732803a3c2cb0211bd4975ebaacae34b98469eebd8e550a162236584812df37ca4bcdc77fb5cd92cb7722c89d659b6b83c829d76d920b4218352f4a39f5503d3f12d67c7b071cd3b01b7bea5fa6c5d8fde3e6d3e1050ca2552b97580393164ce4ed1f968258160ba558225f80ed01fe07f40a43d7bfddcd6a8caec40b178ea3bde5b58955c0a8236a19db3032ecf96fc4d8662858817b7155dc626940493ccd74888acc654d4f526ff864f3e5062f4e10c04780f894e672be15f6d091688bac746c9ec2d9d5739c7f32173b2c80efa9c6bbc5fa8469394028ef4d2327fe75dfcd3ab05b4acf25ad91fb654016fd806b53d9961ee93518c574a13e0b4d85c7ed42f1f0c9a7d4c1d70ba7b42ac4bfcd415e87eac2439d0b373cbbd7c93444487db60a4e05ab0bdcdd17c8a9b4cc40aa7687d0cbc770c51104b20efc4ca7b815d0339e6422a0ccdb39981b3d4691b93ec6719d9b17b9f65a55ce8b50a0a568b29f2e519c0f693ae1f3277ba3160f992a36b2a59eb7f5dfd15f07dbeeee9bb35856e01d96276c60dce93ff45add178dec305549c3d88fdc3645f0d7781fa39d0bbb0d190bab9f4e3e4fef719862f4005c3006e4dbcc505484dfba9d1684519c6839b6751b7b52d2c0b15a599c8ce1d01a77a6773d90868111c584937a814ed86b2c55dca9504cc4030d8f4a7a34383ba0e099f6125d96b280b6e4a02a3a20da66ac2757dfe30e3e76a1f24c6109962c7471c5e0f8e3d60e341d6dc7682fdd81dab63fad57d5857d9113ad7c2e44d533161dc30026599dcd4ec9464cd7e319b83cf9b55a5ce4daaf2150115fab72e12e9191bf8e04a5d22d0a1f63f1eb0d7721f60901c7d7346a17763a65ea0b5d439d7c239830598dce4508256dd3eb28dec0f482706d0e6dc3629cd63aa47c44271edc1f09f503c967b2e51e5f3e84c277bb2b532bc64eefacaff6616cc1d7c67965f99ef3fcfca09bf0936b86c9abf60a4d312d268b6e2476502a27dcfca771638a703db0b8f33b30902b3df91da7a46073c86d5c0093613ea47bdf6fd3bd7e48383ff4cbf501e1c84558e6efe89ab370f5b0296b565b6f9ce912791bd88520596efb26e3b85074d980fc8c98c2edd98532a0d11098bace67627d662398e3e90f7758968c2a21b11ed5a67060d0941ccaa50040de2e5af58f4b6f3a3e9663d563850c169fd443920da023d29e2cad214ace6183927935e967a928a1c38ec6aacab8807df3d41b644fa15422122f1e4f95c15376619deb556a9b5cd0cf22a03bd34558d54e47edc38ec8149bd2774c346a07426a833c95c094914b005ba5d03e014e3cb8ee4380354a027e81b21d67307908945b3b035627929f180f1e9cc93520410fe6bbde713df5d567f616bb985ac9ba7a8dd3e815641819dd2f98c6352590a0c9122134907fa774a543477f874a79f34558f0779450200824ca7f52ec9b1fb10ca50537b6afe47c93bf9f903a2188931570426f0b33358adb462915b4bdf40e99281eb12f4bd03cf710e0b5f7cc542bdd254fec66f5c4196325cadb04cc586b859a36f07be1a80ff253da58c084afca21337e6fc751d07442161eff26335dbf4037648b6d0be7abc696793bbe942ca57eb02b4ba990e1d0b5019e3073e372abdf168697f78912a954a32d9705c9f4004f1e2fab2cc872b02835fb7dfa3d52fba901f887d277fd9eb0af0246a3476007474e80b587ea5cb03cd46bbd6abadde52c2c9b8491147caab485e309c5980614c37043ca4c34a082bb92aa930fcf69a5c98472d7a18d170d383f5e1d98acd0bbf3f4e860144d2f9de602152f35f0b073923945fd282040b363ab941b58f6e850de2320735c2d000ea460ac37019dabf8c0d629359a3bd350c8d453c0ba2521bc6a3528a2225de05c1c56e49e243ff48420a92a41ce3f3b1cf0431e659e85b20894f0e0825018caca890e2c6f8929f3aaf114ebced490d2ccf0dad8fcd8ab660e9050d02f59d47e6511fb4f6d14be1b753c0aea5d0cb876885115d2224d3e9882ecbd34d18d76d481d39339816c794f0026def2733d2a689692b65298af350bb47f4b7b3e614a212640843dd8e17e0fe0854b129c29c78bb0e24f037a0cf07c216b9dca76d9fbafc98b73a8833598ed5eea01c8318ddb0cb52e8e09f6d769d6bc104cb118a8462e521d83d52e5ba9eb0d74e23868a56e4f9e1f982f7c5fbef944cecd4c9c14cabf58c282386d507937e83799f191a152026804bb2c4481db58168694be4e99b255a37051aa98e65ac5eade8b69b921c9d2859f63d66bd8ae3349dd1120be91fe376fe77fa60af0be36bebd9a38a73234855e7a18ae668111bd091b3373f6f20a2bbe0329f09daacca84f26af01ff6b3a016585f2a1372978e9f8aa7be75152c0d1d9ae1bf0e6fea59a2e1d23adb0b32586c6d5bdec0a161c337043953eb9c50d9ebaaca1b578dbfce44bfbd3c6e83a58e5e7ccb9bfec6d0e138ea0a096cc3d0ba840b2707f776d7fac5b47e225b20ffc95047ca91aae4d29a92c7d19bce4fa008b24fb1a0bf4242a557fce18d494a0a5d4df011fda8865bbb1324bf5a7b053021e7c728b558a372da425715a41ddb0817563eea58c0df5569dfb688b544dd641d4be0aaf5e3c03fb81119b097c5fcbb0bf9de2de6f4335c706c9dfc6fb8df64157b897b4831c6c9921c583230e48eee2a1ab0b7b9afef1e90f04e1de0d84c4424339cf265fa0043d1a8ddf44791e32c56ae48266eabab2dc8912745f51244d5b862dcc6a80d5672dfd0a91d4cdb5808dedd22ccc718f6ca0be2f1f0db5fdc98df00fd5022d652409c734852f54135aa7da9f8585ae9e2431fb84accbf320cca8cdf7d30c16d49a88835f898b0da384a384095684a2cca5f60299088cb3b338d47e7897a63a87279c29cffb6f8cea1f62971deb4db2ab393feed4bb494745ddb1cc15634ee8bbf675ac367d6e81c187deb2f0cb8605528ab35f0fc33bd11bc9505af0e78738b196e2b5880d20bcd218e306f33c049625a5dab7916e5c221495ea12dd21b80ccafd20d48bac083fa0ec45ef7740b730d2cb55dde082cfcf23039e4b742d43d8eb7839d1369ed37fbed6c6aa57f4eb6ae18b6c5391129d8312c09878eb462cffc10588b7579dde1872fe1fd1258192d669739a67da2bb2936fa3b7edc541c2c7723d936f6bc957a4f8325eec6a287378be86e112d2680926562d8655ddb98623595adc812233aebb6e6ade1e43fa8433304d74813dcb70dc5064568d3215476b916240141fbcb63d76e8bfab443683a050a35b0c6d553a2951f7be1d43cfa0c68e982d7bdaa8822171aec3a988df132b55ca19f44ce7142acecd301f75713afd62d2270ea6e1f8ede1186e64d79a023585eb300f32a1ca15a6d29407f21d4808ca500b5a85ba42efb2ba7ac923ecfc407276ae53207153c882a2fac261f2a64168007f8b5f4ac49d7fb479022a29a941de42063539b1e3114600bb84b4f743276eed0c8dfe9a8eed4ec380265bc9b56035981c42872e995c1ec445d878da04af3302955feafd3a0b72425552f940dcc1c96b3ca84139d6ec793a8588ab9078237cfb916ef226e117692b886ad8449440d625d3eef57184d308b9e0fbdabe7b599a6e4a8f231299265cde5238a9fe96d6d842207f332fffffffffffffe01663f8d45a6a9f919cb95d73f9c24da2d97e3eeab093a218a6aba2fe2a6cbb7c84e5f7c5ee5d697dd7e4b7af625139760a1407a368d4b01723a5ac26b586e6fc7dd4895d1214f00a922eb4250979b1f34fcfe3420a3ed005cef198cd6486802c62d5a836e822d4d08f0315506165fb8de7f7f8cc1b5f7f4e8b2be066d01f79e9b1525ae8b1079e426a7ec53a2917beb0c99d78cd49a4adec4acca38338e65d4813c6705d566c97fe9f5e3a4854a3cd29301ad77a98d085e2bacc5d1f008dc9704d19c839f33c733724a995b34fe4dd7d96fb69aed94f22718fa9f3d7f19473a1054465465eed3b8cd38a07c1289b167d7d84e4dd34c614aae5a5f8da14cc277a7cc619046ba18c489ac26ae665d142e7e3cf227fb57d4d079ac30f7b0a5fa00728fcd799c741b5d5c7520a0dcc48a0a5f0c826354a6f9b34eeb4352c05ef835ecd65b579e38ce47ccd612c84d660db2d702e253cb82e825544cb80abd326bd8194064e8b6f76197897f07337810e1f6f4f8e3b6250dc6fbbf4b9c1e28080db7cc8d56acaf329f66147790cf8d534e713ebe6e84618c03a300c7015a7de3119cc08c267c8c8942a583f3a7f6dfdf20a4a345438f70bb98d194267e0ed331705bfcf8172e7ea242fd0a7583c119802a7e3299ef80a402876352a45ffa67ec499d4c0be6a46ab573dcd007cf8c76827e03d66757a0d62a1745a263f98dc16f113f0722cc7e76294b111d4e1284b2f67c568573e9f744103f2b61f774b957bfe8cd360074c1e01147f63e8a22c2af36527e4ab79c2fd6da647376aaa6ab3feb8135f215a62847fc992adde1511137e3e9981e5943df79a52c001ef7168216d95d1218179028f9747b01f0e923f8a7e20c996ffd2f10f1f019eb0244aee9d944c8a9445375419cfba5a4790ac593433ba06d580d078c39fa3312a16e39fc27fbc2164e87543fa5b18dadc6eb0952f218024599bec14620798a9e949c7f7e3e48e2e6d1fec9b1119d09a1c2c67b842533ea4fdb7b84d9e476972bafc87bf0c3101fc59458477b901de6ad0a3ff7028be2d855362498bb3fb49438889b3f031adb56003f3d6d2d069faa003b85077fd7fd41a440b599760c7f8776bde320038c8f8e802821f6882b0b44b276fb53a8b7a497c23ded9b6255d3395ff1dec8a2dbf77163d3910b021eaa9331ab1727b835f152590e41627975a94647853c6ef25df95a906580e98a9a9169b5ad44a67ddf2b08db4f0a3e8b7fce45f5ae20e0d49da2e27f283c76cb850d4e766122e58aae644f28b6c7b7cae895aff38fbd5d86f23c718c44b464a6c5084100e8b337876235ad9a1931da20c28dd6e2f97ef6c7845ef01c85fea6773e8211131e9bcff88e1f3ed6dfb4b5eebed899c8ec5ee5a48d32eab6dd3228330b83ddaba23f97084311815e8402dca90894c0e7740c9a74e59c7f98e25da124448159182b30911f2c3a7ffa4582ccdde99f703f27b994dbb048593e9c58e318194f7c91eb40a400000000c01918a19a8bb26f9756d5f5ba950141e3cd24920518c9b00966c06a3e245afa47ca2a65", 