4a1459d9ae4e6ce1ad7cce432f437870f9527b0987149116a12121133e4ec2246c5824f92f9817aff3994db653a372b19c761c36d698ae7aa7ac896c4cc1381821c7ad30ca44ce423da6c958caca3823eefb04f399b341ac377fc0d92f9bc61dc8a11e780e326a4db2d7e013cf2", 0xca}, {&(0x7f0000fb5000)="17c3259e7e9a31dd2be097bac43387799ae8dab783f237b8f187b2994f4a83870183e7764b289a14fa5d943cf3e360582d145dd41125ee4a4a05eb50d7da31726aa937af19af36bfaa2db23be396cd9fe8cdae3ec046e9746600016f6805ef6c669aa5b1", 0x64}, {&(0x7f0000131000)="bbe53773fb2b259fa259dde50742d66eb087fa0cbca4ba412d7e95e1b72186e197b8a9e45a06d9a6008adb39d1187874f373c1a69e6a78969af4f9fc6b18301bb87948ec42c3cf0a06f2bd4b23d903b6e48300f7ff9a0ac8ac0073a1023f8ab72f", 0x61}, {&(0x7f000045e000)="b999330eab2b0ff2b5123492343451bf48bfe95b5eba58f8b263dd024cffb02cad8e1923f951cb65a75958", 0x2b}], 0xa, 0xffffffffffffffff) 2017/12/01 20:56:46 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f72746300", 0x100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$bt_sco(r0, &(0x7f0000001000-0x8)={0x1f, {0x7a53, 0xb, 0x2, 0x3ac50c8c, 0x6, 0x6}}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x804b8) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000e15000)={0x0, 0x0}) close(r2) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f000046c000)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f00002f6000-0x4)=0x8c) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00005dc000)={r3, 0x7, 0x4, 0x6}, 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000c9c000)={0x0, 0x1}, &(0x7f000031f000-0x4)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000294000-0xc)=@sack_info={r3, 0x80000000, 0x0}, 0xc) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00007a1000-0x28)={@common="69726c616e3000000000000000000000", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000384000-0xc)={r4, @multicast1=0xe0000001, @broadcast=0xffffffff}, 0xc) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) umount2(&(0x7f0000f9d000)="2e2f66696c653000", 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000540000-0x28)={@common="62707130000000000000000000000000", @ifru_ivalue=0x1}) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4018641b, &(0x7f0000878000)={&(0x7f0000000000/0x1000)=nil, 0x9, 0x4, 0x9, &(0x7f00002bb000/0x2000)=nil, 0x6}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) openat$autofs(0xffffffffffffff9c, &(0x7f00001a0000-0xc)="2f6465762f6175746f667300", 0x20000, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00004c5000)=0x44284fd7, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00007dc000-0xa)="2f6465762f6375736500", 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000e92000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000c31000-0x4)=0x3f) r1 = epoll_create(0x7) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) close(r2) socketpair(0x1, 0x4, 0x8001, &(0x7f0000692000-0x8)={0x0, 0x0}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f00003d9000-0x9)="2f6465762f76637300", 0x101001, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f000028d000)=0x8492, 0x4) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setns(r1, 0x40000000) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) fcntl$getownex(r2, 0x10, &(0x7f0000d5f000)={0x0, 0x0}) ptrace$pokeuser(0x6, r3, 0x0, 0x100) bind$inet6(r1, &(0x7f0000531000)={0xa, 0x1, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7bb}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000033b000-0x8)="2e2f66696c653000", 0x200, 0x10) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000c66000-0x48)={0x1, 0x0, [0x8, 0x2, 0x80, 0x10000, 0x7, 0x7, 0x45d, 0x81]}) r1 = syz_open_dev$sg(&(0x7f0000963000-0x9)="2f6465762f73672300", 0x80, 0x10000) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000fa4000-0x4)=0x0) r2 = creat(&(0x7f0000422000)="2e2f66696c653000", 0x191) ioctl$KVM_NMI(r2, 0xae9a) getpeername$ax25(r0, &(0x7f00005bd000)={0x0, {"00000000000000"}, 0x0}, &(0x7f00007c1000-0x4)=0x10) execve(&(0x7f0000f35000)="2e2f66696c653000", &(0x7f00001f3000)=[&(0x7f000008c000)="5d4000", &(0x7f0000268000)="776c616e31255c287472757374656400", &(0x7f0000d2f000-0x1)="00"], &(0x7f0000bf5000-0xc)=[&(0x7f000074b000)="00", &(0x7f000055a000)="62646576757365722400", &(0x7f0000104000)="2e6d696d655f74797065406d696d655f747970656b657972696e676574683173656c696e757863707573657426402f6367726f75707573657200"]) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000f81000-0x4)=0x0) process_vm_readv(r3, &(0x7f000027b000)=[{&(0x7f00006cd000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000047b000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2d}, {&(0x7f0000042000-0x4c)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4c}, {&(0x7f0000443000-0xa8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa8}, {&(0x7f0000772000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd2}, {&(0x7f000075f000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x6, &(0x7f0000776000-0x8)=[{&(0x7f0000459000-0x9d)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9d}], 0x1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000a68000)="6e65742f7463703600") syz_extract_tcp_res(&(0x7f0000094000-0x8)={0x0, 0x0}, 0x81, 0x1) sendfile(r4, r4, &(0x7f000023d000)=0x17, 0x5) ioctl$sock_bt_bnep_BNEPCONNDEL(r4, 0x400442c9, &(0x7f0000e5c000-0xa)={0x3, "e91761f27362"}) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f000095e000-0x8)=[0x20, 0x2]) 2017/12/01 20:56:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 0: syz_open_dev$mice(&(0x7f000029e000-0x10)="2f6465762f696e7075742f6d69636500", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f000012f000-0xf)="2f6465762f736e642f74696d657200", 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f00002f0000)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00007e6000-0x34)={{0x100000001, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001d000-0x50)={0xfefffffffffffffc, 0xb, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000b2a000)=[{&(0x7f0000950000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3b}], 0x1) dup2(r0, r0) 2017/12/01 20:56:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) getsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000ebf000-0x8)={@remote={0x0, 0x0, 0x0, 0x0}, @multicast1=0x0}, &(0x7f00009df000)=0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(r1, 0x400, 0x1) 2017/12/01 20:56:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r2, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a45322, &(0x7f0000f97000)={{0x0, 0x0}, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) sched_yield() ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) execve(&(0x7f0000598000-0x8)="2e2f66696c653000", &(0x7f00005a1000)=[&(0x7f0000ac2000-0x1)="00", &(0x7f0000818000-0xa)="2f6465762f7663732300", &(0x7f0000293000-0xa)="2f6465762f7663732300", &(0x7f0000750000-0xa)="2f6465762f7663732300", &(0x7f00000f9000)="2f6465762f7663732300", &(0x7f0000b8b000)="7d6d643573756d73797374656d00", &(0x7f00001ca000-0x2)="5d00"], &(0x7f0000949000)=[&(0x7f0000fdb000)="2f6465762f7663732300", &(0x7f0000fa0000)="73797374656d402d00", &(0x7f0000b6f000)="2f6465762f7663732300", &(0x7f0000d85000)="2f6465762f7663732300", &(0x7f0000fed000)="21ed00", &(0x7f0000b5a000)="2f6465762f7663732300", &(0x7f00009e2000-0xa)="2f6465762f7663732300"]) pipe(&(0x7f000029e000)={0x0, 0x0}) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) socket$kcm(0x29, 0x5, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00003d9000-0x9)="2f6465762f76637300", 0x101001, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002000-0x9)="2f6465762f6b766d00", 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f000072f000-0x70)={[{0x6, 0x5ba, 0x8, 0x80, 0xffff, 0x9b6, 0x9, 0x2, 0x5, 0x1058, 0x8, 0x1, 0xcf2}, {0x6, 0xfffffffffffffffc, 0x0, 0x1d, 0x5, 0x4, 0x4, 0x1000, 0x74b, 0x9a, 0x7, 0x8, 0x2}, {0x7, 0x7, 0x0, 0x69, 0x7, 0xffff, 0x50, 0x3, 0x0, 0x4, 0x3bef, 0x8000, 0x81}], 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f000069f000)={0x4, 0xffffffffffffffff, 0x1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000c25000)={0x0, 0x8, 0x7, 0x200, 0x0}, &(0x7f0000000000)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000001000-0x4)=r3, 0x4) 2017/12/01 20:56:46 executing program 1: r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f000048f000)={0xfffffffffffffffa, 0x0, 0xc4}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:46 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000f61000)="2f6465762f6877726e6700", 0x0, 0x0) getsockopt$SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000273000)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$peek(0x8000001, r1, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f00005f1000)=[0xde, 0x1]) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f00000b6000)=0x6) timer_create(0x7, &(0x7f000042e000)={0x0, 0x12, 0x200000, @thr={&(0x7f0000e00000-0xf5)="61ed2af823789dcd2d7de776ab712ec764e2a87ce26a2e612ef07b3e1b5f1ecbd619bad3d76ef5464f2b7d68a4fe899ca9e834125be5dad50cebc0dcc806b2e9db94b564d7d752804f00b777309beb77b8e25ca076dc7446d71498a64e09008493f1eeed561a85a7ccb3c7b9752bb4e6bcbc35f5bc139f7909cefc6ab275a49ea11dfb983ba06608a357de315c7b0fddaa7e480afa0485ca9b3a04a9568b56c020d0440cbef825f7408ab94cba1ff14df3900d80bd86bcf2d8c26e1e9af11a1ca74adb0b9a8716e75e790b5481aa978fcfdcc249fdaf2e5a935a8d90b5ab27c1d9c7314f8bc38e894d7c7b40c830e00b326bc4787a", &(0x7f00007fd000)="a42ed6044e8bdaa01d628d681f8a01880691df"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000049d000+0x961)=0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000e9a000-0x11)="2f6465762f7161745f6164665f63746c00", 0x400000, 0x0) getrusage(0xffff7fffffffffff, &(0x7f0000131000-0x48)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_gettime(r2, &(0x7f00004b6000)={{0x0, 0x0}, {0x0, 0x0}}) clock_gettime(0x4, &(0x7f0000b77000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000cc5000)={0x0, 0x0}) timer_settime(r2, 0x20000, &(0x7f000092e000)={{r5, r4}, {r6, r7+30000000}}, &(0x7f00004f4000)={{0x0, 0x0}, {0x0, 0x0}}) timer_gettime(r2, &(0x7f00005da000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000402000)=0x3) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000455000-0xe0)={0x0, 0xd7, "38551a14849ff026d30b594bf9d5c9b2240c602f5628de753affb3279cbc22988c808b7a3bba4ab5331997539dd144882e146a98e8ca74ad8fd26f96c289197c00091e6d51154131e4082f1b40b94ec077a088e59d62e781472ab18c0a4a43bf78726eae9b967098670eddfb07228e8d6bd8c412f7b877658fb72b3a90680618e472dc0905a3378d4ede1a4667ad7dc232bce1c3268dba2d8d829ce2f16d7d7104a177cc2ab7ed89a69f737fe79a7b6ac65f170ccdb25346ae357da00708da67e0508c2de8d03c683a618e6915eb0b4d8c6385dfca8f35"}, &(0x7f000063b000)=0xdf) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000f27000-0x8)={r8, 0x2}, &(0x7f0000c58000-0x4)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000cb9000)={r9, 0x7}, 0x6) r10 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r0, r10, 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f000099a000)=0x9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r11 = perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000d77000-0x30)={0x8, 0x2, &(0x7f00001ac000-0x18)=[@generic={0x84, 0x0, 0x3f, 0x0}, @generic={0xd395, 0x0, 0x0, 0x29d}], &(0x7f0000b4d000)="737973654f00", 0x7, 0x80, &(0x7f0000199000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0}, 0x30) ioctl$sock_bt(0xffffffffffffffff, 0x5411, &(0x7f00001b4000-0x41)="a914c9cbcaea5bd1cfee8e42378bccf1ba52a58051c32bb8794e30d49a82fae35b19ac60d18e43ef40fc64267942233e6f0c7c47dcbd2ea6975ffe7f8e5e774ce5") close(r3) open(&(0x7f0000e58000-0x8)="2e2f66696c653000", 0x0, 0x0) socket$inet(0x2, 0x80003, 0x4) pread64(r11, &(0x7f00005ac000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x60, 0x0) syz_emit_ethernet(0x62, &(0x7f0000957000-0x62)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x800, @ipv4={{0xc, 0x4, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[@cipso={0x86, 0x11, 0x100, [{0x7, 0x2, ""}, {0x1, 0x9, "73521587c9d0d5"}]}, @rr={0x7, 0x7, 0x5, [@multicast2=0xe0000002]}, @end={0x0}]}}, @icmp=@dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x9, @broadcast=0xffffffff, {[]}}, "0d16ac755321d492"}}}}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$sndtimer(&(0x7f00008be000)="2f6465762f736e642f74696d657200", 0x0, 0x2) 2017/12/01 20:56:46 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000bdd000-0xb)="2f6465762f6877726e6700", 0x101002, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000973000-0x8)={0x100000000, 0x1000}) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000047000-0x20)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00005bb000-0x10)={r0, 0x28, &(0x7f0000476000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000481000-0x4)=r1, 0x4) r2 = epoll_create(0x804b8) r3 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r4 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000bf6000)={0x0, 0x0}) close(r3) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) fdatasync(r4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000eea000-0x108)={0x0, @in6={{0xa, 0x0, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x791c}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x4, 0x2, 0x401, 0x6fa, 0x400, 0xfb, 0x5, 0x6, 0x9, 0x5, 0x80000001, 0x7, 0x6, 0x81, 0x0]}, &(0x7f0000de5000-0x4)=0x108) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00003de000)={r5, @in={{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100, 0x10001}, 0x98) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f00009d9000)={0x0, 0x0, 0x0}, &(0x7f00003ae000)="", 0x0, &(0x7f00006de000-0x2c)={&(0x7f0000ed6000)={"6469676573745f6e756c6c2d67656e65726963"}, &(0x7f00009ee000)="", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000fee000)="2f6465762f7161745f6164665f63746c00", 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000f20000)={@multicast2=0x0, @multicast1=0x0, 0x0}, &(0x7f0000267000-0x4)=0xc) 2017/12/01 20:56:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000cfd000-0x8c)={0x0, @in6={{0xa, 0x0, 0x3f, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x99a8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000f31000-0x4)=0x8c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000292000-0x8)={r3, 0x101}, 0x8) openat$vcs(0xffffffffffffff9c, &(0x7f00003d9000-0x9)="2f6465762f76637300", 0x101001, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) pwritev(0xffffffffffffffff, &(0x7f00006a0000)=[], 0x0, 0x0) ioctl$KDSETLED(r2, 0x4b32, 0x8) 2017/12/01 20:56:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x100) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00006a0000)={{0xa, 0x1, 0x6, @loopback={0x0, 0x1}, 0x101}, {0xa, 0x0, 0x2, @loopback={0x0, 0x1}, 0x2}, 0x8, [0x4653, 0x80, 0x4, 0x7fffffff, 0x3, 0x7f, 0xfffffffffffffffa, 0x3]}, 0x5c) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:46 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f00003e8000-0xa)="2f6465762f7663732300", 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000002f000-0x78)={0x0, 0x78, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0}, 0x0, 0x0, r0, 0x0) r1 = getpid() getpgid(r1) perf_event_open(&(0x7f00003a8000)={0x2, 0x78, 0x2c, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4000000000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000599000-0xd)="2f6465762f7573626d6f6e2300", 0x80000001, 0x40) mmap(&(0x7f0000000000/0xae6000)=nil, 0xae6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2c000)=nil, 0x2c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000382000-0x4)=0x1007f, 0x4) bind$inet6(r3, &(0x7f0000c9e000)={0xa, 0x3, 0xd800, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00002f9000)={0x1}, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000f77000-0x8)={0x0, 0x281}, &(0x7f0000a7f000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000d40000)={r4, 0x1000, "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"}, &(0x7f0000340000)=0x1008) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000b2b000-0x6)={r5, 0x1}, &(0x7f0000267000-0x4)=0x6) r6 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r6, 0x11, 0x1, &(0x7f000027d000)=0x9, 0x4) sendmsg$inet_sctp(r6, &(0x7f000085a000-0x1c)={&(0x7f0000e74000)=@in={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000629000)=[{&(0x7f0000db9000)="9003d516d5e2df8f445189d0aaa4a1fa1c5a87781d4b78f8357df04222819aee62bab926b4dfb9dc3271afffc07bef642b16e808368056277320e25a9a323a7a37aad3329a8f37a08ca0b5e71f38d44b9b9e3ab2f09c817e4d6cceda2325fcbf8ee4cd337af704627784d1b1c3fdba4b9903bc16cdea29fcc8f5de9423d8872465e018231b886154afa98eab6d5d57096ef7f48a6bf8125f399f07cc39fa2bf724b4bfb01ae11f94ecbf2bef2f51b217cfac53e6101f34b1b14fee9d718a087906eb3fa15368a7fff658b7b0c6f7f16fa05da03e7b61303570b8d49746788706fb5571e671e4f3c3142769c4e0303580f07a54b2ce584284e2d266f7f6162bf8c85cfc63c3cd356fcc7bd21c8aaa65453363f7a1d0b81ad12535ddf4878dec3e39bdf941e1bf27983a109d35c2e662f7a97ebd2c484b3a4cb8b0c4d7c6752a06bd6203debed3dc56945581bfb161d80506f21d8b9ca53a6b8aa6fe55acf9b0743f8a9ad2a42511815b89b0fbed44f540844d49a1a7efb4084225db2dafea02d104ff038c51054bbb25cb8aca61499425b92045aa709fbaf92acfa632a744ec4262214ca350d2c3c6c0e122a10b048b5abe57484faf233d60f838307c318adda54f4a57124e0f1873f06b2be1947ae04157c8597bb1ad6e54c68dd03600d73b94aecccca5e2ae2c27ad2100e74a48663910d17d5da59aa6ee6f83c4041351f9332d2893aaa4a284ca3abad9a53631784b03f9bee6387b3174b43475ad5d53d6e8af7099d1bb6a3c32b52eb5fd497f5cab595273615a22e2dc85ed6f71216c28d62bb1e8773a2af251b10fb4d79fa5c1fb3e3aa6216e4a8f6e10d871c226c37e6809dc09f26e7b357ebd1476a8fa4df3cdcec702b71d1d1e47fe4bcbd37d873357fa3d73fd8060cbe77af1249ba99e4f2de7ec083a0ca72cbedb082525fd9bc3ccd08c53e03aa8404799e0b7c56a7c9088e09cd33c3fd25110328fbc46c708c3193e8b8bc247b485b4e5c9e9f479ecd676a90b6024fc770ce069cfff4eb91c9f46216feb750313021efd55393d9358e0a98ca256389df40e66c7b5ed3ae176408aeecf81973fc42e92ae9a73f355c669c8df810fa4cad953361929574a303eab7f37439b114ee07b28cc6be43ca44fc276454fae1533eba0aceb89c5fc76d0865801ca39e4464de6f703efb250a257ec18518063b6cf7dafd4231707aaedca9e8a573b9e6aefa3ba5ceae2f4fb6d8b09b2cc007edaaa894d5bb49a09fe36e68b2d8ac809e47745b558579c818ebadf7edcd5b769bc49bbac83983ec9eb10d3a50d90eacbc60ee9fec0145cc7d686d6a0cabfed18ef857413cbed983663bf1bf1d0137b6f78625154ac99e38aa98bbc484767872d32b1fcbcc8dac0f699df7bbedb76ad97b22a483232acf39960984e425867671a5b15be0c2deda487e182809a43cbd845a70a60bbce47ea57f93e6cd0fee2361f31bb7c2527cbdf17a57e336cb81336935db3e24d44a2440aecc51080034790be4dbfbd3541b59ca2e514dfe4714212f590c35f134eceec701045dc0a96297e28df7fec3c557ac8f3c6a29b8a1a41e52b08595447ea8ffdbd3edc6616a2841621d7e520176f906090514f4374b92265d23944e6bb02896998527d9392e480fd2a630659213b46c70da2fae2b6a98ebe2ea4e73b0c5e934c156991d1cfe348360b3a119d580e99851eee9a053faaa7c8df876abbf3d1df644130b1b2e8c09715328d96809853f865b70830be144384db85ad927de436bafe5c9f382ea9a5c77fe7a45956060d3ad21997fb5b1b12e4ba4754035605a60ea46af25d13097be09e1485795c71ee5e03301e0202860e8a6df967e541310bf1b4d3919155aa15c4735b90d5c0c3b613a193c4096457a1723306c260c2db3396efda353df5897013994a9285d1c6da03bc2651868667f866ab1667a4ae7febf0eebc498d0b646a9b5089f5e1ad8b6113e747ee7d88e54de51f2770b76149e4da759c34a111baba09d07b0524e493a68b4f650e2304eb93afb9e270b1ed50252bf918affae6fb072af274fe21971030759af703332f5c261fe6a0faddcbfa42f18d818c7aa4b70bab25a28a10b716a76be96278173cdf7388a0f9a9d24cd9f0ef79f371e7ae9beafbee98ce693f007c7584ea6c73dd3c39909346f68d57171a6a02a8a06d9c26dafffda9cdc91721f23f4408290d4fe31cf64f1777d7cd080bd2e9adbbdb4b49ed95b79faa63a2090bcbe74db20d4f3021c25c2685d808f26faaad012b124bbcbe098d8e1b806df0c9d71ed05cb6d7385448594055f341a00dc45bb565be5685492f85dcd1e4cad54aca07933a7cf9c477a12eae3dd72ef22da61dd40dfefd8b2ddea36ce72deca2ff817c5ab0148583fdccfe613e6538336192fc5fabeb2d9a1511d799625dee42cbed1ebfba4b85003ced55fbce5369819f2d33d9d3694ad1e03d40bd861bf53a8ba382dfd0d0ee5ed9717d5ee771ccb9a011043be00baa215f71b3040003f48720b7fc1ced539e582aa82992800a759d94c98aed7b3e42c184709bcd5793e566b09f88f043a5ad46cda3df841488bce801578074b9dcf60f7b3228ddadf77020017189f1dd7af08ecec81a65322747d9c30a288785e1b6f5f8a0aa007fdcdf162c41c345fd872e5da17950e292718613fe6e42102d6fc05219f35ddfbab1652fff11f579b76744640fb628ecc21216d5c6ff9d992590260e89ebfcbf83fd9be405cf39e1dd71559ffd60e465cda9082039ee5bb297a59ef596961791e6102b12371db94ee531522600c1273e3d10ddd932b9a9674cc6afef9c8c764adc7bdfca95877521565b4f97b7ff64b174e765da150040b780e28aa967a9ec8283cb047345ef77135ee4f73dd0195323b6ed5319b219cfac16d44ea5821d1d28b4171aa6132fc08d21ab9a69e06a1196ab228e28583e21156ae85cb8f1f3456995cc9e6454eab9f88cf6bb69971b2bd1affad1600f7a64fad98b16da89bc61e9ce7128c44e47f595fb621ef0858ce6a08dd7f4f9802eea63b39aae095d9e231dabaa93785342766c1e7d53dd48690ad4b787ba7001e8beb05502b131fac755d250641c21a1ae4c50a674c147d1e51182978bef0a8eb3d065f4282e14a88befffe63b99d2f757beb8696edef23ef0d76c8427b139d792d31f0c3cb69b56869ef92307e528a43a4ce4e4468b2690cb3ab3220b6d0d70b25b822053e67c755a6c4cdf618a655b925af1cb05658776660b2be7bbff6605414f22fe8c7e0d4fa7b2b681a42f1f07d1d98af79bd58b93d718eb7c1d99bad4460894f76b7d7ba6202798b2a05d19cbda1df1e5594635296f512ddb61863e755826990336171bda4a202cd4a482f1180c97524e77e34083b34ee1f3440ebd8ed93470d33e23a36021593e34733ea599091e2e0860e07bac3d2337a5689294cfd3b73048148cce0f7146b8cc27a8bbe18ad99b2b45917ffa152d88fa983edf2cc936d2325c6abae87be5905f76a11c4b52f9ceed2286cf8df86d81716c4e97403a68ec282ac1f7e69cd0911dea57b04acc0c8b8650a0c6527e73610c39ddac2742d371750a5414118d8abeb1bdf073dcaa9438f376f2e4dc5ac03af5e781c453b745f1976afbfc1e8df8f13b12ce3684bf8f355350b27fce77e6f0c65f7e62d9b0392651a78b71170922f4665be82f4149685ef04602347a0bd29c80177b72190c919ed37002aedf16f1d5f8dfd4cb2eed6c847dfb74e8342e6ed61928be340ae8b8ad269d1d655da1dc03f90dea21ec4f67551c6ea7030d71b70461c29b96e3ba1e89166518d26ef2a7b80444cde77f89cc4426037e24ea3b42f6b29d87b8364685b32741201a3b5cfefcf9235c8c27215e3134504df046cf1c73685370214a36b6ac689b2ce46eb016192c04e5a2dab6a6866a7b070960f1708719d85a5998097d618d38829a8da851c3c5285b7e5a749279e6365226f92310224aa0c87f26ad0f8861228a9a70cb5aa7758fb9791c126fae60755d3aecf6fa7c19ed4ba5c858de9c710aec08056c700af8ab87229c25951d6cdccd1b3d52bd4500d36858e19ccc88b2d7c2788fe757b1fe0a7dd60474fd5da338f87915ea41d991f846da0d7d0f6a10fc08c390e7e4f07b4948c506e372b049fc28b03d758c582093c7be68f5e35ec199ea4e24350a6aa5bedc677100ab04e25d9a4242c01f82198a824340a522cf7a3e1e596f0b67179a348e9fc4cd99d42a0a82a3ce8a3df14008e0eb665c92327058f3ad11a00d50e6a6f8092a6964bf0c4916d92292e8bb81be99b57591e6ee9bf64a167aa7aa3daec1933ce472a5a8a61fb77db0ba304c5b040787479146c5d651f13ba1dfb46f98ebbc14d1207bfdabe8f11893dd4dcb13c427fab384ff97d9216d43d6bd871767719d9672d4e365ed12d03e8779cd7c43d558af646f970a28c0f1dfa9c7106f02f046450376d5c0ffa4bc9fd250224d9980cfd18d4a6694c89f3417070ddc7dec5f2eca999db263bbc37cd63a77d7aa4ffaab21763f09c457d46d40ba606af3b409c20808d054d4a5c4ce6459f6d18a822030f574039e7f75e50c7a5833961862ed56b030ac2aa0caee275387dee28140586999887d7abf714770df44aa8d36ff2b29cc3acdb1aea1185b011fc9a56e13823ddbc449f27b24251c85ccc94aecff4fa6193e41d50df2191b3552bd9d5dda3679c9836925cdeac73af3d9aeb7296fb8902fa9a6c37b162341370abd521cc2090d074a88cce498d7cd60c9a9f779cff96601b05a0b6913e02bce344644a1efc1ca36a0ef35719d6fad5ee7d83c93a49e53b224f7e97e417be7ea02b9ea5a0fcb6f6df213fe37e28a3f2c6a2df797dc53f9ebe3fdf9c60a25d9210d018af66a3805f6227839246ea7cc8243ab81cf56d71d48470b5d75a125f0ab9277a56ac71c61a4a5d45906ac683c5d4cb1a8d095fff7356a716042b76d5e2165990d2710a8c8632d40163a9dd3b2b73a6cce5dcb881e707cfa2dc4bb99f8ae55d103aec9c6ea92c21d2c73488b66803629334b2cefeaaedc704dd4d8bf685e46eb4b64778292e6bf6111504c11738a40bad5379169d63e971c3d4fd86c6a087d17a0f7314fa3f68b3cd833d309d152d7170e39c3bb133870af47d92eafb1eff2b265793869aedc939748a7605df7a676de83f36383feaea84698dc9055ed5d1917249897ac269b446abdbfcf32b688cab6288246ccdf418e6e10aa20d4a2d20ab8f80b5c034dad70e395d2e87868afde9519f16707ce77cb05de26363ee653fb1127c4a4af8782b8df16853692049973a3e7a85a0d61651a7b9558aa68070fad6efe415064d0857fd00628e2ec85652e4117f9873f726101e0a4d1fe19a9ec2f12171e5877a994b086bf849929d9b20ebfc4b7b78bcff26316f2d13716f0c07708b4b56c5de55eb17befc3bae43ac192dd04ad52cd33c292e902dc3f7364fb68223b1590fb025ebb12dcaf97484cafb30b4d9f235b1cdec43deb7a4b2e0bf01b7d8621bc0096d782632a6bff4a347db83d9f64c8de82ed1d69a53bc17b924a64133b5e2add4d8118cd1383a3ca48c70bd040935128dbd04107e5d3e31169c0461dd3eb8c54d429c95a52a882ed346c7b0231c804c205fd077b4da8b214479df6233609b3323d6f6701777c96e39ccd2c37a4cc63f862ab79a15d57001d7d07535dfef673ca7b547818b277e2e995723ca506db944a4fb4837897114ebb0d9266b83781328d3695da3a041279ca9bed97b0e26ef575bff1a00dfc60a989d56c2a", 0x1000}], 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000df8000-0x4)=0x0) open$dir(&(0x7f0000361000)="2e2f66696c653000", 0x80, 0x62) ppoll(&(0x7f0000d2d000)=[{r6, 0x40, 0x0}, {r3, 0x1000, 0x0}, {r2, 0x20, 0x0}, {r3, 0x0, 0x0}, {r3, 0x22, 0x0}, {r2, 0x9180, 0x0}, {r3, 0x1000, 0x0}, {r3, 0x2008, 0x0}], 0x8, &(0x7f000076f000)={0x77359400, 0x0}, &(0x7f000052e000)={0x8}, 0x8) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000342000-0x4)=0x1f, 0x4) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000e85000)=0x0, &(0x7f0000167000)=0x4) recvmsg(r3, &(0x7f0000ee2000-0x38)={&(0x7f00004d4000-0x6)=@hci={0x0, 0x0, 0x0}, 0x6, &(0x7f0000c30000-0x8)=[{&(0x7f0000303000-0x9b)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9b}], 0x1, &(0x7f0000ab3000)="", 0x0, 0x0}, 0x20) r7 = syz_open_dev$loop(&(0x7f0000e9c000)="2f6465762f6c6f6f702300", 0x0, 0x801) ioctl(r7, 0x1, &(0x7f0000608000-0x3)="b73900") ioctl$DRM_IOCTL_VERSION(r2, 