0xfff, 0x44045, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00005a3000-0x78)={0x6, {0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x1000, 0x0, 0x9, 0x3, &(0x7f00006da000-0x10)=@common="6970365f767469300000000000000000", 0x0, 0x6, 0x0}) 2017/07/29 11:54:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r2, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x0, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000877000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") 2017/07/29 11:54:03 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000001000-0x9)="2f6465762f73672300", 0xef9, 0x400) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f000093b000-0x4)=0x0, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r1, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r4 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r4, 0x100, 0x0}, {r4, 0x200, 0x0}, {r4, 0x20, 0x0}, {r3, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r4, 0x18b, 0x0}, {0xffffffffffffffff, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 290.943155] binder: 24370:24376 ioctl 40206417 2003dfe0 returned -22 [ 290.956921] binder: 24370:24376 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r2, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 291.006074] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 291.008213] binder: 24399:24401 ioctl 40206417 2003dfe0 returned -22 [ 291.025071] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 291.048312] binder: 24399:24421 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) gettid() r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x4000000000000008, 0x11031, r2, 0xfffffffffffffffd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r4, 0x100, 0x0}, {r4, 0x200, 0x0}, {r4, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r4, 0x18b, 0x0}, {r3, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 291.051954] binder: 24417:24420 ioctl 40206417 2003dfe0 returned -22 [ 291.065845] binder: 24417:24420 ioctl 40206417 2003dfe0 returned -22 [ 291.080583] binder: 24430:24431 ioctl 40206417 2003dfe0 returned -22 [ 291.094783] binder: 24430:24433 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r5, 0x0, 0x1, 0x7) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:03 executing program 6: syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r3, 0x100, 0x0}, {r3, 0x200, 0x0}, {r3, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r3, 0x18b, 0x0}, {r2, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x0, 0x84) r0 = creat(&(0x7f0000dc3000-0x8)="2e2f66696c653000", 0x166) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00002e2000)=0x0) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:03 executing program 3: mmap(&(0x7f00002d2000/0x3000)=nil, 0x3000, 0x80000000000003, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f7667615f6172626974657200", 0x424200, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000002000-0x2a)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2a, 0x3) 2017/07/29 11:54:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r2, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r3, 0x100, 0x0}, {r3, 0x200, 0x0}, {r3, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r3, 0x18b, 0x0}, {r2, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 291.101668] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 291.125859] binder: 24438:24440 ioctl 40206417 2003dfe0 returned -22 [ 291.145067] binder: 24438:24440 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r2, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) creat(&(0x7f000073a000)="2e2f62757300", 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00005fe000-0xa)="2f6465762f70746d7800", 0x400880, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r2, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:03 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r3, 0x100, 0x0}, {r3, 0x200, 0x0}, {r3, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r3, 0x18b, 0x0}, {r2, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00006d0000)={0x0, @in6={{0xa, 0x2, 0x10000, @loopback={0x0, 0x1}, 0x31d9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x5, 0x2, 0x9, 0x0}, &(0x7f000010e000-0x4)=0xa0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00004fa000)={0x7, 0xe4, 0x2, 0x5, 0xb34, 0x6, 0x4, 0xa981, r2}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000e7e000-0x8)={r2, 0x100000000}, 0x8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000da7000-0x78)={0x4, {0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x208, 0x9, 0x8, 0x0, 0x0, &(0x7f00002a8000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x4, 0x6, 0x8000}) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00007b9000-0x8)=[0x400, 0x4]) [ 291.167659] binder: 24461:24465 ioctl 40206417 2003dfe0 returned -22 [ 291.181250] binder: 24461:24468 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000000, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000-0xc)="2f6465762f72666b696c6c00", 0x20100, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000002000-0x20)={0x7fffffff, 0x0, 0x2, 0x2}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000001000-0x20)={0x715a, r2, 0x0, 0x4}) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/07/29 11:54:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:03 executing program 1: syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 291.236203] binder: 24475:24482 ioctl 40206417 2003dfe0 returned -22 [ 291.246840] binder: 24479:24480 ioctl 40206417 2003dfe0 returned -22 [ 291.261089] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 291.268906] binder: 24475:24482 ioctl 40206417 2003dfe0 returned -22 [ 291.277376] binder: 24479:24501 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x7) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r0 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f000073a000)="2e2f62757300", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r1, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:03 executing program 1: syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001000-0x10)={0x1, &(0x7f0000001000)=[{0x3, 0x7, 0xffffffff, 0x80}]}, 0x10) r1 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r1, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) 2017/07/29 11:54:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) gettid() r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") [ 291.295114] binder: 24502:24503 ioctl 40206417 2003dfe0 returned -22 [ 291.310368] binder: 24502:24513 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom$unix(r0, &(0x7f0000a52000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x39, 0x0, &(0x7f0000d45000-0xa)=@file={0x1, "2e2f66696c653000"}, 0xa) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r3, 0x100, 0x0}, {r3, 0x200, 0x0}, {r3, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r3, 0x18b, 0x0}, {r2, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 1: syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000000)="2f6465762f73672300", 0xfffffffffffffffd, 0x4000000201) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") [ 291.337969] binder: 24517:24520 ioctl 40206417 2003dfe0 returned -22 [ 291.351375] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 291.361530] binder: 24517:24520 ioctl 40206417 2003dfe0 returned -22 [ 291.363117] binder: 24531:24537 ioctl 40206417 2003dfe0 returned -22 [ 291.380469] binder: 24531:24537 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) r0 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00009e7000)=@sack_info={0x0, 0x7, 0x7}, &(0x7f00001ca000)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000746000)=@assoc_value={r1, 0x5}, 0x8) r2 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) r3 = dup2(r2, r2) write$fuse_notify_poll_wakeup(r3, &(0x7f000055d000-0x18)={0x18, 0x3af1, 0x0, 0xfffffffffffffffd}, 0x18) pipe2(&(0x7f0000232000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f000000a000)="") ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00008da000)=0x0) 2017/07/29 11:54:03 executing program 4: syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r0 = gettid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000ff2000)="2f6465762f73672300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xcf7000)=nil, 0xcf7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000cf8000-0x8)="2e2f66696c653000", 0x0) r3 = creat(&(0x7f0000591000)="2e2f66696c653100", 0x0) mmap(&(0x7f0000cf8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000cf9000-0x4)=0x0) fcntl$setownex(r3, 0xf, &(0x7f0000a28000-0x8)={0x1, r4}) fcntl$lock(r3, 0x7, &(0x7f0000027000)={0x10001, 0x0, 0x0, 0x0, 0x0}) unshare(0x40600) r5 = syz_open_dev$random(&(0x7f0000cbf000)="2f6465762f72616e646f6d00", 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000ccb000)=0x1f) r6 = getpgrp(r4) ptrace$poke(0x5, r6, &(0x7f0000241000-0x8)=0x0, 0x7) syncfs(r1) fcntl$setown(r3, 0x8, r4) fcntl$setsig(r1, 0xa, 0x6) mmap(&(0x7f0000cf8000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f00004f6000-0x2)={0x6, 0x12b7}) unlinkat(r3, &(0x7f0000cf9000-0x8)="2e2f66696c653000", 0x200) mmap(&(0x7f0000cf9000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000cf9000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f000015e000)=0xc2) gettid() fcntl$lock(r3, 0x5, &(0x7f0000cf0000-0x20)={0x1, 0x0, 0x0, 0x0, r6}) 2017/07/29 11:54:03 executing program 1: syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 291.381016] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 291.391669] binder: 24543:24544 ioctl 40206417 2003dfe0 returned -22 [ 291.407827] binder: 24543:24549 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000001000-0x5)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f000049e000)=0x10, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000000)={0x0, 0xd8e3be9, 0x3f, 0xcdb, 0x8, 0x1ff, 0xfc00000000000000, 0x62f, {0x0, @in6={{0xa, 0x2, 0xfffffffffffffff9, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x35b2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x1ff, 0x0, 0x8, 0x8}}, &(0x7f0000f52000)=0xb8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000bde000)={0x0, 0xe3, "c9aa8071071e68f7b95196e9acb5a695936230e7fa0aefc16059de9b19f811ffa17ede611581b74e584a70ae60888066fff5518d94dfcd21472402dc6effda4841f44704c9b6fab7b4fad94874964e7f191fca5d991949775a9e77941bd1eabe300e99ddde14d3466343c8e11ce7666cbec9bc9137108a2d7aeb57f7ec468d68c7c35d3949e88fac3a28c226d1aa9f799d149d3e95d3888dda734679af072cf35af345d9a81b6d3755b6722e689a3c86b65476f0c4d2151cba79e656ef9b6c45d7523afea047c7707983d8d7cf75ee74db4a854c68a4fa623e5915f7e4a0a19462b10d"}, &(0x7f0000e10000)=0xec) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00005b6000)={r1, 0x3, 0x6, 0x1000, 0x5, 0x0, 0x7, 0x4, {r2, @in6={{0xa, 0x2, 0x9, @loopback={0x0, 0x1}, 0x100}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x4, 0x0, 0x9, 0x65}}, &(0x7f0000001000-0x4)=0xb8) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, 0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000001000-0x4)=r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001000+0xf65)={r2, @in6={{0xa, 0x0, 0x10001, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20000, 0xfffffffffffffffe, 0x5, 0xdd5, 0x10}, 0xa0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) pwrite64(r0, &(0x7f0000002000-0x1a)="f0db72c0fae931874b5174991212b2adef966f4fc119d6149a40", 0x1a, 0x0) mremap(&(0x7f0000f84000/0x3000)=nil, 0x3000, 0x3000, 0x2, &(0x7f0000bfb000/0x3000)=nil) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000002000)={@generic="107adadd9913d288886c50ce5a5d7167", @ifru_flags=0x100}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000bfe000-0x108)={r2, @in={{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x20, 0x1, 0xffffffff, 0x81, 0x80, 0x24, 0x4, 0xff, 0x1, 0x6, 0x200000, 0x1, 0x8e, 0x800, 0x1000]}, &(0x7f0000bfb000)=0x108) keyctl$set_reqkey_keyring(0xe, 0x7) fcntl$getown(r4, 0x9) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f0000003000)="2e2f66696c653000", 0x54) getsockname$netrom(r0, &(0x7f0000001000)=@full={{0x0, {"00000000000000"}, 0x0}, [{"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}, {"00000000000000"}]}, &(0x7f0000000000)=0x48) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGVERSION(r6, 0x80044501, &(0x7f0000005000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = add_key(&(0x7f0000001000)="73797a6b616c6c657200", &(0x7f0000005000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000bfe000-0x2d)="1423c22cb000950c53f7dbc02b1b877eeb512380b81a0d2eb97cf6e1b7f34ee3c03e2162f5ee70eed90f9816ee", 0x2d, 0xfffffffffffffff8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r8 = request_key(&(0x7f0000005000)="2e726571756573745f6b65795f6175746800", &(0x7f0000003000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000004000-0x1)="00", 0xfffffffffffffffa) keyctl$negate(0xd, r7, 0xffff, r8) 2017/07/29 11:54:03 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001000)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001000-0x4)=0xe8) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e63657200", 0x0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) 2017/07/29 11:54:03 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r1 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r3, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r2, 0x0, r1, 0x0, 0x200000, 0x0) write(r3, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r2, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSW(r3, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r2, 0x0, r4, 0x0, 0x1, 0x7) close(r3) read$eventfd(r1, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) gettid() creat(&(0x7f000073a000)="2e2f62757300", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r0, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 4: mmap(&(0x7f0000000000/0xfbd000)=nil, 0xfbd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f000001a000-0x38)={0x0, 0x0, &(0x7f000002d000-0x50)=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000013000-0x8)="2e2f66696c653000", 0x0, 0x4) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00001fc000-0x4)=0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r1, &(0x7f0000167000-0x38)={0x0, 0x0, &(0x7f000000b000)=[{&(0x7f00002ac000)=[{0x14, 0x101, 0xd09, 0x0, 0x3, "5c"}], 0x14}], 0x1, &(0x7f0000ba3000)=[], 0x0, 0x0}, 