0xc0246400, &(0x7f000052f000)={0x72, 0x7fffffff, 0x2, 0xa2, &(0x7f0000272000-0xa2)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x24, &(0x7f0000361000)="000000000000000000000000000000000000000000000000000000000000000000000000", 0x7c, &(0x7f0000828000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) setsockopt$packet_buf(r2, 0x107, 0x1, &(0x7f00003f1000-0x5)="752ca7a937", 0x5) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000b16000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2017/12/01 20:56:46 executing program 0: modify_ldt$read(0x0, &(0x7f00004c1000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000704000-0x9)="6e65742f69676d7000") ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40086410, &(0x7f000011d000)={0xb0, &(0x7f0000906000)="39ab1c89eabb98cfba1d58434fe20f631079eb19173a0a85672e24a393d7c8af097de78b265d1b55a757e3aed6459ba6b5b39a6e5ec722402a8e3e1ce6015b20b9483316a1af0afa99966dd228c557dd24ede8cc4b9e75170c62e459e5efefe86e755fc59435792a3946c6126cba54f0064905393ddadc03979e2e794cdbbb442557b4c50de3cd3cb8547b38dbfece5beb6407457d24f91de5a0c9ef28e739b55e51941056c7c78f94d9fafbe47c5372"}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000c3f000)="2e2f66696c653000", &(0x7f0000001000-0x8)=@random={"62747266732e00", "00"}, &(0x7f0000d01000)="62646576766d6e65743000", 0xb, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000001000-0x8)=@req={0x28, &(0x7f0000002000-0x28)={@generic="05b1bab654937fe301aed410f7ac22a5", @ifru_names=@common="73697430000000000000000000000000"}}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000002000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000002000-0x3)=0xe8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000002000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, r1}, 0x14) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000001000-0x8)={0x9, &(0x7f0000003000)=[{0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}, {0x0, 0x0, 0x0, "000000000000", "00000000000000000000000000000000"}]}) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000001000)=0x0, &(0x7f0000004000)=0x4) ioprio_get$uid(0x3, r2) fchmodat(r0, &(0x7f0000002000)="2e2f66696c653000", 0x84) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$inet(r0, &(0x7f0000006000-0x10)={0x0, 0x0, @loopback=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000003000)=0x10) socket$kcm(0x29, 0x7, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001000)="2f6465762f73657175656e6365723200", 0x0, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000006000)="00000000000000000000000000000000000000000000000000000000") mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000008000-0x4)=0x62, 0x4) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(r3, &(0x7f0000009000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000002000)=0x14) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000007000-0xe8)={{{@in=@empty=0x0, @in6=@loopback={0x0, 0x1}, 0x1, 0x7fff, 0x3, 0x10000, 0xf, 0x80, 0x80, 0x2, r4, r2}, {0x3f, 0x5, 0xb1, 0x1, 0x3, 0x6, 0x7, 0x6}, {0x0, 0x5, 0x7, 0x4}, 0x7, 0x7, 0x2040e15f, 0x1, 0x10, 0x1}, {{@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x2, 0x7}, 0x10, @in=@multicast2=0xe0000002, 0x6, 0x6, 0x2, 0x1, 0x3, 0xc171, 0x8}}, 0xe8) 2017/12/01 20:56:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create(0x804b8) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000378000)=0x5, 0x2) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000f87000)=@assoc_value={0x0, 0x0}, &(0x7f00003ce000-0x4)=0x8) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f000007d000-0x4)=0xfff, 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f000050b000)={r2, 0xdd, "61690db39d529ad72a944891b1bd6c92b117977b979eb90771852c5fb95870bbc8f4fe1fae6fc295e285f1f130abe9e98c95f08dc1c71fe24785042cc590f80407a92335e874c6f20d2267020dcdf88e68d2e3260f97329f3b43c0d89512c84a2ad69866cc0a16d7870c1c8620d9f4a4541a8bab312b43903faa94f031fb1ae32a26a270f8414217dc881733f4c8b14b6efe5344553e6c2552a976dfaa35d5eddb54b85adf3be7f722125e19be58737a01279a09d4bb1efde3813ccb862043de02a538d560fc07f2bbbe718b2d335c072a70fd3d12e9cfde0465ddd6a9"}, &(0x7f0000349000-0x4)=0xe5) openat$cuse(0xffffffffffffff9c, &(0x7f0000c82000)="2f6465762f6375736500", 0x2401, 0x0) r3 = memfd_create(&(0x7f0000ed8000)="00", 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00005aa000-0xe8)={{{@in=@multicast2=0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in=@multicast2=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000ffd000-0x4)=0xe8) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000aa4000-0x10)={r4, 0x1, 0x6, @random="861054a0f86d", [0x0, 0x0]}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000bf6000)={0x80002000, 0x0}) close(r1) chroot(&(0x7f0000494000-0x8)="2e2f66696c653000") ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) syz_open_dev$sndseq(&(0x7f0000aac000)="2f6465762f736e642f73657100", 0x0, 0x180) 2017/12/01 20:56:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_keyring_id(0x0, r2, 0x48c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00009d7000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r3, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000c79000)=0x7, 0x4) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ioctl$VT_ACTIVATE(r1, 0x5606, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000f96000-0x4)=0x0, &(0x7f000065b000-0x4)=0x4) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) clock_gettime(0x0, &(0x7f0000509000-0x8)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000af1000-0x8)={r2, r3/1000+10000}, 0x8) 2017/12/01 20:56:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f00003d9000-0x9)="2f6465762f76637300", 0x101001, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) r2 = getpgrp(0xffffffffffffffff) r3 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r4 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r4, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r3) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000396000-0x10)={r6, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r8 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r8, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f000055d000)={r7, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) modify_ldt$read(0x0, &(0x7f0000b20000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69) sched_setparam(r2, &(0x7f0000dce000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x553, 0x100000000, 0x0, 0x31c36ff4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) mkdir(&(0x7f0000acd000-0x8)="2e2f66696c653000", 0x10000000100050) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0}, 0x10) mlock(&(0x7f0000aba000/0x3000)=nil, 0x3000) setsockopt$inet_int(r0, 0x0, 0x37, &(0x7f0000a3d000)=0x1, 0x4) socket$kcm(0x29, 0x7, 0x0) 2017/12/01 20:56:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000e80000-0xe8)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@empty=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000033b000-0x4)=0xe8) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 6: r0 = creat(&(0x7f00003fc000-0x8)="2e2f66696c653000", 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001000)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000000)="706b6373375f7465737400", &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f00001ef000-0xa6)="8c59fdab12fc52aaeb46d5bd41bad793be30c3d4673248af8607fc27a28d7b6836d840a1627494ac4f78ae6b68fb469869ab2e31ddc77babdd409d4261faa4265d3d02c3298759000374aeeaad6ca5972938925cd4dd22c19e88826d00866ba3676c2f1bf2f2bab31846c6be4af860350b3beddaabf60e6ef467b1c29e298dff61dead1b5eab2fe97ec7acee93f5aac4f9b1bc0911b930a20fa7542f615e837c36506c7e201c", 0xa6, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000abb000-0x98)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}, &(0x7f0000f31000-0x4)=0x98) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000cda000-0x12)="120000001600e7ff00ffe90009149b00f99b", 0x12, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000d02000-0x38)={&(0x7f0000d02000-0xe)=@l2={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe, &(0x7f0000336000-0x70)=[{&(0x7f0000c5a000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x42}, {&(0x7f0000a9d000-0xea)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xea}, {&(0x7f0000389000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69}, {&(0x7f000040f000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f00002e8000-0x55)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x55}, {&(0x7f0000fbd000)="", 0x0}, {&(0x7f0000e32000-0x26)="0000000000000000000000000000000000000000000000000000000000000000000000000000", 0x26}], 0x7, &(0x7f0000a5e000)="", 0x0, 0x0}, 0x0) r3 = signalfd(r2, &(0x7f0000e56000)={0x4}, 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000c5b000-0x8)={0x6, 0x10001, 0x80000001, 0x1ff}, 0x8) recvmsg(r2, &(0x7f0000973000)={0x0, 0x0, &(0x7f00002a1000)=[{&(0x7f00009e8000+0xca9)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x3a}, {&(0x7f0000a6a000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x2, &(0x7f00002cb000-0x42)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x42, 0x2007f}, 0x0) write(r2, &(0x7f0000e80000)="22000000120007d30e00000000000a000c150009000007190000000004000806da0641", 0x23) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000f1a000-0x5c)={{0xa, 0x1, 0x1f, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1f}, {0xa, 0x2, 0x81, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x100000001}, 0x2, [0xffffffffffffffc1, 0xffff, 0x20, 0x5, 0x8, 0x1ff, 0x401, 0xfffffffffffffffb]}, 0x5c) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000ee0000-0xc)={r1, 0x9, 0x30}, 0xc) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00005e2000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000c8a000)="2f6465762f7667615f6172626974657200", 0x0, 0x0) pkey_mprotect(&(0x7f0000ca7000/0x1000)=nil, 0x1000, 0x1000004, 0xffffffffffffffff) poll(&(0x7f000059c000-0x8)=[{r3, 0x1212, 0x0}], 0x1, 0x11402) readv(r2, &(0x7f0000c8b000)=[{&(0x7f0000aef000-0xee)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xee}, {&(0x7f0000203000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4c}, {&(0x7f000014d000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x30}, {&(0x7f000022d000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000ff0000)="00000000000000000000", 0xa}], 0x5) mount(&(0x7f0000cd8000)="2e2f66696c653000", &(0x7f00003b6000)="2e2f66696c653000", &(0x7f00000e3000)="51616d667300", 0x800, &(0x7f0000dc9000-0x2)="01c1") bpf$OBJ_PIN_PROG(0x6, &(0x7f00009ab000)={&(0x7f0000f67000-0x8)="2e2f66696c653000", r4}, 0xc) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000d79000-0xa)="2f6465762f6375736500", 0x50000, 0x0) ioctl$int_in(r5, 0x5473, &(0x7f00002d8000-0x8)=0x6) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000f82000)=0x0) poll(&(0x7f0000897000)=[{0xffffffffffffffff, 0x1024, 0x0}, {0xffffffffffffffff, 0xc212, 0x0}, {0xffffffffffffffff, 0x4018, 0x0}, {0xffffffffffffffff, 0x411, 0x0}], 0x4, 0x7f) [ 240.709071] audit: type=1326 audit(1512161806.417:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8997 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 240.734420] audit: type=1326 audit(1512161806.418:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8997 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 2017/12/01 20:56:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000355000-0x108)={0x0, @in={{0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x1, 0x9, 0xb5d, 0x9, 0x3f, 0xd3d, 0x7, 0x8, 0x2, 0x8001, 0x100, 0x6, 0x1, 0xa19]}, &(0x7f0000c99000-0x4)=0x108) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000076a000-0x8)={r2, 0x7ff}, &(0x7f0000d1f000)=0x8) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000585000-0xe8)={{{@in=@broadcast=0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000082e000)=0xe8) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00003af000-0x4)=0xa9a) sendmmsg(r0, &(0x7f00002e2000+0xca1)=[{{&(0x7f0000368000-0xc)=@nl={0x0, 0x0, 0x8, 0x4}, 0xc, &(0x7f0000460000-0x18)=[{&(0x7f0000ac8000)="e827c07c8cbb39945ce2a0925a7048db0994bb4325262bf4ee24968cf6983b6e21a5c9f9b46897d47fb8a64448e30f4204b79ac616fde3c28d3e890b5e1eb13ba6dd6f7e2da358622f3f92d74a2e1b792246e08641dd3cfd3c73a1f0e4b03d2a899ac614acb5087202664218920779175315d337c403a79c9186cd55af54a3499a4af678cd58622093b752575a806dad5403ccc5382c1e02dfbee2e51798f7394e773c5c910a111af84856660ad3cbd8d9eeec9c148caa41b6a2060e5098e1788569dfc70386aa83d0365352d958bb419651eb6fb11f26c5c600a56cc6208c4f8ab9761328576d86bc37f172fc956119f568fe00eb7f0498", 0xf8}, {&(0x7f00004ca000-0x33)="a9527de1a4189cac2bf174e4f815daab1bcf287cd1a4ec033d0c544042d502a2ecc207e6216e5236c067d1cd6648a1caf884d2", 0x33}, {&(0x7f00009c0000-0x4)="257b9b5140a6cd54605ef3099d", 0xd}], 0x3, &(0x7f0000977000)=[{0xf4, 0x111, 0x6, "4328fc8a274a43e1a1c1f7c2e941ccb06595b48141981baf46452141d78bf35bb49a6ade6e170e1ccdfca998f4c547c3d6ce4e9924efeb8aa078b38f15a1b82a1ebc61775423f818c78ab94008e9119639a826811d1da222aafb60394fcdf4217690b32dcb2d1eced44b84f558b4b1c01824ade552e0c3c301fe07c664312e9c65c6764e9f5cd77797a18bb9396a464011ce354768cf70ae5c3c0681d4e431ca0d76a8641e0c86e73ea8289fb50f7bc44a1756157324102aa6dc78c43d28bfa7c545b2d37ca66097e56aa13812fab76369c8d4044c000276a6dffc4dff70f438de4a9f002a10d9c9"}], 0xf4, 0x20004000}, 0x3}, {{&(0x7f0000a1f000)=@ll={0x11, 0xff, r4, 0x1, 0x5, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14, &(0x7f00007d5000-0x10)=[{&(0x7f00003dc000-0xeb)="0e1bf54023c8da6d41af2751275020849770aef1a80a51155759f842a027307de732bcb8fa1a595e4f39c2833e713b0e6b3f81e6250ed3ac4a1765ce5bccac45c175e605d56723ddd2cbbfd2a63521ea1ebbba5b5b4e529ff20295a6830c5d4bf58093bc944f301c18cda820ca85cb9b6e50f166884820d0b11b5e01c6a9fcd4786212def64cc355cd0f6ff2d75fc02d95c5b441babc7aed1d65660c0688af10bb3fc7c4d24377fb9905add561a22e365611ea31217d2a6a6d41cb6d8c52015f55107656dd7af4163c12fcbf72f3bf93ea9e2b201ab319367af79dccd6e85c359034710893d9f7fab7a91c", 0xeb}, {&(0x7f0000154000+0xba6)="fb470c97474587fbcc31d05a9a050ba4cf71a7773e8e05d1cd0b705ea7952b9c666c02659e642cade77d7bb185432a22bc71da9f0ea99c0537bf6ce4c175f8c0b7ec2da13d4356e876830564e03332d055814e968ba4872e8bb0817da211ce869900d96189018ebc40e3cdef7432cb831281011f321ca03917f28131238411da0a224ce7b20b91936df0a038911084db773a03fcc2f14651cf38002471a55c0dc83007006ddc7783983c8dc0abaa4423ee796602d3e127d2704529cf0787b7d72071f6613809ed4a3862854cf944baf08f7b3172334c60b1d6103c1be98e07e02af5a721eaf19d7a5b1e83a6b1", 0xed}], 0x2, &(0x7f00004d8000-0x40)=[{0x40, 0xff, 0x4, "b0591faace334f7c8cefdd8995fff5ff6f010f1a8b48cd3447017a0159a33f65df56882e05fbdee53a8a93336b3c7b86d5"}], 0x40, 0x8000}, 0x6}], 0x2, 0x40408c0) readv(r3, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) fsync(r3) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) [ 240.734436] audit: type=1326 audit(1512161806.418:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8997 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 240.734450] audit: type=1326 audit(1512161806.418:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8997 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 2017/12/01 20:56:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) r2 = getpgrp(0xffffffffffffffff) r3 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r4 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r4, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r3) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000396000-0x10)={r6, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r8 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r8, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f000055d000)={r7, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) modify_ldt$read(0x0, &(0x7f0000b20000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69) sched_setparam(r2, &(0x7f0000dce000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x553, 0x100000000, 0x0, 0x31c36ff4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) mkdir(&(0x7f0000acd000-0x8)="2e2f66696c653000", 0x10000000100050) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0}, 0x10) mlock(&(0x7f0000aba000/0x3000)=nil, 0x3000) setsockopt$inet_int(r0, 0x0, 0x37, &(0x7f0000a3d000)=0x1, 0x4) socket$kcm(0x29, 0x7, 0x0) [ 240.734464] audit: type=1326 audit(1512161806.418:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8997 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 240.734477] audit: type=1326 audit(1512161806.418:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8997 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 240.734491] audit: type=1326 audit(1512161806.418:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8997 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 240.734505] audit: type=1326 audit(1512161806.418:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8997 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 240.734518] audit: type=1326 audit(1512161806.418:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8997 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 240.734532] audit: type=1326 audit(1512161806.418:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=8997 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 240.793891] netlink: 2 bytes leftover after parsing attributes in process `syz-executor6'. 2017/12/01 20:56:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = open(&(0x7f00001a4000-0x8)="2e2f66696c653000", 0x2, 0x20) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00007ba000)={{0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20, {0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f0000efa000+0x349)={0x40000000, 0x453, 0x2e}) r1 = epoll_create(0x804b8) fremovexattr(r1, &(0x7f000028c000-0xf)=@random={"6f73322e00", "6d696d655f7479706500"}) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r3 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f00003d9000-0x9)="2f6465762f76637300", 0x4180, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) pwritev(r2, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000c31000-0x90)={[0x3, 0xff, 0x5ec32908, 0x101, 0x2, 0xbacd, 0x800, 0x8001, 0x6, 0x800, 0x3, 0x6, 0x2, 0x3, 0xfffffffffffffffa, 0x12], 0x7002, 0x4800}) 2017/12/01 20:56:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) r2 = getpgrp(0xffffffffffffffff) r3 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r4 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r4, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r3) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000396000-0x10)={r6, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r8 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r8, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f000055d000)={r7, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) modify_ldt$read(0x0, &(0x7f0000b20000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69) sched_setparam(r2, &(0x7f0000dce000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x553, 0x100000000, 0x0, 0x31c36ff4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) mkdir(&(0x7f0000acd000-0x8)="2e2f66696c653000", 0x10000000100050) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0}, 0x10) mlock(&(0x7f0000aba000/0x3000)=nil, 0x3000) setsockopt$inet_int(r0, 0x0, 0x37, &(0x7f0000a3d000)=0x1, 0x4) socket$kcm(0x29, 0x7, 0x0) 2017/12/01 20:56:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x0, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000278000/0x3000)=nil, 0x3000}, 0x1, 0x0}) getpeername$unix(r0, &(0x7f0000e84000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f0000d8e000-0x3)=0x8) readv(r1, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) [ 240.793933] netlink: 2 bytes leftover after parsing attributes in process `syz-executor6'. [ 240.852094] netlink: 2 bytes leftover after parsing attributes in process `syz-executor6'. [ 241.001849] netlink: 2 bytes leftover after parsing attributes in process `syz-executor6'. 2017/12/01 20:56:46 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:46 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_init1(0x80000) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) sendmmsg(r1, &(0x7f00006c6000)=[], 0x0, 0x4000000) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 6: r0 = perf_event_open(&(0x7f000020e000-0x78)={0x5, 0x78, 0x3, 0x3, 0x2, 0x401, 0x0, 0x1, 0x40400, 0xe, 0x4, 0x3, 0x6, 0x1e, 0x0, 0x1, 0x2, 0x3, 0x6, 0x4, 0x2, 0x6, 0x4, 0xc0, 0x9, 0x6f, 0x0}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x6) fchdir(r0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000242000-0x11)="2f6465762f7161745f6164665f63746c00", 0x0, 0x0) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000bc3000)={0xfffffffffffffffc, 0x1000, 0x7, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00008f9000-0xa)="2f6465762f6375736500", 0x10000, 0x0) perf_event_open(&(0x7f0000198000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000cad000-0x58)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_open_dev$binder(&(0x7f0000001000)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) accept4$packet(r1, &(0x7f0000914000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f000009d000-0x4)=0x14, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)="00", 0x0, 0x0, 0x0}, @ptr={0x77622a85, 0x1, &(0x7f0000008000-0x8e)="00", 0x0, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0, 0x28]}}], 0x0, 0x0, &(0x7f0000009000)=""}) mmap(&(0x7f00004ed000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f00003d3000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r1, 0x540f, &(0x7f0000554000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f000017a000)=0x0, &(0x7f0000207000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f0000001000-0x38)=[{&(0x7f0000000000)=@file={0x1, "2e2f66696c653000"}, 0xa, &(0x7f0000000000)=[{&(0x7f0000ece000)="f4c72af5684512580d36aa98fe1a967de972362da3264892aaccfdbf8ce6f5a8cb04abc9192898f7112a435c", 0x2c}], 0x1, 0x0, 0x0, 0x20000000}, {&(0x7f0000c13000)=@abs={0x0, 0x0, 0x0}, 0x8, &(0x7f00002cf000-0x20)=[{&(0x7f0000001000-0x62)="8973d115d5877784115d5f18fb452410456420c830404870435b4293ee0b53b979d4a9ee05a160f64d7db711cab4b8732afce3dcc53b9ae911f1770537628c8105b726335bc21edcb0a43b38d4bb63e86f309151e0503047f7deadf338b4e45ab63d", 0x62}, {&(0x7f0000000000)="01f22147725d7414dd69df57ab8237749ae99f2a2e27ff0ff1aff051abcfd67607deeeb3e2d3a1cc649adee3a7e772fbb4a0dd4aa7ed", 0x36}, {&(0x7f0000770000-0xd9)="0feabeadab2247ece744d0430919f4902487f35b7cf02801bc62b08bbec697bf9bb8deb74365032d9e634c10458c0245c5aad960b067e8b403bec85f425395d480a45b90b50e1b43854dd807796fdb69ce68e82b4c47efe61875100b4b9ab10f503effab662567d3f8ee78ffe33fbae0adb4ceab18468d2ddd00a47cd726597737451c1a2902aa72de0d0eaf6217e9cbe0290e345ae8c14a7ee5bc517e1b31daf00257539e58041155a38723880ed0cc11b54ed0359602df4443d1563d329caf1de9e43a25f2f41a357cf779069fcbdaee054d2a02b150dd21", 0xd9}, {&(0x7f0000000000)="e5a599fe7497163783e886853c1f44689d27c9d834927951a925592562f177b03b82dba26a0a1d960e75bf1664da738fce12e3393b8b41ecfaad174e49744362485af968bbcd3a76b120a3cacf525d8546269e44f6f7fa773b1eb0f742be2f78f831d54f79351b9b91f7dc172833f739366cca8e8b187cb4f45d", 0x7a}], 0x4, &(0x7f0000001000-0x18)=[@cred={0x18, 0x1, 0x2, r5, r6, r7}], 0x18, 0x0}], 0x2, 0x80) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00001eb000-0x30)={0x50, 0x0, &(0x7f000016e000)=[@release={0x40046306, 0x2}, @release={0x40046306, 0x0}, @acquire_done={0x40106309, 0x0, 0x0}, @request_death={0x400c630e, 0x0, 0x3}, @increfs={0x40046304, 0x2}, @acquire_done={0x40106309, r4, 0x4}], 0x2b, 0x0, &(0x7f00004ec000)="07ee6f13962dd40b9cfe66556376e46a3c4fc1de87d73e91868143595df991a159b89d270476de6cfd343a"}) mmap(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00001f3000-0x30)={0x6c, 0x0, &(0x7f000044c000-0x6c)=[@dead_binder_done={0x40086310, 0x2}, @free_buffer={0x40086303, 0x0}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x20, &(0x7f00004ec000)=[], &(0x7f0000460000-0x20)=[0x28, 0x28, 0x40, 0x0]}, 0x4}}, @decrefs={0x40046307, 0x1}], 0x5a, 0x0, &(0x7f000002b000)="7cd27effc294985894da5ff180bb447df494cfb9725c8deabc5731a3506a0e4bc8bedf48522c0e3f6cbc6f742281e89745b22c051c369217ced272a7088ff7cbb17b9d198f032f56026b584fcafa7c87bd04626a3b9e225f96a8"}) 2017/12/01 20:56:46 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) openat$vcs(0xffffffffffffff9c, &(0x7f00003d9000-0x9)="2f6465762f76637300", 0x101001, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 3: r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) r2 = getpgrp(0xffffffffffffffff) r3 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r4 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r4, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r3) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000396000-0x10)={r6, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r8 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r8, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f000055d000)={r7, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) modify_ldt$read(0x0, &(0x7f0000b20000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69) sched_setparam(r2, &(0x7f0000dce000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x553, 0x100000000, 0x0, 0x31c36ff4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) mkdir(&(0x7f0000acd000-0x8)="2e2f66696c653000", 