0x0) readv(r1, &(0x7f000061d000-0x90)=[{&(0x7f0000fbd000-0x7d)="", 0x0}, {&(0x7f00006ba000)="", 0x0}, {&(0x7f0000e81000-0xdb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3d}, {&(0x7f00007b0000-0xd3)="00", 0x1}], 0x4) mmap(&(0x7f0000fbd000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000fbd000)=0x5, &(0x7f00000e7000)=0x4) stat(&(0x7f0000297000-0x8)="2e2f66696c65302f66696c653000", &(0x7f0000020000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000009000-0x8)="2e2f66696c653000", 0x0, r2) mmap(&(0x7f0000fbe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) getsockname$netrom(r0, &(0x7f0000fbf000-0x10)=@ax25={0x0, {"00000000000000"}, 0x0}, &(0x7f00009c9000)=0x10) 2017/07/29 11:54:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") [ 291.443594] binder: 24570:24571 ioctl 40206417 2003dfe0 returned -22 [ 291.448144] binder: 24573:24574 ioctl 40206417 2003dfe0 returned -22 [ 291.464094] binder: 24573:24576 ioctl 40206417 2003dfe0 returned -22 [ 291.464209] binder: 24570:24571 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x80000, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x0, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 291.509340] keychord: using input dev AT Translated Set 2 keyboard for fevent 2017/07/29 11:54:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) open(&(0x7f0000b0e000-0x8)="2e2f66696c653000", 0x40, 0x20) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f0000420000)=0x4) socket$inet_sctp(0x2, 0x0, 0x84) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:03 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x6, 0x78, 0xc85, 0xffffffffffffffe1, 0x0, 0x2, 0x0, 0x8, 0x40000, 0x4, 0x0, 0xca6, 0x6, 0x2, 0x0, 0x9, 0x1, 0x8, 0x0, 0x9001, 0x7, 0xda, 0x5, 0x4, 0x401, 0x80, 0x0}, 0x0, 0x8, 0xffffffffffffff9c, 0x7) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x30, r0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fstatfs(r1, &(0x7f0000001000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000001000-0xb8)={0x0, 0x10000000000000, 0xa4, 0x4, 0x7, 0xffffffff, 0x4, 0x9, {0x0, @in={{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3f, 0x20, 0x6, 0x78e2, 0x0}}, &(0x7f0000000000)=0xb8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000002000-0x8c)={r4, @in={{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000002000-0x4)=0xfffffffffffffffb, 0x4) sendto$inet(r1, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000002000-0x10)={0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000003000)={0x2000000000000000, 0x1f, 0xc207, 0x7, 0x4, 0x5, 0x7, 0x0}, &(0x7f0000003000)={0x80, 0x800, 0x4, 0x100, 0x2, 0x4, 0x1, 0xfffffffffffffffc}, &(0x7f0000003000-0x40)={0x2, 0x347, 0x2, 0x1c000000, 0x7, 0x5, 0x0, 0x1}, &(0x7f0000002000)={r5, r6+10000000}, &(0x7f0000003000)={&(0x7f0000004000-0x8)={0x1}, 0x8}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000003000-0x4)=0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003000-0x9)="2f6465762f72746300", 0x3bf12ccc215a11d6, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000004000-0x8)={0x2, 0x40, 0x2, 0x1}, 0x8) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f0000003000)={0xeea2, 0x3, 0x1}) 2017/07/29 11:54:03 executing program 4: mmap(&(0x7f0000000000/0xfb7000)=nil, 0xfb7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000fb7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000c64000)="2f6465762f73657175656e6365723200", 0x0, 0x0) mmap(&(0x7f0000fb7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000fb8000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000098f000)=0x14) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f93000)={0xaa, 0x0, 0x0}) pkey_alloc(0x0, 0x0) r2 = fcntl$getown(r1, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f000057b000)=r2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000787000)="2f6465762f72666b696c6c00", 0x4000000000400001, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000f0b000-0x5c)=[@in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0xfffffffffffffffb, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1}], 0x3) fcntl$addseals(r1, 0x409, 0x2) pkey_free(0xffffffffffffffff) r4 = syz_open_dev$urandom(&(0x7f0000b46000)="2f6465762f7572616e646f6d00", 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000a4c000)=0x0) rt_sigqueueinfo(r5, 0x0, &(0x7f00009ee000)={0x0, 0x0, 0x0, 0x0}) accept(0xffffffffffffff9c, &(0x7f00003b9000-0x1c)=@in6={0x0, 0x0, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000c37000)=0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000f72000)=0x0) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xde, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sndseq(&(0x7f0000ef1000)="2f6465762f736e642f73657100", 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f000002a000-0xb0)={{0x80, 0x0}, "0a4ceaa05dad126e00000002a1569b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42d576589701a4", 0xa9824f69d1376637, 0x10000a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r4) mmap(&(0x7f0000fb8000/0x1000)=nil, 0x1000, 0x5, 0x40110, r3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000fb8000)=[@in={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x2}, @in={0x2, 0x0, @rand_addr=0x7fffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0xa604, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x8}, @in6={0xa, 0x0, 0x4, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, @in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f00001c8000-0x10)="2f6465762f73657175656e6365723200", 0x443e, 0x0) [ 291.562072] binder: 24615:24616 ioctl 40206417 2003dfe0 returned -22 [ 291.582177] binder: 24622:24625 ioctl 40206417 2003dfe0 returned -22 [ 291.590772] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 291.595500] binder: 24615:24616 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x0, 0x0, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:03 executing program 4: mmap(&(0x7f0000000000/0xfba000)=nil, 0xfba000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000c36000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000512000-0x28)={@generic="2f93193ba536d18052d9e00c4b1f38d5", @ifru_names=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) r1 = socket(0x11, 0x802, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fb4000)="2700000014000707030e0000120f0a0011000000f6070000ff000000078a001f05080039007500", 0x27) socket(0x11, 0x2, 0x0) mmap(&(0x7f0000fba000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000fbb000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000fb7000-0x4)=0xc) ioctl$TUNSETLINK(r0, 0x400454cd, &(0x7f0000d62000)=0x1) capset(&(0x7f0000035000-0x8)={0x20080522, r3}, &(0x7f0000034000)={0x8, 0x0, 0x8000, 0x10, 0x7ff, 0x800000}) mmap(&(0x7f0000fbb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fbb000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000fbc000-0x38)={0x0, 0x0, &(0x7f00008e1000)=[], 0x0, &(0x7f0000fb0000-0x77)="", 0x0, 0x8}, 0x0) socketpair(0x2, 0x4, 0xffffffff, &(0x7f000099f000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(r4, &(0x7f0000bba000-0x7)="2e2f66696c653000", 0x40, 0x19e) pipe2(&(0x7f0000315000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x50110, r5, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000b74000/0x4000)=nil, 0x4000, 0x0, 