0x10000000100050) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0}, 0x10) mlock(&(0x7f0000aba000/0x3000)=nil, 0x3000) setsockopt$inet_int(r0, 0x0, 0x37, &(0x7f0000a3d000)=0x1, 0x4) socket$kcm(0x29, 0x7, 0x0) 2017/12/01 20:56:46 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:46 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000d11000-0x8)="2e2f66696c653000", 0x40, 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000e72000)={0x0, 0x8f, "9764760d67c65939b4e2711afbe183d5cc558d7a621faae2fb6732d45e47b3ecf3b98226136a4d0d8ca60631a535275b81eab7e71adf8370ac5daaf6d25e5648f36650e542e65395fac4b0ecaae449f5254337ab52386ee7cb6bc7e96abea41270c62daefa697a284d82f7fc744aa8547af437095018fd51bdcba562de97f0506575f55dcd8f69b8e5fdb1c385de92"}, &(0x7f000061b000)=0x97) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000f81000)=@assoc_value={r1, 0x6}, &(0x7f0000542000-0x4)=0x8) r2 = epoll_create(0x804b8) r3 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f000082e000-0xc)={0x6, 0xdf8d, 0x2df}) r4 = memfd_create(&(0x7f0000ed8000)="00", 0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000bf6000)={0x0, 0x0}) close(r3) ioctl$KVM_IRQ_LINE_STATUS(r4, 0xc008ae67, &(0x7f0000d00000-0x8)={0x7, 0x3000000000000000}) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) r5 = gettid() getpgrp(r5) 2017/12/01 20:56:46 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000f9e000-0x10)=@generic="244baf43436be3c3e296c9ffdd4ad5b4", 0x6}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00009c6000)=0x3, 0x4) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) [ 241.156153] binder: tried to use weak ref as strong ref [ 241.161698] binder: 9058:9063 Release 1 refcount change on invalid ref 2 ret -22 [ 241.179939] binder: 9058:9063 Release 1 refcount change on invalid ref 0 ret -22 [ 241.179959] binder: 9058:9063 BC_ACQUIRE_DONE node 425 has no pending acquire request [ 241.187137] binder: 9058:9063 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 241.187164] binder: 9058:9063 BC_ACQUIRE_DONE u0000000020007f72 node 429 cookie mismatch 0000000000000004 != 0000000000000000 2017/12/01 20:56:46 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2100000003, 0x10000000003) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000003, 0x2) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000019000-0xc)={0x0, @multicast1=0xe0000001, @empty=0x0}, 0xc) r2 = syz_open_dev$tun(&(0x7f0000e9b000+0x18a)="2f6465762f6e65742f74756e00", 0x0, 0x20001) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000a5b000-0x28)={@common="67726530000000000000000000000000", @ifru_names=@generic="4f54000cc0a1ed4f3a0a1fdc222073b5"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f00004df000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe9, 0x442, &(0x7f00004ce000-0x10)=@in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f00009c7000)=0x80000000) r4 = add_key$keyring(&(0x7f0000d0d000)="6b657972696e6700", &(0x7f0000834000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key(&(0x7f0000f26000-0xa)="626c61636b6c69737400", &(0x7f0000ded000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000794000)="6173796d6d657472696300", &(0x7f00006f3000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) keyctl$set_timeout(0xf, 0x0, 0x0) mount(&(0x7f00009ae000-0x8)="2e2f66696c653000", &(0x7f000061f000)="2e2f66696c653000", &(0x7f00008f8000-0x6)="737973667300", 0x0, &(0x7f0000e2f000)="") r7 = syz_open_dev$tun(&(0x7f0000bc1000-0xd)="2f6465762f6e65742f74756e00", 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00001d7000-0xc)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_UNIQUE(r8, 0xc0106401, &(0x7f0000d55000)={0xdf, &(0x7f0000476000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00006b0000-0x28)={@common="67726530000000000000000000000000", @ifru_map={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00007ff000)={@common="67726530000000000000000000000000", @ifru_addrs={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r9 = socket$inet(0x2, 0x8000000000000003, 0x2) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000939000-0xc)={@multicast1=0xe0000001, @local={0xac, 0x14, 0x0, 0xaa}, 0x0}, 0xc) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000a27000-0x2c)={@multicast1=0xe0000001, @rand_addr=0x5, 0xfffffffffffffffc, 0x4, [@loopback=0x7f000001, @remote={0xac, 0x14, 0x0, 0xbb}, @empty=0x0, @empty=0x0]}, 0x20) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000fde000+0x10d)={0x0, 0x4, 0x7ff}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common="67726530000000000000000000000000", @ifru_flags=0x301}) write$tun(r3, &(0x7f0000baa000)=@hdr={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr=0x0, @multicast1=0xe0000001, {[]}}, @udp={0x3, 0x0, 0xcd, 0x0, "1966a1e7cbe33323ab3b08386194e7ca4082ad0821c56c7b51d8aa5ef4ee9e849e6cbe0c61278b70186ab315966a79fafdad3f9c726454a51e9572a8650a92e685dcaabd32505be7c8502e3e0736297bec671250dec5eb6354a1c59d6fa7a4fe42cad372e6d2a89b8e185fc3c7021adaa2f450e20c38ef7b64d6a67646ba0895f51bcfe56a52a5ed2aa1eeda9c324f3ca2ce24537b3e1701270359765ff157811e079a885b9c50366c73b3666db7019a28ffe27954afd3bf8f294bfc909237827deb778c22"}}}, 0xeb) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000097e000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x400, 0x0, 0x2, 0x2, 0x80006, 0x1ffc, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000e83000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x400, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) [ 241.213935] binder: 9058:9063 BC_DEAD_BINDER_DONE 0000000000000002 not found [ 241.213948] binder: 9058:9063 BC_FREE_BUFFER u0000000000000000 no match [ 241.213957] binder: tried to use weak ref as strong ref [ 241.213962] binder: 9058:9063 got transaction to invalid handle [ 241.213972] binder: 9058:9063 transaction failed 29201/-22, size 0-32 line 2755 [ 241.239916] binder_alloc: binder_alloc_mmap_handler: 9058 20000000-20002000 already mapped failed -16 2017/12/01 20:56:47 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) r2 = getpgrp(0xffffffffffffffff) r3 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r4 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r4, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r3) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000396000-0x10)={r6, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r8 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r8, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f000055d000)={r7, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) modify_ldt$read(0x0, &(0x7f0000b20000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69) sched_setparam(r2, &(0x7f0000dce000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x553, 0x100000000, 0x0, 0x31c36ff4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) mkdir(&(0x7f0000acd000-0x8)="2e2f66696c653000", 0x10000000100050) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0}, 0x10) mlock(&(0x7f0000aba000/0x3000)=nil, 0x3000) setsockopt$inet_int(r0, 0x0, 0x37, &(0x7f0000a3d000)=0x1, 0x4) socket$kcm(0x29, 0x7, 0x0) [ 241.241430] binder: BINDER_SET_CONTEXT_MGR already set [ 241.241439] binder: 9058:9082 ioctl 40046207 0 returned -16 [ 241.244395] binder_alloc: 9058: binder_alloc_buf, no vma [ 241.244420] binder: 9058:9063 transaction failed 29189/-3, size 80-16 line 2870 [ 241.250121] QAT: Invalid ioctl [ 241.263752] binder: undelivered TRANSACTION_ERROR: 29189 [ 241.264119] binder: release 9058:9063 transaction 426 out, still active 2017/12/01 20:56:47 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:47 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000646000)=0xd000) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00009f5000-0x4)=0xf45e) 2017/12/01 20:56:47 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) getpeername$ipx(r1, &(0x7f00003eb000)={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f0000abf000-0x4)=0x10) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000eb5000-0x4)=0x0) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) [ 241.264125] binder: unexpected work type, 4, not freed [ 241.264129] binder: undelivered TRANSACTION_COMPLETE [ 241.264135] binder: undelivered TRANSACTION_ERROR: 29201 [ 241.264181] binder: send failed reply for transaction 426, target dead [ 241.345291] device gre0 entered promiscuous mode 2017/12/01 20:56:47 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:47 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) syz_open_dev$vcsa(&(0x7f0000c00000-0xb)="2f6465762f766373612300", 0x1, 0xc0080) 2017/12/01 20:56:47 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0xd0f) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00008c4000-0xa)="2f6465762f6375736500", 0x4200, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f00009b4000)="2f6465762f6877726e6700", 0x8000, 0x0) readv(r3, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000acb000-0x17)="0000000000000000000000000000000000000000000000") openat$hwrng(0xffffffffffffff9c, &(0x7f0000d7f000)="2f6465762f6877726e6700", 0x0, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00005d0000)={0xfffffffffffffff8, 0x1, "636c69656e7431000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x4, "8014c0922f742755", "09b11fba26339a7f31167d9a6b7d5b57b559864860cf11cffa1de0d46dc54102", 0x5, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:47 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:47 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000549000)={0x0, 0x0, 0x100000000}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00003f2000-0x10)={0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000552000-0x8)={r2, r3}) r4 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(r4, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:47 executing program 6: futex(&(0x7f0000004000-0x4)=0x0, 0xb, 0x4000000000000001, &(0x7f0000003000)={0x0, 0x0}, &(0x7f0000003000)=0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00009f2000-0xb)="2f6465762f6c6f6f702300", 0x4000000000000, 0x101086) fcntl$getown(r0, 0x9) r2 = memfd_create(&(0x7f0000d0c000-0x2)="7b10", 0x3) recvmsg(0xffffffffffffffff, &(0x7f000098a000-0x38)={&(0x7f0000fc4000)=@ethernet={0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000fdd000)=[{&(0x7f000048b000-0x33)="000000000000", 0x6}, {&(0x7f0000fd0000-0x84)="", 0x0}, {&(0x7f0000da2000-0xd3)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xd3}, {&(0x7f00003f8000-0xe5)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe5}, {&(0x7f0000aeb000-0xc)="000000000000000000000000", 0xc}, {&(0x7f0000631000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x6, &(0x7f0000ca0000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xf6, 0x5}, 0x1) pwritev(r2, &(0x7f000060c000-0x60)=[{&(0x7f0000ae7000-0x1000)="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", 0x1dc}, {&(0x7f0000767000-0x3b)="86dadbf8c242682370fbe4307000000400c6fbf9c421c6b753003a18c8be044609003ad34a9c5fe73dac94537c503b03e258126186619b089a727a", 0x3b}], 0x2, 0x3) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) mmap(&(0x7f00007c3000/0x4000)=nil, 0x4000, 0x3, 0x2851, r1, 0x0) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000686000)=0x3) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0xfffffffffffffff8) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000c68000)="2f6465762f7667615f6172626974657200", 0x2800, 0x0) mmap(&(0x7f0000f8a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f00007c3000)={"d84660a96ae4a6d94fd4d67d5f0ae4fe", {0x4, 0xffffffffffffffff, 0x4, "50bdd4eb52d8", 0x401, 0x0}}) fcntl$addseals(r2, 0x409, 0xc) fsync(r1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000f8b000-0x10)={0x1, 0x0, 0x2, 0x0}) r4 = inotify_add_watch(r2, &(0x7f0000d2b000-0x8)="2e2f66696c653000", 0x0) inotify_rm_watch(r2, r4) getpeername$llc(r2, &(0x7f0000447000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00002ce000-0x4)=0x10) fsetxattr(r2, &(0x7f0000fde000)=@random={"747275737465642e00", "70707030237365637572697479656d306d643573756d706f7369785f61636c5f61636365737300"}, &(0x7f000061e000-0x6)="6e6f64657600", 0x6, 0x1) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0086438, &(0x7f0000fa1000-0x8)={0x8000, r3}) sendfile(r1, r2, &(0x7f00000de000-0x8)=0x0, 0x100000001) ioctl$LOOP_CLR_FD(r1, 0x4c01) 2017/12/01 20:56:47 executing program 7: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000f33000)=0x0, &(0x7f00001e7000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x200e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00008ce000-0x8)={0x0, 0x7530}, 0x8) io_setup(0x6, &(0x7f000090a000)=0x0) io_submit(r2, 0x4, &(0x7f0000604000)=[&(0x7f0000efe000)={0x0, 0x0, 0x0, 0x1, 0x2, r0, &(0x7f0000d77000-0xcb)="119576b1e467937d0f467248d30d05f75dcee0c6e6379080b5455bfabf1166fa2ebd21a8d49b092925091bcc0248a4f472999a4e98d8bead6f51f6e75ba38c8dad1ca21031a92f2ae7e5e31afbc3d03db24581cf99f9c6388d7dddcf06ab809113b22323a121ed36ae014574f11bc09de31089f418b10082b43188b32298b861e84a74a060ed0f93e934a55e44cdfd34a868ea18a9008173d4fd8828b9a18257a68e389eaf49249811822657b3278de21e8990ab0d69573e6f45ddcf45ce2b605fe64a8e11d090341cdc11", 0xcb, 0x1, 0x0, 0x0, r0}, &(0x7f0000bdf000-0x40)={0x0, 0x0, 0x0, 0x7, 0x6, r1, &(0x7f0000d77000-0x5)="654a983bb6", 0x5, 0x9, 0x0, 0x1, r0}, &(0x7f0000db4000-0x40)={0x0, 0x0, 0x0, 0x1, 0x40, r1, &(0x7f000061b000-0x90)="f9407cde576924ca094e53b1c8d49f6b596d1a6911d540251a16a5fed49cad22d5fde0d3cde095bb5b754aade8ce218bc380591381321d4920c264b83b2706ecca3574a5311fe65747202b7d77eb2ea8e9dfb1e43512359dcccb9286ab94091a96b4c11e2a444459fd33fb7ed9b0af50e81d0579eb607fb09622dbb22c16767531d281f716770555bebad59d7b16372c", 0x90, 0xda, 0x0, 0x1, r0}, &(0x7f00006f9000-0x40)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000fba000)="742e8799703620ce36084ce7a3680d8c6c27d44202aff9f0edf33c835e11cf79142233b67be2a432eb24969ca0dd1a5522b2646662ae5d40232b9bf83b6c53efa5067f20b04d2899d964919eb114b87f75c8793cd0e61514bbc7ec30ddbfa0604b5b31908d6c0d354ceafce4f1645c4e36c76bfff675a5c03b4b92b211cad378", 0x80, 0x800, 0x0, 0xde6745e4281a475b, r0}]) syz_emit_ethernet(0x4a, &(0x7f0000d86000-0x62)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {{0x86dd, @ipv6={0x0, 0x6, "a228af", 0x14, 0x6, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, {[], @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, {[]}}, {""}}}}}}}, 0x0) 2017/12/01 20:56:47 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) r2 = getpgrp(0xffffffffffffffff) r3 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r4 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r4, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r3) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000396000-0x10)={r6, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r8 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r8, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f000055d000)={r7, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) modify_ldt$read(0x0, &(0x7f0000b20000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69) sched_setparam(r2, &(0x7f0000dce000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x553, 0x100000000, 0x0, 0x31c36ff4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) mkdir(&(0x7f0000acd000-0x8)="2e2f66696c653000", 0x10000000100050) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0}, 0x10) mlock(&(0x7f0000aba000/0x3000)=nil, 0x3000) setsockopt$inet_int(r0, 0x0, 0x37, &(0x7f0000a3d000)=0x1, 0x4) 2017/12/01 20:56:47 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x10000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) ioctl$KDSKBLED(r1, 0x4b65, 0xbdd) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f000004c000-0xc)={0x10, 0x0}) 2017/12/01 20:56:47 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f000042a000-0xbc)={0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x0, "0000000000000000", "0000000000000000000000000000000000000000000000000000000000000000", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/01 20:56:47 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:47 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) r2 = getpgrp(0xffffffffffffffff) r3 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r4 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r4, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r3) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000396000-0x10)={r6, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r8 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r8, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f000055d000)={r7, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) modify_ldt$read(0x0, &(0x7f0000b20000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69) sched_setparam(r2, &(0x7f0000dce000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x553, 0x100000000, 0x0, 0x31c36ff4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) mkdir(&(0x7f0000acd000-0x8)="2e2f66696c653000", 0x10000000100050) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0}, 0x10) mlock(&(0x7f0000aba000/0x3000)=nil, 0x3000) setsockopt$inet_int(r0, 0x0, 0x37, &(0x7f0000a3d000)=0x1, 0x4) socket$kcm(0x29, 0x7, 0x0) 2017/12/01 20:56:47 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f000022d000-0x9)="2f6465762f73672300", 0x8, 0x80) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x7b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40fe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x80000000000000, 0x0, 0x0, 0x8, 0x0, 0xcbc, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000b0b000-0x8)="2e2f66696c653000", 0x8) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000186000-0x4)=0x1002) keyctl$join(0x1, &(0x7f0000b45000)={0x73, 0x79, 0x7a, 0x1, 0x0}) r1 = accept4$ipx(0xffffffffffffff9c, 0x0, &(0x7f0000a4d000)=0x0, 0x7ff) clock_gettime(0x0, &(0x7f0000051000)={0x0, 0x0}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000774000-0x9)="2f6465762f76637300", 0x20100, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000e19000)=0x3, 0x4) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000fa8000-0x8)={r2, r3/1000+10000}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = eventfd2(0x0, 0x0) pipe2(&(0x7f0000457000-0x4)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) writev(r7, &(0x7f000055e000)=[{&(0x7f0000894000)="965634f7cc14edb70e2a2327bc5203c3", 0x10}], 0x1) splice(r6, 0x0, r5, 0x0, 0x1ff, 0x0) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000210000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000009000-0x8)=0x3f) recvfrom(r9, &(0x7f0000013000-0x8d)="", 0x0, 0x0, &(0x7f0000013000-0x10)=@ax25={0x6, {"2d13d4162d9f33"}, 0x0}, 0x10) r10 = getpgid(0x0) dup2(r5, r7) ioctl$FIONREAD(r6, 0x541b, &(0x7f00007c8000-0x4)=0x0) fcntl$setsig(r8, 0xa, 0x12) dup2(r7, r9) fcntl$setown(r8, 0x8, r10) tkill(r10, 0x13) openat$autofs(0xffffffffffffff9c, &(0x7f0000da8000-0xc)="2f6465762f6175746f667300", 0x200000, 0x0) 2017/12/01 20:56:47 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) socketpair(0x0, 0x0, 0x2, &(0x7f000054d000)={0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00003c5000)={r1, &(0x7f0000345000)="6bdb3487fe4be0654941240996a08982b4c411321c220c5191e88d108065b42316a725dbde307010157f1654e99a577f1f7d755d278856ee78a1d5b634cf2ca8bdfe94ce6a41de0b0cd69fb27015921c153421bed54a66b8fd4e939fe448fa1bb6c60cb53f433d4cff6ea6c75f89e557151a827a76556e526ef245ffffff7f802c3a3e1b86c6e521dfffc2c4a5f5f88e8630a93c1242d75a90390f2531ce70ff1c817ddc4f71c16d675357e418f633f819ca800a42b322ff74cefe6fb3f8031fc13474895e94fc1b01905732f7a11cd5404e36d949d8364f0d1ea04841396533ef707ca70d7aa87c477cb34d65a93d2df310cd88eacc8061cacd834a9617ad63"}, 0x10) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f00004ed000)={@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0}, &(0x7f0000e4e000-0x4)=0x14) dup2(r1, r0) 2017/12/01 20:56:47 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) r2 = getpgrp(0xffffffffffffffff) r3 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r4 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r4, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r3) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000396000-0x10)={r6, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r8 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r8, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f000055d000)={r7, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) modify_ldt$read(0x0, &(0x7f0000b20000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69) sched_setparam(r2, &(0x7f0000dce000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x553, 0x100000000, 0x0, 0x31c36ff4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) mkdir(&(0x7f0000acd000-0x8)="2e2f66696c653000", 0x10000000100050) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0}, 0x10) mlock(&(0x7f0000aba000/0x3000)=nil, 0x3000) 2017/12/01 20:56:47 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x7}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) r3 = syz_open_dev$vcsa(&(0x7f0000a8d000)="2f6465762f766373612300", 0x9, 0x200) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000437000)={{&(0x7f0000493000/0x1000)=nil, 0x1000}, 0x0, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000c03000)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00008fe000-0x108)={0x0, @in={{0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x1f, 0x8, 0xfffffffffffffffb, 0x2, 0x0, 0x100000001, 0xee, 0x2, 0x3, 0x6, 0x9, 0x9, 0x9, 0x0, 0x8]}, &(0x7f0000ab9000-0x4)=0x108) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000c86000-0x108)={r4, @in6={{0xa, 0x1, 0x4, @loopback={0x0, 0x1}, 0x10001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x2, 0x1, 0x7, 0x83, 0xb4, 0x7, 0x1f, 0x3, 0x6, 0xfffffffffffffff9, 0x3, 0x1, 0x5, 0x80000001, 0x5]}, &(0x7f0000458000)=0x108) getpgrp(0x0) 2017/12/01 20:56:47 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000d50000)={@common="62637366300000000000000000000000", @ifru_flags=0x2000}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) r3 = add_key(&(0x7f0000a4f000)="6b657972696e6700", &(0x7f0000c98000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000029b000-0x63)="fde6598a1d290767895e1525d12328d1b45b40ed0b32f921269b525d387bddb2f5030e0dfa2175c46f4757a194ce751caad0d3a39f0ae4cde57989a054956e747241cc5c0492b44583862f7ceceadc7fb9e9955e863d28b79da76708ee988eb868987c", 0x63, 0xfffffffffffffffd) keyctl$get_security(0x11, r3, &(0x7f0000415000-0x71)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x71) close(r1) ioctl$TUNDETACHFILTER(r2, 0x400854d6, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:47 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:47 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:47 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000dd8000)="2f6465762f6877726e6700", 0x2000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f00008ed000-0x20)={0x1a, 0x5, 0x204, 0x8, 0xf3, 0x100, 0xfffffffffffffff8, 0x7ff, 0x0}, &(0x7f0000bce000)=0x20) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f000083d000-0x4)=r2, 0x4) r3 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000bf6000)={0x0, 0x0}) close(r3) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:47 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:47 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) r2 = getpgrp(0xffffffffffffffff) r3 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r4 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r4, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r3) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000396000-0x10)={r6, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r8 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r8, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f000055d000)={r7, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) modify_ldt$read(0x0, &(0x7f0000b20000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69) sched_setparam(r2, &(0x7f0000dce000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x553, 0x100000000, 0x0, 0x31c36ff4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) mkdir(&(0x7f0000acd000-0x8)="2e2f66696c653000", 0x10000000100050) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0}, 0x10) 2017/12/01 20:56:47 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) pipe2(&(0x7f00006b8000)={0x0, 0x0}, 0x800) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f00003c1000)={&(0x7f00008e6000/0x1000)=nil, 0x4, 0x3, 0xa4, &(0x7f0000d19000/0x4000)=nil, 0x1}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) modify_ldt$write(0x1, &(0x7f0000a56000-0x10)={0x8, 0x20001000, 0x4000, 0x1, 0x7f, 0xabef, 0x195e, 0x3, 0x2d, 0x6}, 0x10) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:47 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:47 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000875000-0xe)="707070305d76626f786e65743000", 0x1) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00007e0000)=0x80000000, 0x4) perf_event_open(&(0x7f0000e62000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(r0, &(0x7f0000bf6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000215000)=0x14) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f000047f000)={@loopback={0x0, 0x1}, r1}, 0x14) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000923000)={r0, &(0x7f00006cc000+0xfa7)="4900763679b95c6e0a7b2a34", &(0x7f0000adf000)=""}, 0x18) fcntl$F_SET_FILE_RW_HINT(r0, 0x40d, &(0x7f00002ad000-0x8)=0x4) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00009b7000-0x28)={0x1, 0x6, [@random="b4ee06b76c22", @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @random="f86dd1a31cd5", @random="d9163dd4c5ae"]}) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000583000-0x1)=0x0) fgetxattr(r0, &(0x7f00006b3000)=@known="636f6d2e6170706c652e46696e646572496e666f00", &(0x7f0000677000)="0000000000000000000000000000000000000000000000000000000000000000000000000000", 0x26) syz_emit_ethernet(0x12, &(0x7f0000e33000-0x12)={@remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x2000000000004, @x25={0x5347d1768d122c42, 0x0, 0xf, "20"}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000e09000-0x28)={@common="7465716c300000000000000000000000", @ifru_map={0x6, 0x4, 0x0, 0x981b, 0x6, 0x1}}) 2017/12/01 20:56:47 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f000095b000-0xa)="2f6465762f7663732300", 0x9, 0x40082) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) sendto$llc(r1, &(0x7f0000cbe000)="61d0214718937c8166f12c11a87f272e263810da749aa6530f7be1e76d32be4a0a0e687c5a0b5605a2ead446bd4eb06d01d9b4fd1aff2484edeb9df60eafd32474ba0b117eba4f25607506d7d894e3c6f8eff2ec750f203dab35232dc3c082b9040e90c690e4262428879a35708c95b5cb73519fe50bb877db91936d4105b94629ba88b0bb192119d1354ad9c163da0b980320be5a6f5171d6a6a3d69e83dde34622b737859964ad3cfcb0a79457a041cf1e6632baf9424a31b870da9f7a176428dd6371be1c0f05fd35a1dac304ff8346d948575d5eced41b6fbbf389d0a162249fb467711c", 0xe6, 0x480c0, &(0x7f0000c18000-0x10)={0x1a, 0x17, 0xfffffffffffffff8, 0x0, 0xa1, 0x2, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) ioctl$KVM_SMI(r1, 0xaeb7) fcntl$F_GET_RW_HINT(r0, 0x40d, &(0x7f0000a15000)=0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000a80000)={0x0, 0xfffffffffffff001, 0x9, 0x100000000}, &(0x7f0000a3d000-0x4)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000699000-0xa0)={r3, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x3ff, 0x6, 0x8, 0x17}, 0xa0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000cbd000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000b7b000-0x4)=r2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00002d8000-0x30)={&(0x7f00008d3000)=[0x0, 0x0, 0x0, 0x0], &(0x7f000013d000)=[0x0], &(0x7f0000a01000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00006b5000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0}) 2017/12/01 20:56:47 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:47 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x800000000000}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:47 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:47 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x202e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000139000)="000000000000000000000000000000000000000000000000000000000000000000000000") r1 = syz_open_procfs(0x0, &(0x7f00002e9000)="7461736b00") getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000081000)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x2, 0x1e, 0x0, 0x1, 0x4, 0x5, 0x3, 0x0, 0x8, 0x1, 0x9, 0x5, 0x8000, 0x3, 0x2]}, &(0x7f0000003000)=0x108) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000f93000-0x98)={r2, @in={{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7f, 0x7f}, 0x98) getdents(r1, &(0x7f0000825000-0xa7)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x60) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000c5e000)=0x0) getdents64(r1, &(0x7f0000cf0000-0x2c)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x2c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r4, &(0x7f000067f000-0x1c)={0xa, 0x0, 0xfffffffffffffffe, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00003a8000)=0x7c, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000bec000-0x4)=0x22, 0x4) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000f46000-0x8)=@assoc_value={0x0, 0x401}, 0x8) sendto$inet6(r4, &(0x7f0000fcc000-0x1)="d0", 0x1, 0x0, &(0x7f000056e000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendto$inet6(r4, &(0x7f0000e2a000)="8c", 0x1, 0x0, &(0x7f0000490000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000d54000)={r2, 0x9}, &(0x7f00005aa000-0x4)=0x8) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000995000)={0x0, 0x0}) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000cc4000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) sendto$inet6(r4, &(0x7f0000feb000)="bd2e32ffa825fcec451d2b7a89598d49681459593dc8b0d95a423b46ccc92f3a06e5fdf31c06f1da539671e12db8e31091b12045ee8ad740b2ee9bb7549c258e913d5128f5c4c8e755223c612050f5d89303a236aacd593998b37213572aad42c3188a083689ce3248030feaccdd929c03403326f6b736195c9aea8d43e07317db6b8647e3aa9eb04ea150e799f354f1ed86c3170fff52351ff2e2d295b6d8b70ac31c4b15326d2df54c3b660711703d0f2338c39aacdf7bd9bb234c0236ed2bce67c75dc382057c96eb889e3e08d1b838cb417c58a40069c40d300b2e5410b8a0b9ea351ed371e648cd30a30755d3e50f2c6b39bf7eca642b7531eb1d63af771e94f4b25ffb3255b7e32a4d4cf4c7e7ff86bf6b3496219605bea5ddf556f83421814a6b4076f4eb097d0e1650dec7087843524c942053c7eb8837262d25d7269ca919b942c0506ef2ba0ea5cc05dcde40679300fb3c1d89498ebc23f151567db27bfc491873bc34b213a1950063f7a8c25c8809b5c5dac97f01078e3668d83883ee64b0e035d47c3f1de992ac9f72d7f73ba87c1318df1084d27019310fe6a835d5d47e159e638563ed06772eb3e452e513e3737f49878b8c3f0f3c5b6a39c8e7b01a97a2648a61aeb4c2799a84db31184ea11030a096636448ff60fa7b3094e4c5ccbd1de6bc01d8666a15d26b564a23cf02749cb352b0e21110470d70b2058cca5125e13f652676e57ca520a9c5a06029d9c01cd1563461dba81bdd00659a59688e6863439e573a4875677931e83da19bffada6e50fbdc1b3d04b9e9a9b71080000000000000024fd0599d7a2298d5d2972fd4ddf4a0451550918400937990d72663c26f72962a67408467d7e9abe910cd53a11c84d1776ed5a6e5f309efe8ebf4fa410a79f2e60f1e335461a796aeaa334533bb776876adad53d2ed12e031449649e41dbff3533c033906a27e879acd80b7e4c6fd7fc39d5015da2dcf5a86a701c19fc4d7cd08e9b29db1aed063c081ad6114ed87ee7fb9942065a0e9bb79d9f9685bacf51e504b53098534f6c1d1aa8dcdbbc701cdbf3ba39ffcbab22610e401b17a709e147fc1e7818597daec229c48decd2c1ba3fe199327edb0ed5940727879c43214dec1fea79e624aeb99e659be4e70c63ac62656b53a3bc89ea89f68bd01d8118cb588bf157d8a1727faa9d6502d81841921c7656e823fd861a472152dbd2f87f3402e77ba2550d08f03720cdde9bd2478e2e214c52fe9d75b3bc40dc77155506b456948504aa4c26381641e10ce3c4636e8bb69818105a1d401513045d76138c2568427980a1420bb06e6ba8495fda5e6549c3f0e425e1c0a49bf5a82123f209a38a0fda6b01c19a84b804f379d1ded717fc96296044f3268a2b6dcbb64622b0bd05e42beea5cce693f3461ca99d9adfd5b774ce61a83af7a2f3ef", 0x401, 0x0, &(0x7f00009e9000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) perf_event_open(&(0x7f0000555000)={0x3, 0x78, 0x7f, 0x3, 0x1, 0x72c, 0x0, 0x6, 0x42212, 0x5, 0x3f, 0x1, 0x1, 0x8, 0x0, 0x0, 0x6, 0x7fffffff, 0x7a4d, 0x1000, 0x5, 0x5, 0x7, 0x2, 0x8, 0xfffffffffffff000, 0x0}, r3, 0x10001, r0, 0x5) getdents(r1, &(0x7f000081d000)="000000000000000000000000000000000000000000000000000000000000000000000000", 0x24) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000cbf000)=0xd2c, 0x4) 2017/12/01 20:56:47 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:47 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:47 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000bf6000)={0x0, 0x0}) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000fa5000)={0xf9, 0x0, [0xe6, 0x3ff, 0x1, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000716000)={@common="697036746e6c30000000000000000000", @ifru_addrs={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) close(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:47 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000094000)={0x1, 0x401, 0x401, 0x7fff}) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000124000)={0xffffffffffffffff, 0x3, 0x6, 0x0, 0x1ff}) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00007e3000)={0x0, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f00005dd000-0xc)={0x0, 0x0, 0x0}, 0xc) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00006a8000-0x6d)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000b64000-0xb0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000312000)=0xb0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f000073d000-0x138)={{0xf004, 0x2000, 0x0, 0x80000000, 0xfffffffffffffff9, 0xffffffffffff8548, 0x575, 0x80, 0x2, 0x6, 0x63f, 0x4, 0x0}, {0x0, 0x101000, 0xf, 0x1ff, 0x3, 0x9, 0xffffffffffffffc1, 0x99f, 0x6, 0xa711566, 0x8, 0xffffffff, 0x0}, {0x3000, 0x0, 0x1f, 0x4, 0x8001, 0x80, 0x3, 0x0, 0x6, 0x9, 0x9, 0x7, 0x0}, {0x5001, 0x0, 0xc, 0xa2, 0x6ca, 0x0, 0x7af, 0x3, 0x806, 0x5, 0x7, 0x0, 0x0}, {0x4, 0x3002, 0x0, 0x0, 0x0, 0x10001, 0x7, 0x3, 0x101, 0x9, 0x7, 0x1, 0x0}, {0x6000, 0x4, 0xb, 0xffff, 0x3a, 0x98, 0x0, 0x4c7a, 0x7fffffff, 0x101, 0x5, 0x9, 0x0}, {0xf000, 0x100000, 0xb, 0x9, 0x6439, 0x7, 0x38b, 0x516f, 0x4, 0x8, 0x4, 0x80000000, 0x0}, {0x6000, 0xf000, 0xf, 0xd4d7, 0x8, 0x0, 0x1, 0xffffffffffffffb3, 0x3f, 0x80af, 0x4, 0xf59, 0x0}, {0x10000, 0xd001, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0x2000, [0x3, 0x0, 0x7, 0xf89f]}) 2017/12/01 20:56:47 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) r2 = getpgrp(0xffffffffffffffff) r3 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r4 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r4, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r3) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000396000-0x10)={r6, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r8 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r8, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f000055d000)={r7, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) modify_ldt$read(0x0, &(0x7f0000b20000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69) sched_setparam(r2, &(0x7f0000dce000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x553, 0x100000000, 0x0, 0x31c36ff4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) mkdir(&(0x7f0000acd000-0x8)="2e2f66696c653000", 0x10000000100050) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:47 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000a8a000-0xc)="2f6465762f72666b696c6c00", 0x10800, 0x0) clock_gettime(0xc05a2ce6f1d635bb, &(0x7f0000811000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000b8d000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000a72000-0x4)=0x7, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f00002df000-0xa3)="", 0x0, 0x20000000, &(0x7f0000035000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = socket$inet_sctp(0x2, 0x3, 0x84) pipe(&(0x7f0000032000)={0x0, 0x0}) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f00002e5000-0x50)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") setsockopt$inet_int(r1, 0x0, 0xf7ffff8000000003, &(0x7f00003f4000-0x4)=0x6, 0x4) sendto$inet(r1, &(0x7f0000003000)="", 0x0, 0x1ffffffc, &(0x7f0000002000-0x10)={0x2, 0x0, @loopback=0x7f000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0xb0600) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000ab0000-0x8)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ab0000-0x4)=0x8) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000aaf000-0x4)=0x1bca, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000aaf000-0x4)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f00007dd000)=0x100000000, 0x4) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000b5a000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000f19000-0x8)={0x0, 0x98}, &(0x7f0000418000-0x4)=0x8) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000206000-0xa2)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000617000)=0xa2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00001b1000)=@sack_info={0x0, 0x5f, 0xfff}, &(0x7f0000164000)=0xc) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f000049a000)={r4, 0x4}, &(0x7f00004d6000)=0x8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00009c4000)={0xb4, 0x7, 0x6, 0xff, 0x549, 0xffffffffffffff7b, 0x7ff}, 0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000ab1000-0xf)={r5, 0x7, "6d5b1d1fb13bf6"}, &(0x7f0000ab0000)=0xf) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000852000-0x4)=0x4, 0x4) mlock2(&(0x7f0000588000/0x3000)=nil, 0x3000, 0x0) 2017/12/01 20:56:47 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) accept4$packet(r1, &(0x7f0000f1a000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f00008a4000)=0x14, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000657000-0xe8)={{{@in=@remote={0x0, 0x0, 0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000051b000)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000d8f000)={{{@in=@multicast1=0xe0000001, @in=@broadcast=0xffffffff, 0x2, 0x7f, 0x1, 0x5, 0x10, 0x0, 0x20, 0x8, r3, r4}, {0x7, 0x0, 0xdd, 0x6, 0x40, 0x6, 0x800, 0x2}, {0x9, 0x6, 0xfffffffffffffffc, 0xffff}, 0x81, 0x0, 0x721, 0x1, 0x20, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x200, 0xffffffffffffcf32}, 0x5, @in6=@loopback={0x0, 0x1}, 0x7ff, 0x7, 0x2, 0x0, 0x8, 0x5, 0x8}}, 0xe8) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:48 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00002e4000-0xc)="2f6465762f6175746f667300", 0x80240, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000644000-0x30)={0x100000001, 0x3, 0xffffffffffffffff, 0xb18a, 0x4, 0x39, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x804b8) r2 = syz_open_dev$sg(&(0x7f00009c2000-0x9)="2f6465762f73672300", 0x5, 0x321002) r3 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) flistxattr(r1, &(0x7f000034d000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x41) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000ba000-0x6)={0x0, 0xffff}, &(0x7f0000943000)=0x6) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f000065c000)={r4, @in6={{0xa, 0x2, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x9c5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7, 0x1, 0x8000, 0x1, 0x91}, &(0x7f000030b000)=0xa0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r3, &(0x7f0000974000-0xc)={0x0, 0x0}) 2017/12/01 20:56:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:48 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)="2f6465762f73657175656e6365723200", 0x88000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$unix(r0, &(0x7f0000001000-0x8)=@abs={0x0, 0x0, 0x0}, &(0x7f00007e6000-0x4)=0x8, 0x80800) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe9e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000ee4000)="2f6465762f7667615f6172626974657200", 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80042407, &(0x7f0000d9d000+0x530)=0x0) write(r2, &(0x7f0000ffe000-0x5)="23216109", 0x4) execveat(r2, &(0x7f0000ff7000)="2e2f66696c653000", &(0x7f00002ac000)=[], &(0x7f000034c000-0x8)=[&(0x7f00008f3000)="6b657972696e6773656c662f2d637075736574656d30657468302400"], 0x1000) 2017/12/01 20:56:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:48 executing program 6: mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80800) mmap(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000008000-0x20)={{&(0x7f0000000000/0x4000)=nil, 0x4000}, 0x1, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000003000/0x4000)=nil, 0x4000}, 0x0, 0x0}) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000003000)="2e2f66696c653000", 0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@time={0x77359400, 0x0}}], 0x30) mmap(&(0x7f0000000000/0xc5000)=nil, 0xc5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000073000-0x8)={0x7fffffff}, &(0x7f00000c1000)={0x0}, 0x8) write(r4, &(0x7f0000062000-0x94)="21", 0x1) mmap(&(0x7f00000c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000046000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xfffffdff, 0x0) fcntl$setpipe(r4, 0x407, 0x0) r7 = dup2(r4, r4) mmap(&(0x7f00000c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(r2, &(0x7f000000b000)=[{&(0x7f0000065000-0x1)="16", 0x1}], 0x1) mmap(&(0x7f00000c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000c5000)=0x1000) ioctl$KIOCSOUND(r7, 0x4b2f, 0x4) mmap(&(0x7f00000c5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents(r6, &(0x7f0000027000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000) mmap(&(0x7f00000c6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f00000c6000+0x8)=0x8001) 2017/12/01 20:56:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f0000628000)="2e2f66696c653000", 0x14) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:48 executing program 1 (fault-call:7 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) r2 = getpgrp(0xffffffffffffffff) r3 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r4 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r4, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r3) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000396000-0x10)={r6, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r8 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r8, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f000055d000)={r7, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) modify_ldt$read(0x0, &(0x7f0000b20000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69) sched_setparam(r2, &(0x7f0000dce000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x553, 0x100000000, 0x0, 0x31c36ff4, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xf) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:48 executing program 7: r0 = open(&(0x7f0000c00000-0x8)="2e2f66696c653000", 0xc0400, 0x1) ioctl$TIOCGSID(r0, 0x540f, &(0x7f00000ec000-0x4)=0x0) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x9, 0xbffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0xfffffffffffffffb, 0xffffffffffff8000, 0x0, 0x0, 0x0, 0x278d, 0x0, 0x0, 0x9cba, 0xfffffffffffffffc, 0x103, 0x100000000000000, 0x0, 0x1, 0x0, 0x0, 0x0}, r1, 0x4, r0, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r2, 0x10, &(0x7f000065a000)={0x0, 0x0}) perf_event_open(&(0x7f0000337000)={0x5, 0x78, 0xfffffffffffffffc, 0x200, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x668, 0xfffffffffffffffc, 0x3, 0x1, 0x0, 0x0, 0x3, 0x20001000, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x100000000, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket(0x15, 0x80005, 0x0) getsockopt(r3, 0x200000000114, 0x8, &(0x7f0000002000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f0000000000)=0x1000) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket(0x11, 0x20000000000802, 0x0) perf_event_open(&(0x7f0000746000-0x78)={0x2, 0x78, 0x3, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b7d000-0x8)="2e2f66696c653000", 0xffffffffffffffff) clone(0x0, &(0x7f000016e000)="47", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000208000)="") recvfrom$inet(r4, &(0x7f0000812000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000, 0x20, &(0x7f000099f000-0x10)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f00009b8000-0x4)=0x0, &(0x7f00002aa000-0x4)=0x4) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x40000}, 0x10) r5 = socket(0x415, 0x80a, 0x200000008) write(r5, &(0x7f0000f65000)="1f0000000401ff00040000bbd5070000074f000009000800191600080005c4", 0x1f) socket$unix(0x1, 0x40006, 0x0) r6 = socket(0x1, 0x100000005, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00008b3000-0x70)={0x1, {0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x3, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x3, 0x0, 0x0, &(0x7f0000775000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x7}) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000e96000-0x44)={{0x2, 0x1, @rand_addr=0x55, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x307, @remote={[0xbb, 0xbb, 0xbb, 0xbb, 0xbb], 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20, {0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common="73697430000001000000000000000000"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000f5a000-0x4)=0x3) r7 = socket(0x11, 0x80003, 0x0) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000d2a000)=0x3, 0x4) getsockopt$packet_buf(r7, 0x107, 0x6, &(0x7f0000435000-0x6)="", &(0x7f00008ad000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) 2017/12/01 20:56:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000529000)=0x0, &(0x7f0000d87000-0x4)=0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80000080000) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r3, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) vmsplice(r3, &(0x7f0000ad8000)=[{&(0x7f0000258000-0x6c)="03871d84d01f067a93320e685742f79d8d1771be81d37eb7f55013c3293ec95928607613ee89710482a5d43a6ca9a785ba2c3f8f77737f3a3940d0514e254b0789037b97d8cd8c4b59b2b8fe05031789b6db0439785c493ff66ddac3254be8507d99f4902e593609f6505f75", 0x6c}, {&(0x7f000094e000-0x4b)="2a701787fd1fb2ed7174f2681c5cead012b9e9d482912052a5f704e43327a74ba681010b57030964f968714c903a5ff39e322b8ae649fd54b7b53fffdd26d518249a84c78eb9d905eadb82", 0x4b}, {&(0x7f00003b8000-0xa8)="036b65364864851c9abf1639a9fae20c0030ea3081b4c6ef055ed0709c0452964a23c3eb2cec8abdc50148687c74308f53bbb3ce1788d9feec3120be73526aa98f1d98272ab30d77676b49247cce6278d7f6db86aac5a22aa44d099ac27de8d3db3b4a3d55270b8d5b7229afe14db3561ca0767c093e7262d14e157b2cf0e97c6150a8270a540f3fa94f035707ef6113a9170f1b72b21ad97fd0c79408f0c51b12d9827104421801", 0xa8}, {&(0x7f00001e1000-0x68)="c39c2ad126909e8024d501d23867eb2fecfbe868709a57c792f6471309974a3ed1f11d5c5228ad53e0de562894cbe49d3a74083a742df93e6a82eb6d938542b1e12db36cc09c4124e8e8eea1a56f202286d584de9de760887e0753e1373393c14d7dc4641c66857c", 0x68}, {&(0x7f0000520000)="e9d0a39881b89dd92876697202b64e7924638141ecfaa47728bbf9011af477d901e84760d026e798958b91ba6a6910d87b4d834be2ac1232e1774a0280302114a53633b1b344f395bd18ae759e75cd91dc790913f8ec328f38dcb2f438e966ae9eb5ad793ddbbbc99f7b590e90977ade72e3f96a00b1d0addf699d414150c36f5b8f0de5e3c81e89afa5c08331c1c765222061839de5573a665555dc2b2d1bb111a6dfd78bb4432a1343545e41aa7abd22186f7c725ce7abd398", 0xba}, {&(0x7f00002f3000-0x5f)="11214eb968c9eae89d815f0cdfe35a3f1e82bfa274ec6583b32367192ea83655e303dba6715b0da2ca9391835e1793580bad6c4df6ed0cdcbd994ef9f2f9bcfe931e63d3076798e6ae86d72108a42115b062357724998c10a0e28c6fd2e44e", 0x5f}, {&(0x7f00005f6000-0xb4)="6c76e1ed747d73af401ad29dae1a0de2e597b4a0719a766c3d4c378ddc89f687b647e35a976693e4c1976aca0f874234e29d74754a8408b4d46fe569962e105336bbd85e7bc39977f58152e223cf450134f1aad352787a453fb055ed30dc8c898799d8fb60ece004ac8b75403dbd07e5dbbe4ec94e52cf64d03a5c8ae30bf33dbfe723ad6171e3b04e54dcfcffc4fcfc7701314d6986a625ad5726a6ae0c94d1cd1b83f100e3d7413347c4670182616380d8065a", 0xb4}], 0x7, 0x8) ioctl$sock_ipx_SIOCAIPXPRISLT(r2, 0x89e1, &(0x7f000062f000-0x4)=0x81) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000314000-0x14)="2a766d6e6574317d776c616e31766d6e65743100") ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) [ 242.428132] FAULT_INJECTION: forcing a failure. [ 242.428132] name failslab, interval 1, probability 0, space 0, times 0 [ 242.466450] CPU: 0 PID: 9262 Comm: syz-executor1 Not tainted 4.15.0-rc1+ #113 [ 242.466458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.466462] Call Trace: [ 242.466480] dump_stack+0x194/0x257 [ 242.466507] ? arch_local_irq_restore+0x53/0x53 [ 242.466560] should_fail+0x8c0/0xa40 [ 242.466589] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 242.466648] ? find_held_lock+0x39/0x1d0 [ 242.466714] ? __lock_is_held+0xbc/0x140 [ 242.466786] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 242.466811] ? rcu_note_context_switch+0x710/0x710 [ 242.466826] ? perf_trace_lock+0x900/0x900 [ 242.466868] should_failslab+0xec/0x120 [ 242.466887] kmem_cache_alloc+0x47/0x760 [ 242.466898] ? print_usage_bug+0x3f0/0x3f0 [ 242.466951] ep_insert+0x25d/0x1b10 [ 242.467011] ? lock_acquire+0x1d5/0x580 [ 242.467033] ? ep_poll+0x1190/0x1190 [ 242.467067] ? lock_release+0xda0/0xda0 [ 242.467100] ? rcu_note_context_switch+0x710/0x710 [ 242.467136] ? __might_sleep+0x95/0x190 [ 242.467154] ? SyS_epoll_ctl+0x8a3/0x1ab0 [ 242.467171] ? __mutex_lock+0x16f/0x1a80 [ 242.467179] ? SyS_epoll_ctl+0x8a3/0x1ab0 [ 242.467199] ? lock_downgrade+0x980/0x980 [ 242.467213] ? SyS_epoll_ctl+0x8a3/0x1ab0 [ 242.467253] ? mutex_lock_io_nested+0x1900/0x1900 [ 242.467265] ? lock_release+0xda0/0xda0 [ 242.467294] ? __lock_is_held+0xbc/0x140 [ 242.467354] ? __fget+0x362/0x580 [ 242.467394] ? iterate_fd+0x3f0/0x3f0 [ 242.467411] ? find_held_lock+0x39/0x1d0 [ 242.467460] ? lock_downgrade+0x980/0x980 [ 242.467477] ? __might_fault+0xe0/0x1d0 [ 242.467506] ? __fget_light+0x29d/0x390 [ 242.467525] ? fget_raw+0x20/0x20 [ 242.467541] ? lock_downgrade+0x980/0x980 [ 242.467555] ? __lock_is_held+0xbc/0x140 [ 242.467581] ? __might_sleep+0x95/0x190 [ 242.467636] SyS_epoll_ctl+0x12e4/0x1ab0 [ 242.467645] ? SyS_epoll_ctl+0x12e4/0x1ab0 [ 242.467705] ? SyS_epoll_create+0x240/0x240 [ 242.467712] ? __lock_is_held+0xbc/0x140 [ 242.467747] ? find_held_lock+0x39/0x1d0 [ 242.467795] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 242.467812] ? kernel_read+0x120/0x120 [ 242.467830] ? wait_for_completion+0x7b0/0x7b0 [ 242.467862] ? __lock_is_held+0xbc/0x140 [ 242.467934] ? __sb_end_write+0x9e/0xd0 [ 242.467969] ? fput+0xd2/0x140 [ 242.467987] ? SyS_write+0x184/0x220 [ 242.468015] ? SyS_read+0x220/0x220 [ 242.468039] ? do_fast_syscall_32+0x156/0xf9d [ 242.468067] ? SyS_epoll_create+0x240/0x240 [ 242.468083] do_fast_syscall_32+0x3ee/0xf9d [ 242.468126] ? do_int80_syscall_32+0x9d0/0x9d0 [ 242.468150] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 242.468172] ? lockdep_sys_exit+0x47/0xf0 [ 242.468187] ? syscall_return_slowpath+0x2ad/0x550 [ 242.468220] ? sysret32_from_system_call+0x5/0x3b [ 242.468256] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.468301] entry_SYSENTER_compat+0x51/0x60 [ 242.468310] RIP: 0023:0xf7f88c79 [ 242.468317] RSP: 002b:00000000f778408c EFLAGS: 00000296 ORIG_RAX: 00000000000000ff [ 242.468329] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000000001 2017/12/01 20:56:48 executing program 7: r0 = syz_open_dev$mice(&(0x7f0000df7000)="2f6465762f696e7075742f6d69636500", 0x0, 0x206042) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000000)="0868a90f898d1cdce6a1dc0b", 0xc) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f000086b000)=0x0, &(0x7f00003c0000-0x4)=0x4) openat(0xffffffffffffff9c, &(0x7f0000bac000-0x8)="2e2f66696c653000", 0x0, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000f9b000-0x8)="2e2f66696c653000", 0x141046, 0x0) syz_open_dev$evdev(&(0x7f0000f7a000)="2f6465762f696e7075742f6576656e742300", 0x0, 0x101002) utimensat(r1, &(0x7f000061c000-0xe)="2e2f66696c65302f66696c653000", &(0x7f00009df000)={{0x77359400, 0x0}, {0x77359400, 0x0}}, 0x0) wait4(0x0, &(0x7f0000da8000-0x4)=0x0, 0x1000001, &(0x7f0000a2b000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f00009aa000-0x8)={0x0, 0x0}) write$evdev(r1, &(0x7f000051c000-0x70)=[{{r2, r3/1000+10000}, 0x3, 0x7fff, 0x8}, {{0x0, 0x0}, 0x6, 0x2, 0x20}, {{0x0, 0x2710}, 0x4, 0x8b900, 0x8000}, {{0x0, 0x7530}, 0x0, 0x2, 0x7fff}, {{0x0, 0x0}, 0x10001, 0x3f, 0x3cb7}, {{0x0, 0x0}, 0x8000, 0xfffffffffffffff9, 0x400}, {{0x0, 0x0}, 0x7fff, 0x0, 0x703}], 0x70) clock_gettime(0x0, &(0x7f00005cc000)={0x0, 0x0}) select(0x40, &(0x7f0000b39000+0x488)={0xffffffff80000000, 0xb42, 0x5, 0x4, 0xa0, 0x6, 0x101, 0x1000}, &(0x7f0000cb0000)={0x9, 0x0, 0x0, 0x7, 0xff, 0x4, 0xffffffff, 0x851}, &(0x7f00001e9000)={0x7, 0x3ff, 0x929c, 0x400, 0xa27, 0x100000001, 0x0, 0xeeac}, &(0x7f0000f64000)={r4, r5/1000+30000}) r6 = getpid() setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000c6000)={0x7, {{0xa, 0x2, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x6cec15b0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) move_pages(r6, 0x1, &(0x7f00004bc000)=[&(0x7f00004de000/0x2000)=nil], 0x0, &(0x7f0000a09000)=[0x0, 0x0, 0x0], 0x6) link(&(0x7f0000f1f000)="2e2f66696c65302f66696c653000", &(0x7f0000cca000)="2e2f66696c65302f66696c653000") ftruncate(r1, 0x3) 2017/12/01 20:56:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000bf6000)={0x0, 0x0}) close(0xffffffffffffffff) 2017/12/01 20:56:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000bf5000)={0x0, 0x0, 0x0}, 0xc) ptrace$peekuser(0x3, r3, 0x8) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) ioctl$DRM_IOCTL_MARK_BUFS(r2, 0x40186417, &(0x7f00005be000-0x18)={0x2, 0x8001, 0xad2, 0xd285, 0x1, 0x9}) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000ce9000)=[@in={0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x10) 2017/12/01 20:56:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$bt_sco(r2, &(0x7f0000904000-0x8)={0x1f, {0x1ff, 0x1ff, 0x8, 0x200, 0x3f, 0x6}}, 0x8) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) r2 = getpgrp(0xffffffffffffffff) r3 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r4 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r4, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r3) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000396000-0x10)={r6, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r8 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r8, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f000055d000)={r7, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r5, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) modify_ldt$read(0x0, &(0x7f0000b20000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69) sched_setparam(r2, &(0x7f0000dce000-0x4)=0x0) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) r3 = mmap$binder(&(0x7f000063e000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x18) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00004bd000-0x18)={r3, 0x0, 0x0, 0x0}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) fcntl$addseals(r0, 0x409, 0x2) r1 = syz_open_dev$vcsn(&(0x7f00001e0000)="2f6465762f7663732300", 0x2, 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000aff000-0x8)={0x0, 0x6}, &(0x7f0000930000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000b45000)={r2, 0xd, "80536ba0bffa78b73a3c1226b7"}, &(0x7f0000348000)=0x15) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) close(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl(r1, 0x3ff, &(0x7f0000b0c000-0x33)="91c46657b4f534881796af609a14062d5f278cec5de11a7fbcc620eeb4ccdaac98c18521e283ddcf010aa08e403e60b7575c21") io_setup(0xffffffff, &(0x7f0000191000)=0x0) io_submit(r3, 0x1, &(0x7f0000892000-0x4)=[&(0x7f0000137000)={0x0, 0x0, 0x0, 0x6, 0x3ed7d81d, r1, &(0x7f000064b000-0x1000)="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", 0x1000, 0x5, 0x0, 0x0, r1}]) 2017/12/01 20:56:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x17, 0xa, 0x2, &(0x7f0000677000)={0x0, 0x0}) setsockopt$inet_int(r1, 0x0, 0x3f, &(0x7f00000d0000-0x4)=0x4, 0x4) perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xd34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) fstat(0xffffffffffffffff, &(0x7f0000346000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00004b2000-0x11)="2f6465762f7667615f6172626974657200", 0x80, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000603000-0x4)=0x5, 0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f000014d000)={0x0, @in6={{0xa, 0x0, 0x3, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x1f, 0x81, 0x0, 0x8}, &(0x7f0000cfb000-0x4)=0xa0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00007c1000)={r3, 0x129c}, 0x8) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000161000+0x8ff)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") socketpair$inet6_sctp(0xa, 0x20001, 0x84, &(0x7f0000630000)={0x0, 0x0}) setsockopt$sock_str(r4, 0x1, 0x19, &(0x7f0000dad000)="63747228646573335f65646529000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x40) bind$alg(0xffffffffffffffff, &(0x7f000004c000)={0x26, "736b636970686572000000000000", 0x5, 0x0, "6c72772873657270656e742900000000000000000000000000008400000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000941000-0x8c)={r3, @in={{0x2, 0x0, @rand_addr=0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r6 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x296, 0x2, 0x0, 0x0, 0x0, 0x81, 0x0, 0xc, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r5, 0x80045400, &(0x7f0000869000)=0x0) perf_event_open(&(0x7f0000594000-0x78)={0x4020000002, 0x78, 0xdc, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, r6, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000333000-0x38)={0x0, 0x0, &(0x7f0000d1a000)=[{&(0x7f0000ba7000)=[{0x14, 0x1d, 0x20000000000003ff, 0x0, 0x0, "0e"}], 0x14}], 0x1, &(0x7f0000f63000)=[], 0x0, 0x0}, 0x0) [ 242.468336] RDX: 0000000000000014 RSI: 0000000020bf6000 RDI: 0000000000000000 [ 242.468343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.468349] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 242.468354] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2017/12/01 20:56:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000b9c000-0x8)={0x3, 0xfffffffffffffff9}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockname$packet(r1, &(0x7f0000d3b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000f55000)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000959000)={{{@in6=@loopback={0x0, 0x0}, @in=@loopback=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000444000)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000773000-0xe8)={{{@in=@multicast2=0xe0000002, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1, 0x81, 0x2, 0xffff, 0xd, 0xa0, 0x0, 0x0, r2, r3}, {0x10e, 0x100, 0x7ff, 0x4, 0xffff, 0xfff, 0x5, 0x24000}, {0x401, 0x3, 0x8, 0x7}, 0x75d, 0x4, 0x7ff, 0xb4687d37b7b5eb52, 0x90, 0x1}, {{@in=@rand_addr=0x80000001, 0x400, 0x1}, 0x11, @in=@local={0xac, 0x14, 0x0, 0xaa}, 0x40, 0x5, 0x0, 0x7f, 0x5, 0xff, 0x418}}, 0xe8) 2017/12/01 20:56:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000012, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e6, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f000086f000-0x9)="2f6465762f73672300", 0x4, 0x200000) ioctl$VT_WAITACTIVE(r1, 0x5607) socket$inet(0x2, 0x2000000000000010, 0x9) getresgid(&(0x7f0000d16000)=0x0, &(0x7f0000fe7000)=0x0, &(0x7f00000ce000-0x4)=0x0) perf_event_open(&(0x7f000001d000)={0x1000000002, 0x78, 0xd4e5, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$inet6(r0, &(0x7f0000380000-0x1c)={0x0, 0x0, 0x0, @loopback={0x0, 0x0}, 0x0}, &(0x7f000020c000-0x4)=0x1c) socket$inet_tcp(0x2, 0x1, 0x0) r2 = dup(r1) perf_event_open(&(0x7f0000001000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1b, &(0x7f0000493000-0x1000)="", &(0x7f0000000000)=0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000fed000)=0x4, &(0x7f0000d8a000)=0x4) r3 = socket(0x10, 0x802, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000086000)={0x9, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00004bf000+0xb22)={{0xfffffffffffff7ef, 0x1, 0x1, 0x400, 0xfffffffffffffffa, 0x5}, 0xee22, 0x2, 0x81, 0x1000, 0xff, "1cc6e5639a4765fa77ac6c7d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) write(r3, &(0x7f0000e38000)="240000001a0025f01201800422fcff0e020000000004000000aee90000000000000000b8", 0x24) bind$inet(r0, &(0x7f000098a000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000ecb000)=0x0, 0x2) r4 = creat(&(0x7f00001ee000)="2e2f66696c653000", 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000019000-0xc)={0x0, 0x6, 0x0}, &(0x7f00008a1000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000085000-0x8)={r5, 0x7fff}, &(0x7f0000c3a000-0x4)=0x8) connect$inet6(r0, &(0x7f00008e1000)={0xa, 0x2, 0x4, @loopback={0x0, 0x1}, 0xfffffffffffffff8}, 0x1c) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00008f5000)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f000001e000)={r6, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f000081a000)={r7, 0x0}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x2) sendto$inet(r0, &(0x7f000084e000)="43", 0x1, 0x0, &(0x7f000069b000-0x5)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2017/12/01 20:56:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000f3d000-0x4)=0x0, &(0x7f00009fd000)=0x4) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000c11000)=0x4, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) ioctl$TIOCGSID(r0, 0x540f, &(0x7f0000501000)=0x0) perf_event_open(&(0x7f0000b68000-0x78)={0x2, 0x78, 0x8001, 0xb0, 0x3f, 0x100000000, 0x0, 0x9, 0x81d8, 0x3, 0x8, 0x7f, 0x10000, 0x1c, 0x0, 0x7, 0x6, 0x5, 0x49d6, 0xc00, 0x9, 0x4, 0x1, 0xffffffffffffffff, 0xd8d, 0x1, 0x0}, r4, 0x1ff, r3, 0x0) 2017/12/01 20:56:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f000028f000-0x24)={@generic="5d72ee278ddb98c5cc6bc1fe60a9baa9", &(0x7f0000b99000)=@ethtool_cmd={0x2f, 0x13, 0x401, 0x6, 0x3, 0x5, 0x7, 0xdc7, 0x80, 0x80000000, 0x6, 0x5, 0x1, 0x2, 0x80, 0x2d0, [0xfffffffffffffff9, 0x4c]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) r2 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r3 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r3, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r2) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000396000-0x10)={r5, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r7 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r7, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f000055d000)={r6, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) modify_ldt$read(0x0, &(0x7f0000b20000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x69) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r1, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f000003e000-0x8)={0x0, 0x0}) getpgrp(0x0) mlock2(&(0x7f0000636000/0x1000)=nil, 0x1000, 0x1) 2017/12/01 20:56:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f0000cd6000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000f1e000-0xc)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:48 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000bf6000)={0x0, 0x0}) close(r0) 2017/12/01 20:56:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$mouse(&(0x7f0000a0a000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x1, 0x1) r2 = syz_open_dev$mouse(&(0x7f0000661000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0xffff, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000180000-0x8)={0x0, 0x0}) perf_event_open(&(0x7f00003a3000-0x78)={0x1, 0x78, 0x5, 0x1000, 0xff, 0x400, 0x0, 0x8000, 0x8, 0x8, 0x9, 0x3, 0x2, 0x1f, 0x0, 0x2, 0x4, 0x6, 0xb9d, 0x4088, 0x42, 0x4, 0x3, 0x80, 0x800, 0x8, 0x0}, r3, 0x5, r1, 0x6) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) rt_sigprocmask(0x1, &(0x7f0000485000)={0x6}, 0x0, 0x8) r4 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000bf6000)={0x0, 0x0}) close(r4) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) pwritev(r2, &(0x7f0000802000)=[{&(0x7f0000f5e000)="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", 0xfb}, {&(0x7f000015a000-0x3e)="2ced8e5a8f7e0ba8205efc78c6ab575fb60b0ee7a619936dde7f9fbeb56896b417158d1d254a6917a437e05797df1438fb696744a4ff3e739591bab783cc", 0x3e}], 0x2, 0x0) 2017/12/01 20:56:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000be4000)={0x0, 0xe4, "3a140469bfc11973d1967cc86303e0909c868c9aa320cc2321ab50de43ef9227029a7b0e186da0e46c9443646ad8a3445873a8fcedeb64f4b28ee52d5155b94c1943e9309235522c64d5f649da277dbff8a673d9f08d93ce5635e095b672aeabe3a7f0d21643a6fccd60845d4afaf26d57406c6f9d22b9f4c2bc0d68e3b259f1f5c22ff210ff3744c68dbde7e72209e2a05edfcef66b876b77bc1726c120e97f63b9cfcbd68348aca7ac434e8f75a320d726a75f565c65497063630b7f90a41eec76f936eb9a0f4507739b4fe6bb9505f818245b90c4323df995b4eb4459a5510f48d8f4"}, &(0x7f0000f40000)=0xec) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000724000-0x8c)={r3, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r4) 2017/12/01 20:56:48 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) r3 = mmap$binder(&(0x7f000063e000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x18) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00004bd000-0x18)={r3, 0x0, 0x0, 0x0}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) r2 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r3 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r3, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r2) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000396000-0x10)={r5, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r7 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r7, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f000055d000)={r6, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000f6c000-0x4)=0x0) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:48 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r3 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r3) r4 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000463000)={0x0, r5, 0xfffd, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40086436, &(0x7f0000a02000-0x8)={r6, 0x100000001}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r7, 0x0) accept4(r7, 0x0, &(0x7f000063a000-0x4)=0x0, 0x0) getsockname$unix(r7, &(0x7f0000823000)=@file={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000310000-0x4)=0x3b) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2017/12/01 20:56:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r1, &(0x7f0000dbc000-0x48)=[{&(0x7f0000967000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x91}, {&(0x7f0000be1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x29}, {&(0x7f0000b6e000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x75}, {&(0x7f0000477000)="00000000000000", 0x7}, {&(0x7f000058b000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x68}, {&(0x7f0000802000-0xc6)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc6}, {&(0x7f0000594000)="0000000000000000000000000000000000000000000000000000000000000000", 0x20}, {&(0x7f0000675000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x9d}, {&(0x7f0000292000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x6a}], 0x9) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = creat(&(0x7f000024c000)="2e2f66696c653000", 0x40) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f00009d9000-0x1a0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x8001, 0x4, 0x0, 0xffffffffffffad02, 0x0, 0xf000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xae8, 0x0}) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000a21000-0x6d)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x9, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) close(r2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) [ 243.136824] binder: 9361 RLIMIT_NICE not set [ 243.162173] binder: 9361 RLIMIT_NICE not set 2017/12/01 20:56:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = dup3(r0, r0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) clock_gettime(0x0, &(0x7f0000767000)={0x0, 0x0}) futimesat(r1, &(0x7f00009e0000-0x8)="2e2f66696c653000", &(0x7f0000308000)={{r3, r4/1000+10000}, {0x0, 0x0}}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000712000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000d64000-0x4)=0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000178000-0x8)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f0000807000)=[{&(0x7f0000c4a000)="fcc9afb18dc15fe645cf58df565bdbaf7fbf15305928113381c1ccef00444243d1e6b196da2d60d76ede2e5d4e2b207cec6dc65443d1ef768f7428f3f9427cebd1e9815c6679860f1b984682ca6964f173ab901e8a4c13a014f395edd971475371719139bccba06138270cee7cc1658d940636a908eea90e3cf888b274a24ef90409929f8134a9ec33c2ab41acba0e1034572259cbadc1e65f3249b2d5486316a110e55b5e61879f33aae1337bd32128965fb6128d2c", 0xb6}, {&(0x7f00003ed000-0xee)="ae25da6be49b633fb430e07d6ecba7ce0003b8f7b00d1595d08056c497db9f8145eb3eb075f5b165244036bcf62a1aeccdc4ede4ffe47e0037da3347881f68eebe21ec832567b754505f9a2e3904af165dd83ae13fc93c7b7c95c156478d587dd6255ad3248164f92a34c3e7d34cf492636cc8a846246182382374d180a492ffd9ad2d6e100f136f61d052e95d1773e1bd375ead548e1641f50463677273104ad468f8babaabc0c4d408badf48f240586ae3234c6fd1306937ac95bb2df4067d42cf1177d83b40e9de99da04edb438c6e837d1ec48ec7161d30bf1d1cba62885674e149dc06a254ce488bebec11e", 0xee}], 0x2, 0x0) 2017/12/01 20:56:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) 2017/12/01 20:56:48 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) r2 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r3 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r3, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r2) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000396000-0x10)={r5, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r7 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r7, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f000055d000)={r6, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:48 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000408000)={0x0, 0x7fffffff, 0x3, 0xdd85, 0x80000001, 0x4, 0x9763, 0x0, {0x0, @in={{0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x4, 0x5, 0x1, 0x5}}, &(0x7f000064f000-0x4)=0xb8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00004a9000-0x8)={r1, 0x27}, &(0x7f0000a00000-0x4)=0x8) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r3 = memfd_create(&(0x7f00008d7000-0x1)="00", 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) close(r2) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000406000)=@req={0x80, 0x80000000, 0x589, 0x2}, 0x10) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) [ 243.183455] binder_alloc: 9357: binder_alloc_buf, no vma [ 243.198938] binder: 9357:9361 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:48 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x22) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000848000)={0x6, 0x9}) name_to_handle_at(r2, &(0x7f0000289000-0x8)="2e2f66696c653000", &(0x7f000001c000)={0xb7, 0x6, "323da4358d4910cf9fd196aaf153fb8e0015eb716ae4c8fafc0ae993c2d9238f0dc735acdf885f8af935c079cb42c067bcac2593605e983da3b41b9c3ce7cbba201a289d528ab2fc84c9ff706b52a9e36662eccd1ccd3c1747ea3121136aff3214a91e3ec8cfb6644aac42cbf0a13044a83a79c0f01efc1aee6109be3058af26661d5582c744650c6d2a0b2363cb6df08e644502952db089519361dd2bbf2bb3bdbe326ecec84d9101ed63ecab50d1"}, &(0x7f00006ca000-0x4)=0x0, 0x0) pwritev(r2, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:48 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$ipx(r0, &(0x7f00009ce000)={0x0, 0x0, 0x0, "000000000000", 0x0, 0x0}, &(0x7f0000dea000)=0x10, 0x80800) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f000054e000)={0x0, 0x0, 0x0}, 0xc) stat(&(0x7f00004c0000)="2e2f66696c653000", &(0x7f0000910000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000474000-0xc)={0x0, 0x0, 0x0}, &(0x7f00001e2000)=0xc) setresgid(r2, r3, r4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r5, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:48 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x2) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r1, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f000003e000-0x8)={0x0, 0x0}) getpgrp(0x0) mlock2(&(0x7f0000636000/0x1000)=nil, 0x1000, 0x1) [ 243.291229] binder_alloc: 9357: binder_alloc_buf, no vma [ 243.305187] binder: 9357:9361 transaction failed 29189/-3, size 0-0 line 2870 [ 243.330327] binder: release 9357:9361 transaction 434 in, still active 2017/12/01 20:56:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) dup2(r2, r2) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) bind$bt_sco(r1, &(0x7f00001c5000)={0x1f, {0x0, 0x80, 0xf9f, 0x0, 0x5a, 0xc773}}, 0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:49 executing program 4: r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000d93000-0xc)={0x0, 0x1c, &(0x7f000001e000)=[@in6={0xa, 0x1, 0x736c, @loopback={0x0, 0x1}, 0x80}]}, &(0x7f0000a7f000)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000e88000)={r2, 0x81}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r3 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r3) r4 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000463000)={0x0, r5, 0xfffd, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40086436, &(0x7f0000a02000-0x8)={r6, 0x100000001}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r7, 0x0) accept4(r7, 0x0, &(0x7f000063a000-0x4)=0x0, 0x0) getsockname$unix(r7, &(0x7f0000823000)=@file={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000310000-0x4)=0x3b) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2017/12/01 20:56:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) r2 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r3 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r3, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r2) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000396000-0x10)={r5, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r7 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r7, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f000055d000)={r6, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000e77000)={r1, &(0x7f0000ba3000)="", &(0x7f00001f0000)="", 0x2}, 0x20) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 243.337142] binder: send failed reply for transaction 434 to 9357:9369 [ 243.343862] binder: undelivered TRANSACTION_COMPLETE [ 243.349999] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/01 20:56:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) socket$inet_sctp(0x2, 0x0, 0x84) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00004f2000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_map={0x1000, 0x0, 0x8, 0xff, 0x5, 0xff}}) 2017/12/01 20:56:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) mmap(&(0x7f0000001000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000000d000-0x5)={0x0, 0x0}) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000014000)={r3, &(0x7f0000013000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001000-0x1)={0x1}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r4, &(0x7f0000015000-0x1)="23"}, 0x10) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000f76000-0x4)={0x5, 0x0, 0x8000}, 0x4) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) 2017/12/01 20:56:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000b24000-0x6)={0x7, 0x80, 0xf6df}) [ 243.433765] binder: 9419 RLIMIT_NICE not set 2017/12/01 20:56:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0xc56b, 0x100000001, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000b7b000-0xc)="2f6465762f72666b696c6c00", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000b13000)="2f6465762f7161745f6164665f63746c00", 0x2000043, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() perf_event_open(&(0x7f0000001000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x666, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt(r1, 0x2000000000010d, 0x200000000010, &(0x7f00001b0000-0xab)="00000000", &(0x7f0000000000)=0x4) r2 = gettid() perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x4000000000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$sndtimer(&(0x7f00001b0000-0xf)="2f6465762f736e642f74696d657200", 0x0, 0x200303000) mmap(&(0x7f0000000000/0xfd2000)=nil, 