0x420010, r6, 0x80010000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000003000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000e7e000/0x1000)=nil, 0x1000, 0x3, 0x32, r7, 0xa0008) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x3, 0x4010, r7, 0x2) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x1000000000032, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f00001cb000)={0xffffffffffffffff, 0xffffffffffffffff}) 2017/07/29 11:54:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x0, 0xffffffff, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 291.606166] binder: 24622:24625 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:04 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r5, 0x0, 0x1, 0x7) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:04 executing program 5: r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x11, 0x400000) creat(&(0x7f000073a000)="2e2f62757300", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r0, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x100000000000, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000296000)={0x0, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00008e2000-0x4)=0x10) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) r1 = socket$inet_sctp(0x2, 0x0, 0x84) r2 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) socketpair(0xa, 0x5, 0x3, &(0x7f0000e5e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000878000-0x118)={0x2a3, {{0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) ioctl$PIO_FONTRESET(r4, 0x4b6d, 0x0) r5 = gettid() process_vm_readv(r5, &(0x7f0000a2d000)=[{&(0x7f0000785000-0xbc)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbc}], 0x1, &(0x7f000072e000)=[{&(0x7f0000fa3000+0xd02)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9a}], 0x1, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r6) preadv(r2, &(0x7f000026a000)=[{&(0x7f0000e00000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000e72000-0xdc)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdc}, {&(0x7f000054e000-0x2b)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2b}, {&(0x7f000064d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6d}, {&(0x7f0000c05000-0xba)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xba}, {&(0x7f0000b74000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9d}, {&(0x7f0000c3a000+0x4c5)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000d9b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa3}], 0x8, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000aa5000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00006c8000-0x4)=0xb) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x0, 0x0, 0x0, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x1, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 291.649150] binder: 24650:24652 ioctl 40206417 2003dfe0 returned -22 [ 291.649357] binder: 24640:24642 ioctl 40206417 2003dfe0 returned -22 [ 291.673464] binder: 24640:24663 ioctl 40206417 2003dfe0 returned -22 [ 291.686717] binder: 24650:24665 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x0, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x2756, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 291.710174] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 291.720460] binder: 24680:24683 ioctl 40206417 2003dfe0 returned -22 [ 291.734859] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 291.742675] binder: 24680:24683 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:04 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x6, 0x2) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001000-0x10)={0x1, &(0x7f0000000000)=[{0x3, 0x1, 0x50, 0x8}]}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f70707000", 0x240, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x3, 0x1, &(0x7f0000002000-0xe)={0x77359400, 0x0}, &(0x7f0000001000-0x10)={0x0, 0x0}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000001000)={r2, 0x1}) 2017/07/29 11:54:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x0, 0x0, 0x0, 0x0, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x0, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 291.760939] binder: 24704:24705 ioctl 40206417 2003dfe0 returned -22 [ 291.773521] binder: 24704:24705 ioctl 40206417 2003dfe0 returned -22 [ 291.774231] binder: 24685:24694 ioctl 40206417 2003dfe0 returned -22 [ 291.779590] binder: 24685:24713 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x0, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:04 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000001000-0x8)="2e2f66696c653000", 0x2000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000001000-0x4c)={0x1, 0x1ff, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)="2f6465762f696e7075742f6d6f7573652300", 0x0, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f0000c41000/0x3000)=nil) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = dup(r0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000003000-0x78)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$ipx(r2, &(0x7f0000003000)={0x4, 0x7, 0x9, "5746829a5b11", 0x8000, 0x0}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000003000-0xe)="2f6465762f6b657963686f726400", 0x4040, 0x0) vmsplice(r1, &(0x7f0000001000)=[{&(0x7f0000c43000-0xdc)="2efdd5b6e95920605be98b87bb8aa96f5d068b76196cd12809ea919f573112fa4b1c073532d5a0218705a31fdf45c0471862ba7ff888418bf74bd73bdce8fef59f3958b26a8dfa6f452b75c67b51f45bd45b6feb294f4fcedb7277ec34308766900637273a9dc24cafefc316adb543e461dc0c9e94da3b163ec58ff401ac9170c9a395191255ea84312c6f08c76289640673049f76c307d9cdd10a3b61450636bce424edc6e3758fbe3c9c0208000063b611f557e9ade3c8addb3387d9f43eb985c733a06f40b23217099a709703a66a3430af0f46f589ba2fbdc569", 0xdc}], 0x1, 0x5) 2017/07/29 11:54:04 executing program 4: ioctl$sock_ipx_SIOCAIPXPRISLT(0xffffffffffffffff, 0x89e1, &(0x7f0000c75000-0x4)=0x0) mmap(&(0x7f00004f8000/0x2000)=nil, 0x2000, 0x2, 0x35, 0xffffffffffffffff, 0x12) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0xffffffffffffffff, 0x3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f000041c000-0x5)="7573657200", &(0x7f0000efc000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000ff7000)="866a67b2d0289b4750d915c545", 0xd, 0xffffffffffffffff) getresgid(&(0x7f0000d20000-0x4)=0x0, &(0x7f00001f0000-0x4)=0x0, &(0x7f0000ea7000)=0x0) keyctl$invalidate(0x15, r2) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000fde000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@local={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000059a000)=0xe8) getuid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00007f5000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@broadcast=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000f48000-0x4)=0xe8) keyctl$chown(0x4, r2, r4, r3) r5 = gettid() r6 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xd38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0}, r5, 0xffffffff, 0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0xfc8000)=nil, 0xfc8000, 0x3, 0x31, r6, 0x0) pipe(&(0x7f0000fc7000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f000011c000-0x90)=[{&(0x7f000067e000)="756a1f62a8da0a7c8298897a1a5e697db3847eb9f34a79b41873", 