0xfd2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, &(0x7f000046f000)="0300ffff00000000", 0x8) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000b1d000-0x12)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0xa}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000d56000)="02000000020001000000be8c5ee18c88010001000000000001da1e03a38a3cdcc3f7b933d898055bf74852bb6a8807567f59dba67e2147b35504006fcd67a1e20100672f2163e0209cee4a5acb3da483f0a4ae97e170b6c88ebbff060100000001000000b121ec1474d710f542506b00ec008bc5cfb7b3e7ec7ee87cccfff6ba000000024f0298e9e9f55406aa10ddfdff036a00000000d791a2ffe3c5732c1adb8afc5bd8c2d17fdea21b541068393d22b5affa00041ad0d2c03eef6795de42e384", 0xc2) sendto(r3, &(0x7f0000910000)="120000001200e7ff0104e90009149b00f99b", 0x12, 0x20040040, 0x0, 0x0) r5 = syz_open_dev$tun(&(0x7f0000da5000)="2f6465762f6e65742f74756e00", 0x0, 0x106) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000574000)={@generic="600194020000000a0000000608cebd30", @ifru_addrs=@generic={0xb, "dc4b3a01f1d0973e8675682cc9b3"}}) ioctl$TUNSETPERSIST(r5, 0x400454cb, &(0x7f00009ac000-0x4)=0x5) r6 = dup3(r0, r4, 0x80000) fchmodat(r6, &(0x7f00009ba000)="2e2f66696c653000", 0x400000000000002) 2017/12/01 20:56:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) timerfd_settime(r1, 0x0, &(0x7f00002af000+0x3b7)={{0x0, 0x0}, {0x77359400, 0x0}}, &(0x7f0000dd5000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) splice(r2, 0x0, r1, 0x0, 0xffffffffffffffff, 0x4) socketpair(0xf, 0x6, 0x4, &(0x7f00009d7000)={0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r2 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r2, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000396000-0x10)={r4, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r6 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r6, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f000055d000)={r5, 0x363, 0x0, 0x3, 0x1}, &(0x7f0000b3f000)=0x18) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 243.468214] binder: 9419 RLIMIT_NICE not set [ 243.485885] binder_alloc: 9415: binder_alloc_buf, no vma [ 243.497469] binder: 9415:9419 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f000013a000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f00009fc000-0x6)={0x3, 0x81}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xe2f1, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00003bb000)={{{@in6=@loopback={0x0, 0x0}, @in=@remote={0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000096000-0x4)=0xe8) stat(&(0x7f00003fd000)="2e2f66696c653000", &(0x7f000056c000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000404000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x3, 0x1b2, 0x3, 0x8, 0x1, 0x80, 0x80, 0x3, r4, r5}, {0xffff, 0xe4de, 0x8, 0xbf, 0xa2, 0x9, 0x5, 0x2}, {0x2, 0x101, 0x0, 0x5}, 0x2, 0xff, 0x8001, 0x1, 0x1e, 0x3}, {{@in=@multicast2=0xe0000002, 0xaa, 0x2efa}, 0x2, @in=@multicast2=0xe0000002, 0x8000, 0x7, 0x2, 0x6, 0x8, 0x764, 0x200}}, 0xe8) fcntl$getown(r3, 0x9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000e66000-0x4)=0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000c0d000)={0x0, 0x0}, 0x800) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00009e6000-0x10)=@req={0x3ff, 0x0, 0x2, 0x7}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000f60000-0xf3)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, {[]}}, @igmp={0xc75bc5054bbfb4ad, 0x0, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, ""}}}}}, 0x0) 2017/12/01 20:56:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r2 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r2, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000396000-0x10)={r4, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) r5 = socket$nfc_llcp(0x27, 0x3, 0x1) writev(r5, &(0x7f0000b44000)=[{&(0x7f0000f86000)="2adf811a73183342fcd710c16ff3f33197dce7977e5ca05b9dc814d33344913d47cc0ff0800233facb989ced6b738e1d0e53383fc2f8078c92fe1e6604aed9e3c692cf819f8b910a06f8374508144f", 0x4f}, {&(0x7f0000850000)="82d79161c9d7786006010000006b145a71710d4db2b40301000000000000efc5c6918f", 0x23}, {&(0x7f00000fd000)="2d7aafe91b66f5ab5dd374b6baeec26d81827fb56996ddb3c05e1018bab9d43b5ef6b48b615c774b3185af43e228547a3765643f6b20a061c9fc22417bee4e8135fd71380e89e2791f9fbfa2fdd91a35b1cb6a365ee60493", 0x58}, {&(0x7f0000409000)="acfa61f3c20aef3ad43a0e0e0c9fde89d54763213d64b62fc805ab0af0b0f729cd078895ab139f2d79748f4d55054070e16e386df414e04f661db89d0b01707c0d7b36bd0a043f1c2a48caf3357d2566b12a26a650f3074c383c808cdb1e2b7f10e3d64b1cacc6da06be52dce7eae2d2230d6334a3f0f15d66b623b2246dc1a4858a733f9ee8959d90414f0750824437d49d4a92c0c9a897ecbc54038b", 0x9d}, {&(0x7f0000528000)="1aad33a601082860bd82804e0a5332f83080a9cde2a265eb93de2e04ea38", 0x1e}], 0x5) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000cd3000)={0x0, 0x0}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000208000-0x20)={@generic="cf3e0a086ed84d15addcbdfbdad44f71", @ifru_flags=0x200}) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) [ 243.590460] binder_alloc: 9415: binder_alloc_buf, no vma [ 243.596760] binder: 9415:9419 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000d1d000-0x14)={0x0, r1, 0x5, 0x1, 0x0}, 0x14) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r2, 0x4010aeab, &(0x7f00005f2000)={0xfffffffffffffeff, 0x0}) 2017/12/01 20:56:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000652000+0xa37)="2e6465616400", &(0x7f0000d5d000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000bad000-0xf)="c6656d30757365726367726f757000", 0xfffffffffffffffe) add_key$keyring(&(0x7f0000831000-0x8)="6b657972696e6700", &(0x7f0000eeb000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, r3) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00005a5000)={0x0, 0x0}, &(0x7f00009c3000)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f000080b000)={r4, @in={{0x2, 0x3, @rand_addr=0x81, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000e50000-0x4)=0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) getitimer(0x3, &(0x7f000095e000)={{0x0, 0x0}, {0x0, 0x0}}) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) mmap(&(0x7f0000001000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000000d000-0x5)={0x0, 0x0}) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000014000)={r3, &(0x7f0000013000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001000-0x1)={0x1}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r4, &(0x7f0000015000-0x1)="23"}, 0x10) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000f76000-0x4)={0x5, 0x0, 0x8000}, 0x4) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) 2017/12/01 20:56:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r3 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r3) r4 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000463000)={0x0, r5, 0xfffd, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40086436, &(0x7f0000a02000-0x8)={r6, 0x100000001}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r7, 0x0) accept4(r7, 0x0, &(0x7f000063a000-0x4)=0x0, 0x0) getsockname$unix(r7, &(0x7f0000823000)=@file={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000310000-0x4)=0x3b) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2017/12/01 20:56:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r2 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r2, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000396000-0x10)={r4, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) socket$nfc_llcp(0x27, 0x3, 0x1) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 243.660679] binder: release 9415:9419 transaction 438 in, still active [ 243.667482] binder: send failed reply for transaction 438 to 9415:9431 [ 243.674210] binder: undelivered TRANSACTION_COMPLETE [ 243.683654] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/01 20:56:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000165000)={0x10, 0x0}) memfd_create(&(0x7f0000337000-0x1)="00", 0x3) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000d6000)={0x1459ea9, 0xda, 0x4, 0x4, 0x1, [{0x100000000, 0x9, 0x7, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0}]}) close(r1) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000d31000+0xcd6)=0x0) fcntl$setown(r0, 0x8, r2) ioctl$sock_ifreq(r1, 0x0, &(0x7f0000984000-0x28)={@generic="c2b3e1597a3ce58ed99a86390908aa01", @ifru_flags=0x2000}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000b5e000)={0x3f, 0x4, 0xcb, 0x6, 0x0}, &(0x7f00006f2000-0x4)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000ae5000-0xc)=@sack_info={r3, 0xe8ef, 0x7}, 0xc) r4 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x2, r4) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f00004b0000)=0x1) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) [ 243.780697] binder: 9495 RLIMIT_NICE not set 2017/12/01 20:56:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r2 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r2, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000396000-0x10)={r4, 0x4, 0x1, 0x1}, &(0x7f0000c93000-0x4)=0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) pwrite64(r1, &(0x7f0000246000)="c4dfefa47ff0922565bc910d9477b47b64291a8f14947b2aadc8278abfcbcb145e06bf981e990a804f5e006a6ad64bebe597c942875980e9b66e175519759d5180d3ebac7ebb5f87ebce79037f3674", 0x4f, 0x0) 2017/12/01 20:56:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) mlockall(0x1) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000fbe000-0x10)={0x40000000000d, 0x20000000}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) shutdown(r3, 0x0) [ 243.814125] binder: 9495 RLIMIT_NICE not set 2017/12/01 20:56:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x20000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) mincore(&(0x7f000020e000/0x1000)=nil, 0x1000, &(0x7f0000a5b000)="00000000") ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000efa000)={{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x1, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, {0x2, 0x2, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000fc4000)=0x0, &(0x7f0000233000-0x4)=0x4) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000a4b000)={0x0, @in6={{0xa, 0x1, 0x3, @loopback={0x0, 0x1}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x7}, &(0x7f0000222000-0x4)=0x98) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000fdd000)=@sack_info={r3, 0x9, 0x1}, &(0x7f00007e5000-0x4)=0xc) r4 = add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00002f2000-0x8c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", "0000000000000000000000000000000000000000000000000000000000000000", [0x0, 0x0], 0x0}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) getsockopt$SO_PEERCRED(r5, 0x1, 0x11, &(0x7f0000366000)={0x0, 0x0, 0x0}, 0xc) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000b0a000-0x4)=0x0) add_key(&(0x7f00007a3000-0xa)="77797a6b6c6c657200", &(0x7f0000a84000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, r4) kcmp(r6, r7, 0x1, r0, r2) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f00007ea000-0x10)={0x4, 0xffff}) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) mmap(&(0x7f0000001000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000000d000-0x5)={0x0, 0x0}) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000014000)={r3, &(0x7f0000013000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001000-0x1)={0x1}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r4, &(0x7f0000015000-0x1)="23"}, 0x10) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000f76000-0x4)={0x5, 0x0, 0x8000}, 0x4) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) 2017/12/01 20:56:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) [ 243.844137] binder_alloc: 9490: binder_alloc_buf, no vma [ 243.850140] binder: 9490:9495 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:49 executing program 2: pipe2(&(0x7f00006dd000-0x8)={0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000000000)=0x0, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000)=0x9, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000e65000)={r1, r0, 0x7, 0x1, r1}, 0x14) r2 = epoll_create(0x6) r3 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000988000)=0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000bf6000)={0x0, 0x0}) close(r3) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x101, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002e8000-0x30)={0x0, 0x8, &(0x7f0000e3b000)=[@generic={0x8, 0x5, 0x1f, 0x1}, @generic={0x7, 0x3, 0xb4, 0x3}, @generic={0x41, 0x80, 0x7, 0x100}, @generic={0x800, 0x0, 0x1f, 0x80000001}, @map={0x6, 0x1, 0x4, r1}, @map={0x40000000, 0x400, 0x7, r1}, @map={0x81, 0x80000000, 0x5, r1}, @generic={0x5, 0x76e, 0x9, 0x1}], &(0x7f000071d000-0xa)="2f6465762f7663732300", 0x1, 0x2f, &(0x7f0000608000-0x2f)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xdad, 0x1}, 0x30) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r2 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r2, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) rt_sigpending(&(0x7f00007c4000-0x8)={0x0}, 0x8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000696000-0x4)=0x0) perf_event_open(&(0x7f0000d17000-0x78)={0x4, 0x78, 0x7, 0x8001, 0x9c, 0x4, 0x0, 0x3, 0x40008, 0xb, 0x7, 0x6, 0x2, 0x1e, 0x0, 0x7, 0x0, 0x2, 0x6, 0x1, 0x9263, 0x5, 0x5, 0xffff, 0x8000, 0xffffffffffff6fe3, 0x0}, r4, 0x6, r2, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000391000-0xc)={0x40000004, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) [ 243.955346] binder_alloc: 9490: binder_alloc_buf, no vma [ 243.964089] binder: 9490:9495 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:49 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r3 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r3) r4 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000463000)={0x0, r5, 0xfffd, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40086436, &(0x7f0000a02000-0x8)={r6, 0x100000001}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r7, 0x0) accept4(r7, 0x0, &(0x7f000063a000-0x4)=0x0, 0x0) getsockname$unix(r7, &(0x7f0000823000)=@file={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000310000-0x4)=0x3b) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2017/12/01 20:56:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00008ea000)={0x200, 0x1, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1, "d64616f69feea270", "dcbcd6d0f6bff7fa24c703fb5947a1e933fe4d8ab88aa0a4037f98ec0a893245", 0x7fffffff, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r2 = pkey_alloc(0x0, 0x0) pkey_free(r2) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f000066a000-0x10)={&(0x7f00007d7000/0x3000)=nil, 0x3000}) readv(r1, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) userfaultfd(0x800) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) syslog(0x2, &(0x7f0000d66000-0x1000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000877000-0xb)="2f6465762f6877726e6700", 0x69d1933e438df679, 0x0) ioctl$EVIOCSABS0(r1, 0x401845c0, &(0x7f00006f7000)={0x8, 0x1, 0xffff, 0x0, 0x3, 0x42}) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r3 = memfd_create(&(0x7f0000ed8000)="00", 0x0) r4 = add_key(&(0x7f0000823000)="6365706800", &(0x7f00005e6000)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r5 = add_key$keyring(&(0x7f0000af2000)="6b657972696e6700", &(0x7f000081a000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) unlinkat(r2, &(0x7f0000631000-0x8)="2e2f66696c653000", 0x0) keyctl$reject(0x13, r4, 0x3, 0x5, r5) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000e7e000)={0x0}, &(0x7f0000e14000)=0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000ea8000)=0x6, &(0x7f0000189000)=0x2) add_key$keyring(&(0x7f0000c0d000)="6b657972696e6700", &(0x7f0000f24000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, r4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f000025a000)=[@in={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x1f, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1000}, @in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @rand_addr=0x53d2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x7, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x487c7c57}, @in6={0xa, 0x3, 0x1ff, @loopback={0x0, 0x1}, 0x7}], 0x84) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r6, 0xae45, 0x1e9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) ioctl$TIOCGETD(r6, 0x5424, &(0x7f0000dfc000-0x4)=0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r2 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r2, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:49 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:49 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001000-0x12)="2f6465762f696e7075742f6d6f7573652300", 0x3fffffffffc, 0x101001) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00006cf000)=0x3, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x804b8) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x4, 0x800000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) add_key$keyring(&(0x7f0000949000)="6b657972696e6700", &(0x7f000018d000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) close(r2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bind$netlink(r2, &(0x7f00003ac000-0xc)={0x10, 0x0, 0xac, 0xffffffffffffff2e}, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000b0000)={r0}) [ 244.008743] binder: release 9490:9495 transaction 442 in, still active [ 244.015537] binder: send failed reply for transaction 442 to 9490:9512 [ 244.022262] binder: undelivered TRANSACTION_COMPLETE [ 244.027781] binder: undelivered TRANSACTION_ERROR: 29189 [ 244.085259] binder: 9563 RLIMIT_NICE not set 2017/12/01 20:56:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r2 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r2, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f00001d2000-0x18)={0x2, 0x0, 0x400000000000, 0xffffffff00000001, 0x800, 0x6}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0xfffffffffffffffe, 0x0}) close(r2) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) fcntl$setpipe(r0, 0x407, 0x0) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f000025b000-0x28)={0xfffffffffffffffd, 0x1c, 0x0, 0xfffffffffffffffe, "5eab0fc58f5ff933f35433bf44e247fdb6a98dbea2a224ce534b83c9983ba3db"}) 2017/12/01 20:56:49 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) mmap(&(0x7f0000001000/0x13000)=nil, 0x13000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000000d000-0x5)={0x0, 0x0}) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000014000)={r3, &(0x7f0000013000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001000-0x1)={0x1}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) mmap(&(0x7f0000014000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r4, &(0x7f0000015000-0x1)="23"}, 0x10) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000f76000-0x4)={0x5, 0x0, 0x8000}, 0x4) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) 2017/12/01 20:56:49 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000717000-0x8)={0x0, 0x0}) r1 = epoll_create(0x804b8) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) fsync(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) close(r2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00001d7000-0x14)={0x0, 0x8, 0x8001, 0x55b, 0x7, 0xaaa}, &(0x7f0000d5f000)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00009f9000)={r3, 0x7f}, &(0x7f00000ec000-0x1)=0x8) [ 244.107669] binder: 9563 RLIMIT_NICE not set [ 244.127233] binder_alloc: 9557: binder_alloc_buf, no vma [ 244.133350] binder: 9557:9563 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:49 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000827000)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000493000)={r2, 0x1}) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:49 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r2 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r2, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r1) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:49 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)="2f6465762f7573626d6f6e2300", 0x0, 0x40040) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) rt_sigreturn() readv(r1, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) openat$hwrng(0xffffffffffffff9c, &(0x7f00001d5000-0xb)="2f6465762f6877726e6700", 0x20000, 0x0) r3 = fcntl$getown(r2, 0x9) sched_rr_get_interval(r3, &(0x7f0000a05000-0x8)={0x0, 0x0}) getpgrp(0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 2017/12/01 20:56:49 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000ce7000-0xb)={0xe, 0xfffffffffffffffc, 0x3, 0x8, 0x2, 0x3, 0x400, 0x8, 0x0, 0x401, 0xfffffffffffffffa}, 0xb) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000413000-0xc)={0x8, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) [ 244.215357] binder_alloc: 9557: binder_alloc_buf, no vma [ 244.227107] binder: 9557:9563 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r3 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r3) r4 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) bind$bt_hci(r1, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000463000)={0x0, r5, 0xfffd, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40086436, &(0x7f0000a02000-0x8)={r6, 0x100000001}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r7, 0x0) accept4(r7, 0x0, &(0x7f000063a000-0x4)=0x0, 0x0) getsockname$unix(r7, &(0x7f0000823000)=@file={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000310000-0x4)=0x3b) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2017/12/01 20:56:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x7, 0x806, 0xa000000, &(0x7f00001bb000)={0x0, 0x0}) sendmsg$inet_sctp(r0, &(0x7f0000540000)={&(0x7f0000669000)=@in6={0xa, 0x1, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x7}, 0x1c, &(0x7f00001ba000-0x8)=[{&(0x7f0000870000)="670fc02068ad15ecac99f89020b4c93ba59267629a00aed0cf1a6123b08042e944d5664cff4552f95eb137e08f0b0bbc5d9baeca41f71ab1707bdd86caa0335f975a59b493f55b2c0947aa31d00d2880aa8e2444de465e2d38c308941b2f2d654529608d604be1478cd1e9c8622b2a405119c52465cd1a1dcac0e5403497135614c0c12831fe177c7449bdd697baee6a942b8e01a26e232ab6517cbbb4a24aeb0356e64601b9fa1d9548f5b7beff0a0ec27528a9fc243ff2716915ef8ec958da28993f3d2aa6ccec017d8f80f72c7343b4d273634813c50aee86b220b6ee9695060ba816f5495180e09bce", 0xeb}], 0x1, 0x0, 0x0, 0x4000010}, 0x8000) r1 = epoll_create(0x804b8) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) close(r2) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) ioctl$TIOCMSET(r1, 0x5418, &(0x7f000017b000)=0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r1 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r1, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x7) sendfile(r0, r1, &(0x7f0000a3a000-0x8)=0x0, 0x9) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r3, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000ad4000-0x10)={0x9, 0x0, 0x6af7, 0x0, 0x0}, &(0x7f000027d000)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00008f8000-0x6)={r4, 0x800}, 0x6) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00006ed000+0x20d)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f000039b000)={0x0, 0x2, 0x15c, 0x4, 0x0, 0x6, 0x7, 0xffff, {0x0, @in={{0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x80000001, 0x5, 0x7, 0x6}}, &(0x7f0000a26000-0x4)=0xb8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000c2f000-0xc)=@sack_info={r5, 0x7, 0x5}, 0xc) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00005eb000-0x8)={0x0, 0x80000001}, &(0x7f0000c28000)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000bc6000-0xa0)={r6, @in={{0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20, 0x3, 0x7ff, 0x100, 0x8}, 0xa0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000a5e000-0x4)=0x13, 0x4) [ 244.276655] binder: release 9557:9563 transaction 446 in, still active [ 244.283479] binder: send failed reply for transaction 446 to 9557:9577 [ 244.290584] binder: undelivered TRANSACTION_COMPLETE [ 244.290591] binder: undelivered TRANSACTION_ERROR: 29189 [ 244.338917] binder: 9618 RLIMIT_NICE not set 2017/12/01 20:56:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000bf5000)="2f6465762f7573626d6f6e2300", 0x5, 0x30003) 2017/12/01 20:56:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$TCSETA(r0, 0x5402, &(0x7f000073d000-0x14)={0x9, 0x4, 0x5, 0xc732, 0x4, 0x10000, 0x6, 0x5, 0xdfe, 0x9}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) eventfd2(0xe7, 0x80801) pipe(&(0x7f0000084000)={0x0, 0x0}) 2017/12/01 20:56:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) mq_timedreceive(r1, &(0x7f0000790000-0x49)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x49, 0x5dad, &(0x7f0000a0b000)={0x0, 0x0}) 2017/12/01 20:56:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000000d000-0x5)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000014000)={r3, &(0x7f0000013000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001000-0x1)={0x1}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r4, &(0x7f0000015000-0x1)="23"}, 0x10) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000f76000-0x4)={0x5, 0x0, 0x8000}, 0x4) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) [ 244.360782] binder_alloc: 9613: binder_alloc_buf, no vma [ 244.366464] binder: 9613:9631 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r1, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) mlock2(&(0x7f0000f41000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000218000)=@int=0x8001, 0x4) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) close(r1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:50 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001000-0xb)="2f6465762f6877726e6700", 0x80, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$llc(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000000000)=0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x804b8) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000ed2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000012e000-0x4)=0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:50 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000572000-0x9)="2f6465762f73672300", 0x0, 0x0) mlockall(0xfffffffffffffffe) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$SO_PEERCRED(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000a9b000-0xc)={0x0, 0x0, 0x0}, 0xc) mmap(&(0x7f0000fbe000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x800000000000) mmap(&(0x7f0000fbe000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$unix(r0, &(0x7f00006c8000-0x4a)=@file={0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000ec9000)=0x4e) mmap(&(0x7f0000bcc000/0x4000)=nil, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f000084e000-0x1)=0x0) mmap(&(0x7f0000fc0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00002b0000-0xd)="2f6465762f7573626d6f6e2300", 0x9, 0x10001) pipe2(&(0x7f00005dd000-0x8)={0x0, 0x0}, 0x80080800) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000975000-0x4)=0x2) r2 = syz_open_dev$sg(&(0x7f0000961000)="2f6465762f73672300", 0x0, 0x800) read$eventfd(r2, &(0x7f0000882000)=0x0, 0x8) bind$inet6(0xffffffffffffffff, &(0x7f0000710000-0x1d)={0xa, 0x0, 0xfffffffffffffffc, @loopback={0x0, 0x1}, 0x0}, 0x1c) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000040c000)="2f6465762f7667615f6172626974657200", 0x200000, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000eac000)="6b657972696e6700", &(0x7f00004b5000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r4 = add_key$user(&(0x7f000038b000)="7573657200", &(0x7f00003de000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000d6c000)="3116b042d3d2c390dee3a255ec4a8d9d652d9c3600000007cfb4c29da627ab9e5e0587e50ec159997396abc344a7d9f563a3e3af2d90a5dfcade859e3617cdf8f03fdf02218642ab83996f51a7b3f20108f152bfd57ac5a50be84a106249d0216d5cb8c41df97cd7d5032e9c632e4715a226907aabbfc5b3f2e96bf3039474801053b87fbf8674e10076be0bb4ae6947fd966b492b714be120eee3ad9ee2fa1bb060446cdfdb", 0xa6, r3) r5 = add_key$user(&(0x7f0000176000)="7573657200", &(0x7f00009d6000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000003e000)="fa", 0x1, r4) r6 = add_key$user(&(0x7f0000893000)="7573657200", &(0x7f0000be6000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000f29000-0x1000)="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", 0x27b, r3) r7 = request_key(&(0x7f000099b000)="7573657200", &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000dde000)="2f6465612f7675746f66730719", 0x0) keyctl$dh_compute(0x17, &(0x7f00004c9000-0xc)={r5, r6, r7}, &(0x7f00005cd000)="", 0x250, &(0x7f000010c000)={&(0x7f0000bf5000-0xd)={"67686173682d67656e65726963"}, &(0x7f00004e3000-0x40)="", 0x3f, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/01 20:56:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 244.470583] binder: BINDER_SET_CONTEXT_MGR already set [ 244.478316] binder: 9613:9631 ioctl 40046207 0 returned -16 [ 244.494586] binder: 9631 RLIMIT_NICE not set [ 244.518704] binder: 9613:9618 transaction failed 29189/-22, size 0-0 line 2755 [ 244.535959] binder: 9613:9650 transaction failed 29189/-22, size 0-0 line 2755 2017/12/01 20:56:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000463000)={0x0, r4, 0xfffd, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40086436, &(0x7f0000a02000-0x8)={r5, 0x100000001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r6, 0x0) accept4(r6, 0x0, &(0x7f000063a000-0x4)=0x0, 0x0) getsockname$unix(r6, &(0x7f0000823000)=@file={0x0, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, &(0x7f0000310000-0x4)=0x3b) 2017/12/01 20:56:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f000024e000+0x709)=@pic={0x8, 0x6, 0x10001, 0xfffffffffffffff7, 0x1, 0x1000, 0x7, 0x4, 0x8, 0x4, 0x4, 0x200, 0x10000, 0x4, 0x5, 0x7}) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000000d000-0x5)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000014000)={r3, &(0x7f0000013000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001000-0x1)={0x1}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r4, &(0x7f0000015000-0x1)="23"}, 0x10) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000f76000-0x4)={0x5, 0x0, 0x8000}, 0x4) 2017/12/01 20:56:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x5) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000e65000)={0xffff, 0x0, 0x10000, 0x1f}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000240000-0xa)={0x9, r2, 0x10001, 0xe51}) r3 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r3, &(0x7f000046a000-0x8)=0x101, 0x7) ioctl$TIOCEXCL(r1, 0x540c) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) renameat(r1, &(0x7f0000987000)="2e2f66696c653000", r3, &(0x7f0000b0f000-0x8)="2e2f66696c653000") setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) mq_timedsend(r4, &(0x7f0000857000-0x1a)="6f836183819ff1f9beb205062531ffe44bc8a5af0c29ef0de0f7", 0x1a, 0x4, &(0x7f0000a1e000-0x8)={0x77359400, 0x0}) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pwritev(r0, &(0x7f00004dd000)=[{&(0x7f00001da000)="3d94f49aa433fe2972fd589c6ac9a351dc11a3620e52794d799edd2ad816564c316ae5b9c3c8e5b5b022b66bea50f57736f7fc4b44a6126588d2be48646bbbf980f0bd012207b2adbe3ad18d58cba8c0b44f6e4b55dac4465c44b16634fef976de0c99b6f183b27864ae70d468dfe3785aa3324ed35f80bc78806daed0bfd81932f18304b5a22122f84fcf8f49ae1c0277c9f7f795a8d07bb3eae336464ccb5ed535b691921efa6223eaab99918c8abaae2ff284f7c0ecc2e928d0142acecc0588dab0daba0cf69d4f413313a7496e00f7867e3ac66fe59409677b9c24af688d8ffa93506b1a418c74c241f297e8e01194555e1d46", 0xf5}, {&(0x7f0000af1000)="ad066cccc239b7b54cf99dd74733f8a45ba2d140b92aab46018397cc3f7119960098a177a66c97cb15388e5b0f9e7c7766f00cecbc40496298eab053daa317f08054cd20773b6c2930b870485647e2c7f20c30a5050501173d0ab949c1b5e7c45ba578eca9af5554e8981ba62f223015b3b2cdf2650b826f36225f7c8d0743cd1b3149e8e96831f11565fdefd58d71d25e2549125132412e08e2a1", 0x9b}], 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000988000)={0x0, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) getpeername$packet(r0, &(0x7f0000cb2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random="000000000000", [0x0, 0x0]}, &(0x7f0000bb5000)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00009b4000)={@loopback={0x0, 0x1}, 0x800, r3}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) inotify_init1(0x0) readv(r1, &(0x7f0000f1d000)=[{&(0x7f000055c000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f00000f7000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f00001fa000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f000071f000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe5}, {&(0x7f00002d6000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x52}, {&(0x7f0000b79000-0xe5)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe5}], 0x6) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000f4c000-0x4)=0x5, 0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00004a3000-0x14)={r1, r1, 0x6, 0x1, r1}, 0x14) [ 244.575753] binder: undelivered TRANSACTION_ERROR: 29189 [ 244.609707] binder: 9681 RLIMIT_NICE not set 2017/12/01 20:56:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nfc_raw(0x27, 0x1, 0x0) pwritev(r0, &(0x7f0000d88000)=[{&(0x7f00004d8000)="ddacca74d8d75c8d230895ac0f24bcab50325e3124b5273dd45744f5f7653cb584dde5882803e6ff3450", 0x2a}, {&(0x7f00005b5000)="", 0x0}, {&(0x7f0000552000-0xac)="78f6371d2c3bcd29d6de2642ca867b1d4f667faced0c3602734329d7b5d9e84f2311ece291035655982789a8f0dc14c29f270434742b1ab5ca34205871705db6b0e5687976a6387471745ef18eac70927f5dd85f70e05e1d729864e2e938c368b632358fb15f565a15406788ddffa5e8da3d642cafd045d8cc12c39832f4f310934a3a9e4801205e19b23d23151ec55f299692b92cc69ea6916b41642266d90e50b6c6cf307d4e568bad5e6d", 0xac}, {&(0x7f0000b8b000-0x4)="bc9a5a3b", 0x4}], 0x4, 0x0) r1 = epoll_create(0x804b8) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r3 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x800, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r3, &(0x7f0000c54000)={&(0x7f0000dfa000)=@alg={0x0, "0000000000000000000000000000", 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58, &(0x7f00000b8000)=[{&(0x7f0000703000-0x61)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x61}, {&(0x7f0000cc3000-0x35)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x35}, {&(0x7f0000ede000-0x19)="00000000000000000000000000000000000000000000000000", 0x19}, {&(0x7f000016f000-0xc6)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc6}, {&(0x7f0000079000-0xa2)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xa2}, {&(0x7f0000b97000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}, {&(0x7f0000032000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1000}], 0x7, &(0x7f0000ada000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x96, 0x84}, 0x40000000) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000328000)=0x0, &(0x7f000019b000)=0x4) r4 = add_key$keyring(&(0x7f0000aac000)="6b657972696e6700", &(0x7f0000e93000)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key(&(0x7f0000f0b000)="6365706800", &(0x7f000082f000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00000b5000)="5a8e477421b7ca0a02664bf5253ca69f45cadb7b29d1d2533d83d9bb9ada6ede81d8dc63ac9eed6d79d5b7ee9270bd70d6b5aebe2464209ec9c03a583d9bb861917aac8ed458a4ec3446d9783a2c58292f831456bcf429a73e7fad5d392b70e116db861957db622f33e82e969880611ceceb831e7c6e718db69db7845f62994fab5a34c24a9d70fa9bc0a96cd7b2de5d00559080aa7840f3d5beac74fb9a3c63bdcc0c7a6a9d6c142a51b24efd22eae41ae65321e7f1d95f232f6f13d66c12305a9f8e4c51390c0202e37912b28e314b529e1c93b04c4fb800d066", 0xdb, 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f000042c000-0x6)="2e6465616400", &(0x7f0000b78000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, r5) r6 = add_key$keyring(&(0x7f0000893000)="6b657972696e6700", &(0x7f0000af7000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, r6) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000c1f000-0x8)={0x4, &(0x7f00008f0000-0x10)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r7 = syz_open_dev$mice(&(0x7f00007e9000)="2f6465762f696e7075742f6d69636500", 0x0, 0x6204c0) ioctl$sock_inet_udp_SIOCOUTQ(r7, 0x5411, &(0x7f000054b000)=0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00002bf000)={0x0, @in6={{0xa, 0x1, 0x4, @loopback={0x0, 0x1}, 0x464}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x7, 0x1f, 0x9, 0x2, 0x5b, 0x7, 0x101, 0x40, 0x400, 0x1ff, 0x1, 0x7c5b, 0x200, 0x4, 0xffff]}, &(0x7f0000c77000)=0x108) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000fca000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a13000-0x4)=0x20) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000f99000-0xc)=@assoc_value={r8, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) memfd_create(&(0x7f000068d000)="6e6f6465766574683000", 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000627000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x7f, 0x8, 0x0, 0x308, 0x1000, 0x3382209c1652830b, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x0}) 2017/12/01 20:56:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 244.639388] binder: 9681 RLIMIT_NICE not set [ 244.649744] binder_alloc: 9677: binder_alloc_buf, no vma [ 244.655549] binder: 9677:9681 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000ff1000-0x8)=0x8000) syz_open_dev$usbmon(&(0x7f0000000000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) [ 244.711470] binder: BINDER_SET_CONTEXT_MGR already set [ 244.720549] binder: 9677:9710 ioctl 40046207 0 returned -16 [ 244.722718] binder: 9710 RLIMIT_NICE not set [ 244.744602] binder_alloc: 9677: binder_alloc_buf, no vma 2017/12/01 20:56:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000000d000-0x5)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000014000)={r3, &(0x7f0000013000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001000-0x1)={0x1}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r4, &(0x7f0000015000-0x1)="23"}, 0x10) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 244.763982] binder: 9677:9697 transaction failed 29189/-3, size 0-0 line 2870 [ 244.785573] binder_alloc: 9677: binder_alloc_buf, no vma [ 244.785598] binder: 9677:9720 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ppoll(&(0x7f0000209000-0x20)=[{r0, 0x80, 0x0}, {r1, 0x0, 0x0}, {r0, 0x580, 0x0}, {r1, 0x2, 0x0}], 0x4, &(0x7f0000525000)={0x0, 0x1c9c380}, &(0x7f0000702000)={0x2}, 0x8) memfd_create(&(0x7f0000200000-0x1)="00", 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00007b1000)=0x0, &(0x7f000073c000)=0x4) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) setsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000726000)="25de1595667ac040", 0x8) socket$inet_tcp(0x2, 0x1, 0x0) getrlimit(0x4, &(0x7f0000dd9000)={0x0, 0x0}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00006a4000)="2f6465762f7161745f6164665f63746c00", 0x0, 0x0) write$fuse(r3, &(0x7f0000e63000)={0x30, 0x1, 0xa, @fuse_notify_retrieve_out={0x4, 0x7, 0x423, 0x9}}, 0x30) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) dup3(r1, r2, 0x80000) 2017/12/01 20:56:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f000096b000-0x18)={0xaa, 0x0, 0x0}) 2017/12/01 20:56:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) utimes(&(0x7f0000433000)="2e2f66696c653000", &(0x7f00007b2000-0x10)={{0x77359400, 0x0}, {0x0, 0x0}}) sendto(r1, &(0x7f0000620000)="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", 0x1000, 0x4000, &(0x7f000008f000)=@ethernet={0x306, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x101) 2017/12/01 20:56:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000463000)={0x0, r4, 0xfffd, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40086436, &(0x7f0000a02000-0x8)={r5, 0x100000001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r6, 0x0) accept4(r6, 0x0, &(0x7f000063a000-0x4)=0x0, 0x0) 2017/12/01 20:56:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 244.810721] binder: undelivered TRANSACTION_ERROR: 29189 [ 244.816614] binder: release 9677:9681 transaction 454 in, still active [ 244.823356] binder: send failed reply for transaction 454 to 9677:9697 [ 244.830070] binder: undelivered TRANSACTION_COMPLETE [ 244.835197] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/01 20:56:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000000d000-0x5)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000014000)={r3, &(0x7f0000013000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001000-0x1)={0x1}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r4, &(0x7f0000015000-0x1)="23"}, 0x10) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) 2017/12/01 20:56:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 244.884626] binder: 9749 RLIMIT_NICE not set 2017/12/01 20:56:50 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000+0x42b)="2f6465762f766373612300", 0x0, 0x8402) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x804b8) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000e32000-0xc)={0x0, 0x0, 0x0}, 0xc) fcntl$setown(r1, 0x8, r3) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:50 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00003ff000-0xb)="636c6561725f7265667300") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000934000)={0x0, 0x0, 0x0, 0x1e482000000000, 0x0}, &(0x7f00000dd000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000f5f000)={r2, 0x3}, &(0x7f0000850000)=0x8) keyctl$session_to_parent(0x12) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_setup(0x33b4, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) io_submit(r3, 0x8, &(0x7f0000fe5000-0x20)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x3, r1, &(0x7f0000fff000-0xb1)="c3c8de37351cd8a33674c313a7544fe3315642b5ee4e079dc8b87851b90179ff35b06c29b9056c1ff5a61c20e4ba7b37b79a2029b96fb47b7fac73742d2cc45e87461733dbb9eb95b546dc7b7a0727f79eb47669c119192723fe92c4fcd6c4504e56649bf3a10032d58914dfefa6657438f3672ede361d11482bd52a76843421c1802cce4435c132ba14daff25e45ab00efbb74126fdebd94009e35ae048f9f3c3bb0d1a81e02d7e046a4eac32c5084e34", 0xb1, 0x200, 0x0, 0x1, r1}, &(0x7f0000f9c000)={0x0, 0x0, 0x0, 0xf, 0x7, r1, &(0x7f0000f9e000)="f877a649ad99012bfa3a682ffed6c35b357a2172b0795a3bc617242bb4e9e3dfe6b88d06b22d610d5a172005764a966ac41094d4aa70be486130c30580d90975714d87e40a977c06deef3d3c613dca8db6d3107bb681c10ea03d1bf502962f99e387f1598ef2108f395d19dcd1891680bc8c4fbeb2395312503487276718675ab6bd88aaca78efa24749a5bc62bc23", 0x8f, 0xfff, 0x0, 0x0, r1}, &(0x7f0000fef000)={0x0, 0x0, 0x0, 0x1, 0x9, r0, &(0x7f0000000000)="3cd2da44cf1b7feb30afb01d393f9edae202f8cc35b27c29", 0x18, 0x100, 0x0, 0x1, r1}, &(0x7f0000001000-0x40)={0x0, 0x0, 0x0, 0x7, 0x1, r1, &(0x7f0000001000-0x88)="0b0fc45fe1183a8587b7292290c087109b05bc3fd7ecf7a532b9ef4f949ac1fa169fb5f7a81ee6fd558e3a9bda756c04da0d717e48c1df5cf3272e9693fc4b8bc351dff95cbebbf253e76c1736c893b28396cbc81ac7da8041a7b37ef2750df03caea1f6c82a106c90f7ef574390a558861677fb28d2e0e2ff9fee6d6c90c872e89bd7db859608b3", 0x88, 0x200, 0x0, 0x1, r1}, &(0x7f0000f98000)={0x0, 0x0, 0x0, 0x7, 0xffffffff, r1, &(0x7f0000fba000)="aa2a1494f632d65aec084967eb3e1d3f01412c41b8775a86a606152ca4f26a5916e9364c188bc6d985615b67abb6d715d8f41543a41b12f459b00fed9ef15c8362e84468fbcc5cf54fb716ff233c38ffbe9586eb80195e7f3d484921037df5832fc9b4da54fa2113d34e5f87dc0d7d41cf82c7dd2cba2bb02c01888c9a3749885d7c08302196252623514c02c100a329aae7b0", 0x93, 0xe, 0x0, 0x1, r1}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x9, r0, &(0x7f0000fe6000-0x39)="1f5ac79f0f0f1c37e90926c600d3c7c67211caf30900944c2e9b27dcbcc4c1e6577b731ebe297f43b3f7e0fbe19f1e269362b25f7141c379bc", 0x39, 0x20, 0x0, 0x1, r1}, &(0x7f0000faa000-0x40)={0x0, 0x0, 0x0, 0x1, 0x2, r1, &(0x7f0000000000)="d9f01ca12ceedd97ac3212d1669ed1532b0fbc86d2b8f4b01d936afc87809fb32df2ecbb112433", 0x27, 0x0, 0x0, 0x0, r1}, &(0x7f0000001000-0x40)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000fa7000)="d6948d908b41b721f5bf0fc8", 0xc, 0xff, 0x0, 0x1, r1}]) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000002000-0xd)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0x7d5) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, &(0x7f00003dd000-0x4)=0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r6, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r6, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000621000-0x10)={0x40, 0x8, 0x5, 0x204}) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="4d47907f6a76c0b898fb20b542ebf27273de532f1a73081e6f54b460df834ee2da5369c49f4c56d24e234239ff4fc1d910084a656948747f4fed66cca4107d2e8f25f6f39a3efc36f3d9da221df7e201ba8e5fe61c954c572b62b6c2160f6d147d39080f12636de8ec7b8b92df0355fd739566212dab7fb2e00ab1c94c7ee09afa4267e4398efa139ff58263c01c36dc961b6cea893ba6cd41efbff8e204430ae1e0cbe988310d1cae01a1f4649b68bbbf31bcc0c66f74ab869888f8d02fdafaf0440807b782c474476178", 0xcb) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x804b8) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f0000356000)=0x3b) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 244.906187] binder: 9749 RLIMIT_NICE not set [ 244.918899] binder_alloc: 9742: binder_alloc_buf, no vma [ 244.925806] binder: 9742:9749 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:50 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:50 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00005eb000)="2f6465762f7663732300", 0xae4, 0x181000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000caf000-0xe7)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") r1 = epoll_create(0x804b8) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) close(r2) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) 2017/12/01 20:56:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000750000-0x4c)={0x5c, 0x8, 0x6dd0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getpeername(r1, &(0x7f0000051000-0x14)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000659000-0x4)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00003e4000)={r2, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) 2017/12/01 20:56:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$sndtimer(&(0x7f0000bc9000)="2f6465762f736e642f74696d657200", 0x0, 0x400080) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x4}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) [ 244.991353] binder: BINDER_SET_CONTEXT_MGR already set [ 245.001177] binder: 9742:9778 ioctl 40046207 0 returned -16 [ 245.013206] binder: 9778 RLIMIT_NICE not set 2017/12/01 20:56:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:50 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000000d000-0x5)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000014000)={r3, &(0x7f0000013000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001000-0x1)={0x1}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r4, &(0x7f0000015000-0x1)="23"}, 0x10) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) [ 245.038705] binder_alloc: 9742: binder_alloc_buf, no vma [ 245.053890] binder: 9742:9759 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:50 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000463000)={0x0, r4, 0xfffd, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40086436, &(0x7f0000a02000-0x8)={r5, 0x100000001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) listen(r6, 0x0) 2017/12/01 20:56:50 executing program 0: modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:50 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000594000-0x70)={[{0x1, 0x8, 0xffff, 0x1f, 0x8, 0x0, 0x11a5, 0x5, 0x1f, 0xaab, 0x400, 0x400, 0x3}, {0x0, 0x2, 0x7, 0x80000001, 0x12, 0x9, 0x3f, 0x1, 0x80000001, 0x1, 0x0, 0x9, 0x9}, {0x6, 0xfff, 0x6, 0x2040000, 0x8753, 0x9, 0x7ff, 0x9, 0x84, 0x6, 0xfffffffff68178c7, 0x3f, 0xff}], 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2017/12/01 20:56:50 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:50 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(r1, 0x400, 0x1) [ 245.083702] binder: release 9742:9749 transaction 459 in, still active [ 245.090506] binder: send failed reply for transaction 459 to 9742:9759 [ 245.090525] binder: undelivered TRANSACTION_COMPLETE [ 245.090532] binder: undelivered TRANSACTION_ERROR: 29189 [ 245.128256] binder: 9812 RLIMIT_NICE not set [ 245.155507] binder: 9812 RLIMIT_NICE not set [ 245.168296] binder_alloc: 9811: binder_alloc_buf, no vma [ 245.173944] binder: 9811:9812 transaction failed 29189/-3, size 0-0 line 2870 [ 245.194814] binder: BINDER_SET_CONTEXT_MGR already set [ 245.200354] binder: 9811:9823 ioctl 40046207 0 returned -16 [ 245.208043] binder: 9812 RLIMIT_NICE not set [ 245.212645] binder_alloc: 9811: binder_alloc_buf, no vma [ 245.218209] binder: 9811:9812 transaction failed 29189/-3, size 0-0 line 2870 [ 245.244863] binder: release 9811:9812 transaction 463 in, still active [ 245.251582] binder: send failed reply for transaction 463 to 9811:9823 [ 245.258283] binder: undelivered TRANSACTION_COMPLETE [ 245.263390] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/01 20:56:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f0000328000)="2f6465762f7663732300", 0x80000000, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) sendto$llc(r1, &(0x7f0000bfc000)="aaf8baa4420317fb4726ef5f65cdf8c85222aec4d804d1f20778ea83c644277c36eb72a19e7cd9cb25e711c557e31ec51e5ff57ba086ffe7bfb6dd462493a921d442103bae2b2719a12f5429815237f75d4498291b0559341865d0509a123f66d114a7f34a4cb773b67d0e98d4455659c07e2029d770ca7a8ef3bcf527a389b3f9c99ae7b08f5e05826bcbe581e8d15571a7b2790d970694457f7f654b805313b117096dff7600c40de5ce5762d032d2978420", 0xb3, 0x8040, &(0x7f0000b70000)={0x1a, 0x17, 0x2, 0x100, 0x3, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [0x0, 0x0]}, 0x10) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000474000-0x4)=0x0) ptrace$setregs(0xf, r3, 0x676, &(0x7f0000d2b000)="6303a173031702ac6635f70ccad78b6dfab56f7ce47b2e766ae749cf6b338df634a10dd326e39cd603c158cbbce387fbcce7ee6d5f58c6b18af1e6aee5759e0ad32121e92744bde8431e82dcd07af38ed53d079522fc1f56") pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000000d000-0x5)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000014000)={r3, &(0x7f0000013000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001000-0x1)={0x1}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r4, &(0x7f0000015000-0x1)="23"}, 0x10) 2017/12/01 20:56:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x5) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f00006c0000-0x1e)={0x22e, 0x5, 0x0, "62c2dc17a06f", "fc59f11272537ac66668a7b72d84a4f8"}) r1 = epoll_create(0x804b8) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r3 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) preadv(r3, &(0x7f0000785000-0x8)=[{&(0x7f0000031000-0xc3)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xc3}], 