0x1a}, {&(0x7f0000fc2000)="9bf9611089c1007faf0d4df85fa0c3a284aea6d3019f09ffad1cd1e87d20e199bdde5824e9a0ac8340a19360707c360dffda0704fd5916719b995d860a613cde3218b57190b20a7199f84eda3dd722a5d8742ea43a0e216d52452448aeccf9d1fb", 0x61}, {&(0x7f0000bbd000)="3419521f3ceb96faa3ae5863c000306af4a1bd0bf87cd1081da54bb30d4d404fa0afb1663ad3ad5f1854906127a35ae89c91139a9414f208c10bd32501d73f2391c9f05ccf7378e32201bd01227b640f27ea709b197961d662df7850e13f2051f06b69a3cfc2f46b37b20a2015574643bebff0e79503cfa906a1c386c3b71dc61daa7a70016d93cc5e22ad2cb013638e1a58f1523b4f1e432788098ede37ef65452248a8e1ac4ada246020c082b6a96f0420e520fa4c398fb13bd8c875146ca9be0bbb91dd", 0xc5}, {&(0x7f0000f7e000-0x55)="aa614253f961cf407cc3842012652b68df6cfee731aa9ab927a8c8211e44a321568f032729f36e57197ea3a64d7d3e18003c0ed3141a8447164118251a0aa025fdad8cdc418553b24b8d14513da9b6204dff975ab7", 0x55}, {&(0x7f000008b000-0x7c)="ddff7fffffffffffffee30dfe3b0ab992f7c7a31ab3742a2f4bb27af1cd3b8ab939f8d0813e73277c0be629ff06a404dcb14d71bd6bb4aa2d61c83e9c219a870f372ec8fc7b38c75754476c5e2024a9d08d3716de3f457e864af5de31a466740be5deadad73813000705bb90b1d5506eac0ca8e078fec90da2e02403", 0x7c}], 0x5, 0x9) r9 = socket$inet(0x2, 0x1, 0x0) r10 = dup(r9) setsockopt$inet_tcp_int(r9, 0x6, 0x2, &(0x7f0000000000)=0x81, 0x4) bind$inet(r9, &(0x7f0000f02000)={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000f05000-0x10)={0x1, &(0x7f0000115000)=[{0x6, 0x0, 0x0, 0x153}]}, 0x10) lgetxattr(&(0x7f0000fc8000-0x8)="2e2f66696c653000", &(0x7f0000fc8000-0x1)="00", &(0x7f0000a6e000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa5) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000fc6000)={{{{0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x7ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7f}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x9, 0xee88, 0x8, "74cda3f7fb0301707b066ba8ad498699fafc65ec07a8a16dcce4514f5ccdc209217013ae758cdaaf51521fbc0e575775b09414b29f71e5fc1a160c1b21ada065761ba406be932ad4673ad1f1add7e1fd"}, 0x160) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00004fc000)=0x7fe, 0x4) connect$inet(r10, &(0x7f0000987000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) write$tun(r8, &(0x7f0000fc7000)=@pi={0x8400, 0x1, "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"}, 0x1008) splice(r7, 0x2, r9, 0x0, 0x8002, 0x0) syz_open_dev$sndseq(&(0x7f0000f6d000)="2f6465762f736e642f73657100", 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000a14000-0x30)={0x0, 0xfffffffffffffffe, 0x2, 0x5, 0x51000, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 291.816455] binder: 24720:24722 ioctl 40206417 2003dfe0 returned -22 [ 291.816532] binder: 24718:24721 ioctl 40206417 2003dfe0 returned -22 [ 291.822211] binder: 24718:24725 ioctl 40206417 2003dfe0 returned -22 [ 291.844191] binder: 24720:24722 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:04 executing program 3: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffff9c, &(0x7f0000001000-0x8)={0x6}, 0x8) mmap(&(0x7f0000c3e000/0x2000)=nil, 0x2000, 0x3, 0x32, r0, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r1, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:04 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$fuse_notify_store(r4, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r5, 0x0, 0x1, 0x7) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x0, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x2756, 0x0, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00006e6000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) r0 = socket$inet_sctp(0x2, 0x0, 0x84) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000284000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x1000}) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000073a000)="2e2f62757300", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r0, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x0, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") [ 291.911478] binder: 24747:24749 ioctl 40206417 2003dfe0 returned -22 [ 291.914380] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 291.928188] binder: 24748:24752 ioctl 40206417 2003dfe0 returned -22 [ 291.935461] binder: 24747:24749 ioctl 40206417 2003dfe0 returned -22 [ 291.941196] binder: 24762:24763 ioctl 40206417 2003dfe0 returned -22 [ 291.948488] binder: 24762:24772 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x100, 0x0}, {r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x2756, 0x0, 0x0}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x0, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x200, 0x0}, {r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x7, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x0, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) [ 291.951819] binder: 24748:24752 ioctl 40206417 2003dfe0 returned -22 [ 291.971447] binder: 24781:24782 ioctl 40206417 2003dfe0 returned -22 [ 291.975389] binder: 24783:24784 ioctl 40206417 2003dfe0 returned -22 [ 291.979831] binder: 24785:24786 ioctl 40206417 2003dfe0 returned -22 [ 291.986616] binder: 24785:24789 ioctl 40206417 2003dfe0 returned -22 [ 291.997928] binder: 24783:24784 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:04 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6576656e742300", 0x9, 0x44081) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000001000-0x5a)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/07/29 11:54:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x240000) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f0000997000)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f0000d43000-0x4)=0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00002f7000-0x10)={0x0, 0x4, 0x8001, 0x200}, &(0x7f0000a7f000)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000a54000-0x8)={r2, 0x5}, 0x8) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") r3 = openat(0xffffffffffffff9c, &(0x7f0000fa3000-0x8)="2e2f66696c653000", 0x0, 0x8) getsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000d5e000-0x4)=0x9, &(0x7f0000e76000)=0x4) 2017/07/29 11:54:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x2756, 0x0, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x7, 0x200) socket(0x0, 0x7, 0x0) [ 292.001389] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 292.021335] binder: 24781:24782 ioctl 40206417 2003dfe0 returned -22 [ 292.021562] binder: 24796:24798 ioctl 40206417 2003dfe0 returned -22 [ 292.037199] binder: 24796:24798 ioctl 40206417 2003dfe0 returned -22 [ 292.048572] binder: 24799:24800 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:04 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000fb1000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r2, 0x0, 0x200000, 0x0) write(r4, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(r3, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSW(r4, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(r3, 0x0, r5, 0x0, 0x1, 0x7) close(r4) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000087f000)="2f6465762f696e7075742f6576656e742300", 0x2, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") r1 = syz_open_dev$mice(&(0x7f0000c9d000)="2f6465762f696e7075742f6d69636500", 0x0, 0x200) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000ac5000)=@assoc_value={0x0, 0x0}, &(0x7f0000069000)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f000082a000)={r2, @in={{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x49, 0x5, 0x8, 0x100, 0xaf}, 0xa0) 2017/07/29 11:54:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x2756, 0x0, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x6, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x0, 0x84) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) socket$inet_dccp(0x2, 0x6, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000235000-0xe)="2f6465762f6b657963686f726400", 0x400000, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00001da000-0x4)={0x8, 0x0, 0x5}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x0, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 7: creat(&(0x7f000073a000)="2e2f62757300", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r0, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x2756, 0x0, 0x9}) poll(&(0x7f00000c9000-0x40)=[{0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x5, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000073a000)="2e2f62757300", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r0, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:04 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup(0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000252000)={&(0x7f0000153000-0xeb)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xeb}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0xa, 0x0) sendto$inet(r2, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 292.053069] binder: 24810:24811 ioctl 40206417 2003dfe0 returned -22 [ 292.061368] binder: 24810:24811 ioctl 40206417 2003dfe0 returned -22 [ 292.080066] binder: 24799:24800 ioctl 40206417 2003dfe0 returned -22 [ 292.081377] binder: 24820:24821 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x2756, 0x0, 0x9}) poll(&(0x7f00000c9000-0x40)=[{0xffffffffffffffff, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x6, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x0, 0x4, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) [ 292.096940] binder: 24820:24821 ioctl 40206417 2003dfe0 returned -22 [ 292.103388] binder: 24825:24829 ioctl 40206417 2003dfe0 returned -22 [ 292.112294] binder: 24831:24835 ioctl 40206417 2003dfe0 returned -22 [ 292.121854] binder: 24831:24835 ioctl 40206417 2003dfe0 returned -22 [ 292.122247] binder: 24825:24829 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f000073a000)="2e2f62757300", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r0, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) poll(&(0x7f00000c9000-0x40)=[{r2, 0x20, 0x0}, {r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x6, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) 2017/07/29 11:54:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x2756, 0x0, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x0, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x6, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f00000c9000-0x40)=[{0xffffffffffffffff, 0x100, 0x0}, {0xffffffffffffffff, 0x200, 0x0}, {0xffffffffffffffff, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {0xffffffffffffffff, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) [ 292.142435] binder: 24855:24858 ioctl 40206417 2003dfe0 returned -22 [ 292.144242] binder: 24852:24859 ioctl 40206417 2003dfe0 returned -22 [ 292.144897] binder: 24855:24858 ioctl 40206417 2003dfe0 returned -22 [ 292.154200] binder: 24852:24859 ioctl 40206417 2003dfe0 returned -22 [ 292.202910] binder: 24868:24872 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:04 executing program 0: mmap(&(0x7f0000000000/0xfc7000)=nil, 0xfc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00008f3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f000025b000-0x10)={0x1, 0x2, 0x4, 0x9}, &(0x7f0000001000-0x4)=0x10) r2 = eventfd2(0x0, 0x0) write$fuse_notify_store(0xffffffffffffffff, &(0x7f0000012000-0x28)={0x28, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x0}, 0x28) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x200000, 0x0) write(0xffffffffffffffff, &(0x7f0000fc6000-0x5f)="835029538815d80e6edf1e3d82d3e75297cb6689a7466e855b61f1e5092d873021d6d0d9a47228187a5ecaa45e3f6ec03f850975eaebbd7460090fd9474d229eed0b9a5136c2c05231512e51cd8a90db0e5218d9fef989e83277ca780fddb19667d9d20cab741a991f1fdd09bcc8459633cbe507ea76b77aff1abeffbb980779803fca7978c85a4c52a3fe0e564a7b7e68fa0f5fea44a6092d91acf4c723c17bd9a6b32ca80be87de35ded14a8111e7db37392fb7578c531a2aedf0ca5c04379", 0xc0) readv(0xffffffffffffffff, &(0x7f0000fbf000-0x50)=[{&(0x7f000040e000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000093f000-0x13)="00000000000000000000000000000000000000", 0x13}, {&(0x7f00003cd000-0x3)="000000", 0x3}, {&(0x7f0000fbf000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x63}, {&(0x7f0000a82000-0x20)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}], 0x5) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000fc5000)=0x1, 0x4) pipe(&(0x7f0000fc3000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSW(0xffffffffffffffff, 0x5402, &(0x7f0000fc5000-0x24)={0x100, 0x8, 0x36, 0x6, 0x0, 0x80000000, 0x5, 0x3, 0x3, 0x401, 0x8, 0x80000001}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x1, 0x7) close(0xffffffffffffffff) read$eventfd(r2, &(0x7f0000c63000+0x9e5)=0x0, 0x8) 2017/07/29 11:54:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000c66000-0xe6)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:04 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) r1 = dup(r0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000000)={{{{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x81, 0x7, 0x2e, "11844a5ad7fe01babc9e3f85a2e0fd51b9aeda134b8e618763a12aee6f15ca3962a9d456ed66872def41811ccf3cb816467f62c259eaa97e94fab663f297e494d420ae8cf34b48b345a3a004a1c46c2f"}, 0x160) r2 = getpgid(0xffffffffffffffff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000002000-0x20)={0x0, 0x4, 0x0, 0x200, r2}) sendto$inet(r0, &(0x7f0000001000-0xc)="", 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000002000-0x34)={{0x3, 0x3, 0x5, 0x3, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_cancel(0x0, &(0x7f0000b7a000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x6, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x12) r0 = syz_open_dev$vcsn(&(0x7f00002cd000-0xa)="2f6465762f7663732300", 0x40, 0x400c0) recvfrom$inet6(r0, &(0x7f0000b4a000)="", 0x0, 0x40000003, &(0x7f0000ab6000-0x1c)={0xa, 0x3, 0x40, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x8, 0x3) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000fa4000)={0x0, 0x0}) pipe(&(0x7f0000b14000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f00006b1000-0x10)={0x0, r2, 0x20000000001001}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000e84000)={r2, r4}) sendto$inet6(r1, &(0x7f000017f000)="097e9ac640399049a16fae5341a13464ac7d53c6182152015a3340a9c28b0282cbca52abd3095d06eecd2b0b7bd713202260e6a349eabb3181f682b09f6d519cb2bc9dcafe888d10c702a8578e9d052512bf36bfa24dc3a36881091cce1ee7fa82a8c015c261c3f20c787965b42ef6296073375145e17f058963", 0x7a, 0x3, &(0x7f0000bff000-0x1c)={0xa, 0x2, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5}, 0x1c) get_thread_area(&(0x7f0000e06000)={0x4, 0xa7, 0x2000fffffffc, 0x7f}) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000fd9000)=0x0, &(0x7f00002de000)=0x4) mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = epoll_create1(0x0) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000120000-0x8)={0x42424242, 0x42424242}, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = epoll_create1(0x100000000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000005000)={0x0, 0x0}) r8 = epoll_create1(0x0) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x3, 0x110, r6, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000015000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000005000)={0x10000000, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000011000)={0x8, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000f02000-0xc)={0x40002005, 0x0}) r9 = socket$inet6(0xa, 0x3, 0x6) timer_create(0x6, &(0x7f0000c54000)={0xb, 0x0, 0x4, @pad=[0x1000c, 0x4, 0x800000003, 0xcb, 0xb5b, 0x100, 0x7, 0x8]}, &(0x7f000087f000)=0x0) [ 292.217692] binder: 24868:24872 ioctl 40206417 2003dfe0 returned -22 [ 292.230074] binder: 24876:24881 ioctl 40206417 2003dfe0 returned -22 [ 292.241664] binder: 24876:24881 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x2756, 0x0, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x0, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x5, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) poll(&(0x7f00000c9000-0x40)=[{r0, 0x100, 0x0}, {r0, 0x200, 0x0}, {r0, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r0, 0x18b, 0x0}, {0xffffffffffffffff, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) 2017/07/29 11:54:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40206417, &(0x7f000003e000-0x20)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) poll(&(0x7f00000c9000-0x40)=[{r0, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r2, 0x18b, 0x0}, {r1, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x5, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000073a000)="2e2f62757300", 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000b3d000)="2f6465762f6b657963686f726400", 0x2002, 0x0) write$tun(r0, &(0x7f000026a000)=@hdr={0x1, 0x0, 0x0, 0x2, 0x0, 0x2, ""}, 0xa) openat$ptmx(0xffffffffffffff9c, &(0x7f0000ce5000)="2f6465762f70746d7800", 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, &(0x7f0000fdd000)={0x0, 0x0, 0x0, "71756575653000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000100000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/07/29 11:54:04 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) 2017/07/29 11:54:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x2756, 0x0, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x0, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x4, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) 2017/07/29 11:54:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) poll(&(0x7f00000c9000-0x40)=[{r1, 0x100, 0x0}, {r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x8, 0x200) [ 292.291954] keychord: using input dev AT Translated Set 2 keyboard for fevent [ 292.292006] binder: 24891:24898 ioctl 40206417 2003dfe0 returned -22 [ 292.298782] binder: 24891:24898 ioctl 40206417 2003dfe0 returned -22 [ 292.311858] binder: 24896:24904 ioctl 40206417 2003dfe0 returned -22 [ 292.324397] binder: 24908:24911 ioctl 40206417 2003dfe0 returned -22 2017/07/29 11:54:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f000003e000-0x20)={0x4, 0x0, 0x0, 0x2756, 0x0, 0x9}) poll(&(0x7f00000c9000-0x40)=[{r1, 0x0, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x3, 0x200) socket(0x0, 0x7, 0x0) 2017/07/29 11:54:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00002d6000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000cb4000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_cancel(0x0, &(0x7f0000056000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000ca3000)="", 0x0, 0x0, &(0x7f0000603000-0x50)={0x0, 0x0, 0x0, @pad=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0xffffffffffffffff}, &(0x7f0000a20000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f00004bb000-0x4)=0x0, &(0x7f00004d9000-0x4)=0x4) socket$inet_sctp(0x2, 0x0, 0x84) r1 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x1007e, 0x0) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f000000a000)={0x80000000, 0x1, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f000000a000)="2f6465762f696e7075742f6576656e742300", 0x800000001007e, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f000000a000)="") 2017/07/29 11:54:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$binder(0xffffffffffffff9c, &(0x7f0000b07000-0xc)="2f6465762f62696e64657200", 0x0, 0x0) poll(&(0x7f00000c9000-0x40)=[{r1, 0x200, 0x0}, {r1, 0x20, 0x0}, {0xffffffffffffffff, 0x8000, 0x0}, {0xffffffffffffffff, 0x41c, 0x0}, {r1, 0x18b, 0x0}, {r0, 0x240, 0x0}, {0xffffffffffffffff, 0x80, 0x0}], 0x7, 0x200) [ 292.337743] ------------[ cut here ]------------ [ 292.343289] WARNING: CPU: 1 PID: 24922 at lib/list_debug.c:36 __list_add+0x169/0x1c0 [ 292.358717] list_add double add: new=ffff8801befa9fe8, prev=ffff8801befa9fe8, next=ffffffff84832ea0. [ 292.363101] binder: 24896:24931 ioctl 40206417 2003dfe0 returned -22 [ 292.379641] binder: 24932:24935 ioctl 40206417 2003dfe0 returned -22 [ 292.388987] Kernel panic - not syncing: panic_on_warn set ... [ 292.388987] [ 292.396366] CPU: 1 PID: 24922 Comm: syz-executor7 Not tainted 4.9.40-ged32335 #11 [ 292.403749] binder: 24932:24948 ioctl 40206417 2003dfe0 returned -22 [ 292.410415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 292.419746] ffff8801cabe79d8 ffffffff81d8d829 ffffffff83a46b40 ffff8801cabe7ab0 [ 292.427744] ffffffff83c16c00 ffffffff81df4c99 0000000000000009 ffff8801cabe7aa0 [ 292.435747] ffffffff81429671 0000000041b58ab3 ffffffff841835f0 ffffffff814294b5 [ 292.443732] Call Trace: [ 292.446298] [] dump_stack+0xc1/0x128 [ 292.451642] [] ? __list_add+0x169/0x1c0 [ 292.457248] [] panic+0x1bc/0x3a8 [ 292.462233] [] ? percpu_up_read_preempt_enable.constprop.53+0xd7/0xd7 [ 292.470427] [] ? vprintk_emit+0x3ad/0x750 [ 292.476187] [] ? __list_add+0x169/0x1c0 [ 292.481777] [] __warn+0x1c4/0x1e0 [ 292.486845] [] warn_slowpath_fmt+0xc4/0x110 [ 292.492781] [] ? __warn+0x1e0/0x1e0 [ 292.498023] [] ? mutex_lock_nested+0x870/0x870 [ 292.504218] [] __list_add+0x169/0x1c0 [ 292.509632] [] input_register_handler+0xa0/0x150 [ 292.516027] [] keychord_write+0x582/0x820 [ 292.521797] [] ? keychord_read+0x510/0x510 [ 292.527653] [] __vfs_write+0x103/0x680 [ 292.533175] [] ? default_llseek+0x290/0x290 [ 292.539139] [] ? __might_sleep+0x95/0x1a0 [ 292.544907] [] ? __inode_security_revalidate+0xd9/0x130 [ 292.551925] [] ? avc_policy_seqno+0x9/0x20 [ 292.557785] [] ? selinux_file_permission+0x82/0x460 [ 292.564432] [] ? security_file_permission+0x89/0x1e0 [ 292.571149] [] ? rw_verify_area+0xe5/0x2b0 [ 292.577005] [] vfs_write+0x170/0x4e0 [ 292.582332] [] SyS_write+0xd9/0x1b0 [ 292.587571] [] ? SyS_read+0x1b0/0x1b0 [ 292.592997] [] ? trace_hardirqs_on_caller+0x38b/0x590 [ 292.599812] [] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 292.606360] [] entry_SYSCALL_64_fastpath+0x23/0xc6 [ 292.613358] Dumping ftrace buffer: [ 292.616902] (ftrace buffer empty) [ 292.620581] Kernel Offset: disabled [ 292.624182] Rebooting in 86400 seconds..