0x1, 0x0) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x100000001) 2017/12/01 20:56:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00005dd000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) listen(r1, 0x1ff) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000463000)={0x0, r4, 0xfffd, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40086436, &(0x7f0000a02000-0x8)={r5, 0x100000001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b"}, 0xc) 2017/12/01 20:56:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x1ff) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) prctl$setfpexc(0xc, 0x2) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 245.570680] binder: 9842 RLIMIT_NICE not set 2017/12/01 20:56:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x9d6b) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40046432, &(0x7f0000466000-0x4)=0x531) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x30, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r0, &(0x7f0000dec000-0x28)=[], 0x0) futex(&(0x7f0000013000-0x4)=0xfffffffeffffffff, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f0000b01000-0x4)=0x6, 0x5) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000722000-0xb0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000") ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000b9c000-0x4)=0x0) timer_create(0x3, &(0x7f00002e3000-0x58)={0x0, 0x28, 0x0, @tid=r3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00005bc000+0xf1b)=0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f000040b000-0x1)="00", 0x3) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000b2d000-0x1a0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x100, 0xffffffff7fffffff, 0x0, 0xfffffffffffffc00, 0x14003, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x0}) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f00001af000-0x18)={0xf004, 0x5000, 0x5, 0x0, 0x1}) close(r1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00009b4000)={0x0, 0x100000001, 0x20}, &(0x7f000011c000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000834000)={r3, 0x2f2, 0x0, 0xf6, 0x2}, &(0x7f0000174000-0x4)=0x18) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) dup3(r0, r0, 0x80000) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) [ 245.600400] binder: 9842 RLIMIT_NICE not set [ 245.618481] binder_alloc: 9833: binder_alloc_buf, no vma [ 245.626011] binder: 9833:9842 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000000d000-0x5)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000014000)={r3, &(0x7f0000013000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000001000-0x1)={0x1}, 0x1) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={0xffffffffffffffff, &(0x7f0000015000-0x1)="23"}, 0x10) 2017/12/01 20:56:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x800) memfd_create(&(0x7f0000ed8000)="00", 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000955000-0x4)=0x0) 2017/12/01 20:56:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x0, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000bf6000)={0x0, 0x0}) close(r0) r1 = inotify_add_watch(r0, &(0x7f0000296000)="2e2f66696c653000", 0x808) inotify_rm_watch(r0, r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) 2017/12/01 20:56:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x0) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00002f1000+0x333)={0xe, 0xffffffffffff8138, 0x2d1, 0xa37, 0x4, r1, 0xa61b838000000000}, 0x1c) get_mempolicy(&(0x7f0000a66000)=0x0, &(0x7f0000753000)=0x0, 0x3, &(0x7f0000d2d000/0x1000)=nil, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, &(0x7f0000745000)={0x2, &(0x7f0000844000-0x10)=[{0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0286429, &(0x7f000097f000-0x28)={r2, 0x2, &(0x7f0000c63000-0x8)=[0x2, 0x29a], &(0x7f000079b000-0x14)=[0x9, 0x5, 0x0, 0xf0e, 0x38e9], 0x10, 0x6, 0x0, &(0x7f0000baf000-0x18)=[0x80000000, 0x5, 0x0, 0x2, 0x6, 0x9], &(0x7f000021a000-0x10)=[0x4, 0x0, 0xffffffffffffff8e, 0x7], 0x0}) [ 245.684200] binder_alloc: 9833: binder_alloc_buf, no vma [ 245.692390] binder: 9833:9842 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x2, &(0x7f0000531000-0x8)={0x1}, 0x0, 0x8) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r1, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000481000-0x58)={0x100000000, 0x80, 0x8, 0x400, 0x1, 0x7ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000463000)={0x0, r4, 0xfffd, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40086436, &(0x7f0000a02000-0x8)={r5, 0x100000001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) [ 245.739128] binder: release 9833:9842 transaction 467 in, still active [ 245.745926] binder: send failed reply for transaction 467 to 9833:9853 [ 245.745947] binder: undelivered TRANSACTION_COMPLETE [ 245.745953] binder: undelivered TRANSACTION_ERROR: 29189 [ 245.784644] binder: 9907 RLIMIT_NICE not set 2017/12/01 20:56:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000e34000+0xb93)={[0x3, 0x4, 0x1b, 0x9, 0x100000001000, 0x100, 0x2, 0x10000, 0x4, 0x81, 0x5, 0x7, 0x1, 0x5, 0x0, 0x1], 0xf000, 0x2}) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000e6e000)={0x0, @in={{0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6c56, 0x2}, 0x98) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000d4e000-0xc)={0x0, @multicast2=0x0, @multicast1=0x0}, &(0x7f00000bb000-0x4)=0xc) socketpair$inet(0x2, 0xa, 0x6c, &(0x7f000087a000)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00005d0000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000681000-0x4)=0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000011a000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x2, 0xfff, 0x1, 0x5, 0x9, 0x20, 0x20, 0x0, r3, r4}, {0x0, 0x400, 0x9, 0x83, 0x0, 0x20000000000, 0x5, 0x0}, {0x0, 0x5, 0xaf, 0x8}, 0x3, 0x8, 0x263b, 0x0, 0x4, 0x3}, {{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x5, 0x0}, 0x2, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x0, 0x3, 0x7f, 0x2, 0x3c66, 0x9}}, 0xe8) 2017/12/01 20:56:51 executing program 2: r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000737000-0x6)={0x0, 0x7f}, &(0x7f0000e9b000-0x4)=0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={r2, @in={{0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x7f}, &(0x7f0000a6a000-0x4)=0x98) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000cd8000-0x11)="2f6465762f7161745f6164665f63746c00", 0x581100, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000985000)={0xc76e}, 0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) sendmsg$unix(r1, &(0x7f0000537000)={&(0x7f0000f9c000)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000bea000)=[{&(0x7f0000a5c000-0x13)="02456b24f2ede4d141258eaa97fda406ca6698", 0x13}, {&(0x7f0000749000-0x75)="eff22841c8237162e9f1fdc804797388dc2e5ff0a69d1cd2889895d2921fbb14250c6ceb5f5fea3b49d29ac5cffa1f0800000000000000aa019cac9c434e80cabe09ce892d8fcaabcec8030000000000000043ce3b181979186f6bf48178d99903ebfbc4e75828707fe68d59e694164ae9426cdfee", 0x75}, {&(0x7f0000971000-0xa9)="f3ad4680065fd846d598c435d7ba14eae06f6e4e9bcef7a40c19db98a2fbbef1dab259ccdb015c7c7b0d353fe2897b09414fbf0a9614315ef9741b056a815eae9f253d21fe9df4e736bff891de40768e1780252a0e04d791e178140044afedf36819e21b3c98e4a8787ad3b7d1a922f975ae618dd4caebb6648330e3862c0ca805a59cd771e524a1d572b4440caf352da72f4811c1c5a24b76ff6ce06dd4a272e1cba7bc64391b82ec", 0xa9}, {&(0x7f0000192000-0x8b)="59df05ecd4ea70482d4ab60ebd3dc153970614bc861a2643d830ba652ad2f2133e4d728a9b0789d3318c55b5e7c46e84051c1f42619d9bb02efa1ec3d2131e29183337eb612da29a4236cf0c0d958f84766c1036e124630ed73c78c3c20111d0be6e56702297a7cfddd2ff951e26e92c6864a6d5d6f653fc7b4805baf522e0dfca7570d60f9b3b021f4095", 0x8b}, {&(0x7f0000e23000)="16a8a91a49eb8811b0e4ddae9eb434b0f118dbe4ba86780ca0d00fedb00000000000000000a9738998b2015685ee335f72", 0x31}, {&(0x7f0000fcc000-0x8a)="f6dbbfa4d43ec241dd22965681b20d89d024cb0669adfdcc817c139021c356df068bf2a26978a9bdf8d83571db12990e89c04e567a869a8246e74934ed26b04f3d4f5dedba2fbcd75cd1fe12eab242a9c1c105b844c91003a8e64585eae6fdaba8d0dad6d4c030916afe59c7870dff8af9b215f9afc717d1b56c4c0a9592ca3ecbfba1d5983b955bacb3", 0x8a}, {&(0x7f000080a000-0x87)="3a0e86a296b94757682a4a456630317aab58c5e48a1f6ec49d157e01bcd73be1a175590b61ca40edeebc0733006469c4ae96cab6601e340e914cd34bee4970138637c60699bee7e2bb439c17aabef4038b5767ffeb8652aa295d285e3798e24392cd4da46506e6a8c5a623a16eebce9a514d80a3744ba45244e00e11f6f7e772e67256ccd91421", 0x87}], 0x7, 0x0, 0x0, 0x20000000}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_GET_FPU(0xffffffffffffffff, 0x81a0ae8c, &(0x7f0000da6000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000000d000-0x5)={0x0, 0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000014000)={r3, &(0x7f0000013000-0xd0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r4, &(0x7f0000015000-0x1)="23"}, 0x10) 2017/12/01 20:56:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f0000b2f000)={0x1, &(0x7f000039a000-0x8)=[{0x0, 0x0}]}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000543000-0xf)="2f6465762f73657175656e63657200", 0x80, 0x0) close(r1) io_setup(0x7, &(0x7f00002b9000)=0x0) io_cancel(r3, &(0x7f0000a90000-0x40)={0x0, 0x0, 0x0, 0x6, 0x54559b26, r2, &(0x7f0000b2a000-0xc6)="2e523417d83bf01b79c4f796301f15b03668c5ce0fc08f33808a1b38b93f9b44e889299c4edebd31ba6207a3fca4c4bad1addaebff18a6387614d30ac360552ebc154e12f1f87dcedac04229c16302052c9df8956c04c142f1e8792705851757e6efc8e294f105832376271780dcda7ffa919dea726f0bd3de0f6d1a57a2d6404811c30e64ca714524a36be4cce639f01eafbb0581e658e4332e47dc76441444525f3bb4a6f1146eb17879ef8e3bf4eab805d766bd3dc7b9e5c8dd63be60877480a4040c5ee1", 0xc6, 0x7fff, 0x0, 0x1, r1}, &(0x7f00004da000-0x20)={0x0, 0x0, 0x0, 0x0}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f00001ca000)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", &(0x7f00009c1000-0x4)=0x75) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 245.807561] binder: 9907 RLIMIT_NICE not set [ 245.816392] binder_alloc: 9906: binder_alloc_buf, no vma [ 245.825834] binder: 9906:9907 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create(0x804b8) r0 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r1 = memfd_create(&(0x7f0000ed8000)="00", 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a45321, &(0x7f0000f46000-0xa8)={{0xc000000000000000, 0x0}, "706f7274300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1, 0x0, 0x6, 0x2, 0x9, 0xcf5, 0x1, 0x0, 0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000621000-0x18)={0x0, 0x7f, 0x20, 0x4, 0x5}, &(0x7f0000c61000-0x4)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000e47000)={0x0, 0x5593aa35, 0x20}, &(0x7f00001e6000-0x4)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00005e8000-0x8)=@assoc_value={r2, 0x0}, 0x8) perf_event_open(&(0x7f000071f000-0x78)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x3) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10, 0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x526c80ce03098a6a, &(0x7f000003a000-0x8)={0x0}, 0x0, 0x8) chdir(&(0x7f0000fac000)="2e2f66696c653000") mkdir(&(0x7f00002df000)="2e2f66696c653000", 0x0) mount(&(0x7f00009d0000-0x8)="2e2f66696c653000", &(0x7f0000a09000)="2e2f66696c653000", &(0x7f000000c000)="72616d667300", 0x0, &(0x7f000036d000-0x1)="ad") r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000ae4000)="2f6465762f7667615f6172626974657200", 0x2005, 0x0) readlinkat(r3, &(0x7f0000c54000-0x8)="2e2f66696c653000", &(0x7f000097d000)="00000000000000000000000000000000000000000000", 0x16) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000c5c000)="2f6465762f6c6f6f702d636f6e74726f6c00", 0x1, 0x0) mount(&(0x7f0000500000)="2e2f66696c653000", &(0x7f00009f0000)="2e2f66696c653000", &(0x7f00002c5000)="0200800000", 0x20000, &(0x7f0000ffc000)="") mount(&(0x7f00009d4000)="2e2f66696c653000", &(0x7f0000f8b000)="2e2f66696c653000", &(0x7f0000c72000-0x7)="6372616d667300", 0x8000001000, &(0x7f00005da000)="") r4 = creat(&(0x7f0000a4a000)="2e2f66696c65302f66696c653000", 0x2000000002) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100000000000, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x1, 0xffffffffffffffff, 0x0) prctl$getreaper(0x2, &(0x7f00005a1000)=0x0) syz_emit_ethernet(0x3d, &(0x7f000006c000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x0}, [], {{0x4000000800, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr=0x0, @multicast1=0xe0000001, {[]}}, @igmp={0x21, 0x0, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, "080007f70be60600ffddff00000000e60100b0"}}}}}, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000012000-0x8)="2e2f66696c65302f66696c653000", &(0x7f0000e1f000-0x8)="2e2f66696c653000", &(0x7f0000e0f000-0xd)="656372797074667300", 0x20, &(0x7f000078a000)="") mount(&(0x7f00006aa000)="2e2f66696c65302f66696c653000", &(0x7f0000aad000-0xe)="2e2f66696c653000", &(0x7f00007ba000)="0700eb667300", 0x1002, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000151000-0x4)=0xe00000, 0x4) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f00006dd000)={0x10000000b}, 0x4) 2017/12/01 20:56:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000463000)={0x0, r4, 0xfffd, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40086436, &(0x7f0000a02000-0x8)={r5, 0x100000001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) listen(0xffffffffffffffff, 0x0) 2017/12/01 20:56:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000050d000-0x20)={{&(0x7f0000cf6000/0x2000)=nil, 0x2000}, 0x80000000001, 0x0}) readv(r1, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:51 executing program 3: sigaltstack(&(0x7f00004fb000/0x2000)=nil, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) writev(r0, &(0x7f00001ce000+0xdc4)=[{&(0x7f0000a37000-0xdd)="973efcc1b7362d329d9f7868d25b52d7753364e68bbce996ec4bd489ff166ed14fb8ffa4b3b8f54a14c49d008dbeb2f77cee88caafb6b8965ce1b2d11a57e72690c8004cfaeaa3d0dd5d3c467ef588b8ba599e81fe2bfd66eb9b178e2dc4d7de92f18ab9c48e1f2935f1d4213df492a60ec006259e85f02fbf5c72806669b05ca14a0a33fd1ba65927f3e51a193bd244edfa0c1dc7d6fee4901b8a6879adbe13436e58cbf8f2210b398d6b90cf25344e0d049fde8ab9afa94e3bad0d227111844de679c7ebb1b9bf1794462c6bec3d73885b700730fbdfe89663927061", 0xdd}, {&(0x7f0000d9f000-0x2b)="d7bcb6de55478cca9b1d457733b91bd994cdc4b171ac91d37b0844738907d0bf0baf040ac8be4e7014c43b", 0x2b}], 0x2) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) fsync(r0) r3 = fcntl$getown(r2, 0x9) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000a27000-0xe8)={{{@in=@multicast2=0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@loopback=0x0, 0x0, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00005a6000-0x4)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000dfb000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000995000)=0xc) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f000008a000)=0x0) getsockopt$SO_PEERCRED(r1, 0x1, 0x11, &(0x7f0000f4a000+0x325)={0x0, 0x0, 0x0}, 0xc) getgroups(0x9, &(0x7f0000028000)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0]) r9 = fcntl$getown(r2, 0x9) getresuid(&(0x7f00009f0000-0x3)=0x0, &(0x7f0000172000)=0x0, &(0x7f000064f000-0x4)=0x0) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f00000f3000)={0x0, 0x0, 0x0}, 0xc) ioctl$TIOCGSID(r1, 0x540f, &(0x7f000084f000-0x4)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000592000-0xe8)={{{@in=@rand_addr=0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00004ee000-0x4)=0xe8) getsockopt$SO_PEERCRED(r2, 0x1, 0x11, &(0x7f0000949000-0xc)={0x0, 0x0, 0x0}, 0xc) fcntl$getownex(r1, 0x10, &(0x7f0000895000-0x8)={0x0, 0x0}) r16 = getuid() ioprio_set$uid(0x3, r13, 0x8) r17 = getegid() sendmsg$netlink(r1, &(0x7f0000371000-0x1c)={&(0x7f0000f18000-0xc)={0x0, 0x0, 0x101, 0x6}, 0xc, &(0x7f00000d1000)=[{&(0x7f000092d000)=[{0xda, 0x2, 0x430, 0x9, 0xe0fc, "3e0093d69f9fa352a0755baf54c05ceccbb1649e8febc63e0614066af0843054d24c7e99bb9bf9667de950e629ce49665c79b9cb5de2125ab31ccc86cce2ca98cb1773beef1c65e0a137de5dec6c0c34ef47d15c3defeadd096228b4a2437a1eacad4a2fcd36b7bed4b7f3b0c7633a754daded2dcd44aee052be70972ab60983f5df53624fb9b92c1424304e6092475ea4f7f71965b994ab363c1ee1ae1d9a89fab1072a91df428085ecfff006d2d195ce34b1d94f0e7c8f2f122f2073f9ff079988d87da8b5f50bfdda"}, {0x8b, 0x10001, 0x400, 0x9e17, 0x6, "cc2dd44b142a680b3c72206d4307ad4ec84261552a0470e0a57e2e00e9547a2f1df14bab9ae7fc4d48e0e9a9cac6f882742dc5733e180b25fcc8322488254377889bfb8adac04f3e1d82d8b9a883d4078a41c8ad7f39faf33c9b47631857141613314f283e94e3750a03f31795e31792b6ba449c4c58ac5e97c096"}], 0x165}, {&(0x7f0000e16000-0x127)=[{0x84, 0x6, 0x200, 0xa6, 0x2, "65bf0ad8fbc94999bf87695f14d39d1ced29b72e47bb6fcc3974c03d801085ac8a429ed34550f7743c5b9f65267af6dca98144fd24e3fa31251c756682ecd312641e4ad250ab214dfd0b72b01f88e45a288abc8ab1a024b36e5a72c6f24a4297943cfb2276ea18f4c39ad58ac8309751f620c37a"}, {0x22, 0xe57c, 0xb00, 0xacf, 0x3, "7ab30de7fd807824180736d1a9602a3427ba"}, {0x81, 0x8000, 0x100, 0x0, 0x9, "5a925cb9bdf73034cf705e2fcdb6d3ae3e2bfc8f162e9abf3c76a65e8588e533bad422bbf127e21dfe54b90cffc0d79254ae811c8fbd4e602117258c5ae33f9ff921b94614567431d63f97b9d4230d180e8d1138298b77e99f7f61d3880f5f2588c24bb0736808eec6d8cd9efbfeff846a"}], 0x127}, {&(0x7f00007b3000)=[{0xf1, 0x9, 0x400, 0x8, 0x7, "48908fadf7d734cc945e4e5f4c989d759f3a2113cd1ca0481bdc1f89435be9b13780bf5d0db5b29fd66b0e4922384e6977dd68a646ad91504e691046a73978860bf97982c04afd0b8accf9b656ab6ea5f1fb46b5735c3c625e5864b28441ba78ab1dead02bebc9c28a762c92a8458c0136d843e802b1d06fff0509d740c377610d98cb70b9f464224d00cd8934172fde23e0af9c9d337ae1e03bba7b9e1dfc5a36480e05b807b3af8c55135f5251bcdb7b5c4c1b4604b79aa8d3df9d8e6ac65a8447e29645eb0098fc4bc5f5e9ec6b9d7bb7a95fda9244afe45d572b10eaf1d20f"}, {0xd6, 0xffffffffffffffff, 0x102, 0x7, 0x8, "3993e2f9754e065ad1921b9f420f386ac1219b80d7ccbac628ebd6c3aaf22f1f0dd30d691c9853df3142d21e5ce041816053f4d8e8d3dd1b711b979492fa2aa2db5604b2cab8ef71c22ab45e782bf237d4ef22ae613d1c75d426711ff3789cf47e4f88f0ddb088d08b1b577e338885c05bad30a80fd4d23ec6eb5b3d73b58614547e1527cdb75cb3e674fccb8e2a9a460d6b217cf4ef348612369860fc080aeb85e6c7389849bc6ea12b274de147204f52c0a6c10b2f44f78576d2c2207f6b159bad0cce3878"}, {0x4d, 0x5, 0x300, 0x3, 0x0, "97763d372f290956de22afa7e39bd14b28078ea749185e238953bb27188c924bc2978846b2663a032d3b804fbaf5a9be71bee609dd9dcce8907a92dec4"}, {0x1010, 0x8, 0x102, 0x3ff, 0x100000000, "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"}], 0x1224}, {&(0x7f0000bc1000)=[], 0x0}, {&(0x7f0000e69000-0x1155)=[{0x35, 0xffffffff, 0x0, 0xbeb6, 0x92, "ef97b9ff014926e7d103f8ae915881e19e813f72f9e39f6c0f55c531c4d5937af649b16ad6"}, {0x43, 0x8, 0xe8205755ec5b06cc, 0x1ce2, 0x9b5, "15da37d4508b4523ec6f806f93b62af37d2bd12d07c7412d9ce6fa100f41d1900d42674c488f21110d9fd639ee23e5deaedb95"}, {0xcd, 0x1ff, 0x802, 0x77, 0x100000000, "73107cbf2706686c30077a96cf5a6d88119ebc8d0823b10ea06a34e9bbf8600cf21c93a9f5b5881acfb2073725924a4f099c801abb38f3a3bcd807811c6cc820bbfd444c4ec35eac67855ead65043f46799332ce81b0deffd012c2343a4770bb28c28383f10ea337b0d86a41a0d508aa3bf8ff946a21d6021fd19d6d5d7e41983cc9155b3779f07a888fa842bc6d31626180742b16a26429724a1865c85b3c55cdc9ddeba7b677ec916c0a4eb77b4d20a319cd8c216a542a395e597177"}, {0x1010, 0x7fb, 0x120, 0x1, 0x2, "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"}], 0x1155}, {&(0x7f0000dc7000-0x152)=[{0xcc, 0x4, 0x100, 0x10000, 0x200, "c93722b0812d81a05146e1e3acb0f25a344d6b6dcffc31d2de0ee8b06f4a9a7ac75cf4244c3a54ddb3ff184a45b13533a2f368a0eb3b1631dba3f0c11fc48937c9a5d64c4b0cb4606948f14a63be58ad4ee3d55af73d61567673d2a06265297c29cf20a2478b8cde8df44cc19383c8151fc47f913ebf04d3dac410c6fca54efd6fef33e62a1419b4a50b93c998f0e0daa6f7f3fd42c01bba1022a82b47e5638ab40762ce3dcf38561866ffcd3a2e7a13a78f7a55140189c8661a61c0"}, {0x86, 0x2, 0x301, 0x4, 0x2, "f31f479f364e5be2f99cc475a3948a9c46c4b498a1229d47eb7c03775f2f5ce7f5fbb59fb6b08f0df5d74dd87710ca45dbab33d1fe01934ed1d4e7ebb7394f981661a6542be9aeee093879ea0d610a9d266cf80ac749cf49e5494e049e0efb32ff94b2351f349230596862b47c2869811922a6866be4"}], 0x152}], 0x6, &(0x7f0000646000-0x8c)=[@cred={0x18, 0x1, 0x2, r3, r4, r5}, @cred={0x18, 0x1, 0x2, r6, r7, r8}, @cred={0x18, 0x1, 0x2, r9, r10, r11}, @rights={0x14, 0x1, 0x1, [r1, r2]}, @cred={0x18, 0x1, 0x2, r12, r13, r14}, @cred={0x18, 0x1, 0x2, r15, r16, r17}], 0x8c, 0x200000c0}, 0x4) [ 245.882662] binder_alloc: 9906: binder_alloc_buf, no vma [ 245.888493] binder: 9906:9907 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r2 = syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f000000d000-0x5)={0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r3, &(0x7f0000015000-0x1)="23"}, 0x10) 2017/12/01 20:56:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6fd6, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 245.899663] binder: release 9906:9907 transaction 471 in, still active [ 245.899672] binder: send failed reply for transaction 471 to 9906:9912 [ 245.899689] binder: undelivered TRANSACTION_COMPLETE [ 245.899696] binder: undelivered TRANSACTION_ERROR: 29189 [ 245.937449] binder: 9948 RLIMIT_NICE not set 2017/12/01 20:56:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 245.965988] binder: 9948 RLIMIT_NICE not set [ 245.981647] binder_alloc: 9944: binder_alloc_buf, no vma [ 245.981686] binder: 9944:9948 transaction failed 29189/-3, size 0-0 line 2870 [ 245.999110] binder: BINDER_SET_CONTEXT_MGR already set [ 245.999119] binder: 9944:9962 ioctl 40046207 0 returned -16 [ 246.001416] binder: 9962 RLIMIT_NICE not set 2017/12/01 20:56:51 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:51 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) name_to_handle_at(r0, &(0x7f0000ef3000)="2e2f66696c653000", &(0x7f0000440000)={0x14, 0x0, "49a395eae401f6c4910dac38"}, &(0x7f00000e3000)=0x0, 0x1000) readv(r1, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) 2017/12/01 20:56:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x100000000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000343000)="2f6465762f6b766d00", 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe(&(0x7f0000ff1000)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000ce0000)={&(0x7f00005b1000-0x1c)=[0x3, 0x3, 0xffff, 0x80000001, 0xd0bf, 0x5, 0x81], 0x7, 0x7, 0x3f2, 0x0, 0x4, 0x6a20, {0x5, 0x9, 0xfffffffffffff001, 0x4, 0x1, 0xe1, 0x100, 0x3, 0x100000000, 0x8000, 0x1, 0xf555, 0x5, 0x8, "90a3c334dbfd3edf32b9f8015365ecd9775a3605f8feadd8e6619d1be895e119"}}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = syz_open_dev$usbmon(&(0x7f000020f000-0xd)="2f6465762f7573626d6f6e2300", 0x8bd, 0x4000c2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000a1b000-0x58)={0x26, "6861736800000000000000000000", 0x0, 0x0, "63726333326300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"}, 0x58) r7 = socket$unix(0x1, 0x7, 0x0) r8 = dup(r6) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c8d000-0x4)="0606c324", 0x4) ioctl$void(r7, 0x5450) getsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000745000)={0x0, 0x0, 0x0, 0x0}, &(0x7f00001a3000-0x4)=0x8) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000195000-0x10)={&(0x7f000043d000/0x4000)=nil, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000af6000)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_TRANSLATE(r5, 0xc018ae85, &(0x7f00005c8000-0x18)={0x6000, 0x107005, 0xae, 0x2, 0x4}) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000dff000)={0x1f, "fa1a3bba2d711e0f1c6b907dde6a7030c49a8058bb1e63aa947895172618fe"}) syslog(0x3, &(0x7f0000f3d000-0x3e)="", 0x0) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f00000fd000-0x6)={0x6, 0x8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000da3000-0x1e)={0x7b, 0x0, [0x1, 0x7fffffff, 0x802, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r9 = syz_open_dev$vcsn(&(0x7f000001c000)="2f6465762f7663732300", 0x47, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r9, &(0x7f0000bf6000)={0x0, 0x0}) 2017/12/01 20:56:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000463000)={0x0, r4, 0xfffd, 0x1f}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) listen(0xffffffffffffffff, 0x0) 2017/12/01 20:56:51 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x4) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[{&(0x7f0000ee5000-0xb4)="", 0x0}], 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40046432, &(0x7f0000011000-0x4)=0x7f) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000c4000-0x10)={r1, 0x28, &(0x7f00005dc000-0x28)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000e2f000)=r3, 0x4) sendmmsg(r2, &(0x7f000043b000-0x20)=[{{&(0x7f0000146000)=@ipx={0x4, 0x4, 0x0, "96159c9f370a", 0x7, 0x0}, 0x10, &(0x7f00004d0000)=[{&(0x7f0000ee7000-0x8)="1a4431c3091b2696", 0x8}], 0x1, &(0x7f00001d4000-0x390)=[{0x9c, 0x117, 0x80, "0feaa1f11444f3456d675af7bcf6b9ef800513c626be000db406a5057f32a9c92d1d101be3d1f594fe65ec6b436d7288d6332b043e3e4e4ceba613aec55947eb9368e104c11ca22085ba40ce510f2856d4795be918b12d51b1860692658caed9b0695bb3569128b80fa8aa7d4869114f7c84f49af8a0852c232dfc9aa87807d324767f897dc78e028989f14f21e1c2"}, {0x80, 0x84, 0x200, "be218aa0d8fe01d8b0e182b831d3da53b13c8cd08c2d3a3654bcc2ec579ad25c62173fe5db9209beabd8911cb0d5e094ac05f97ecfc20d790f7f526273d2b63281d41e4e9a977c33f7186020589b46f959955e3d8f4851bde9f85097da305ac4c3e672e3195657d9bbee08295cfeed8199fd"}, {0x24, 0x84, 0x876, "044f7b7d26d46ff8f236fee0d739177d877f87ce72a7e3dc"}, {0x90, 0x84, 0xe7, "f6646f28a7736cf2c2563fb9fec130c713fc738e8b959180e337ebcef958d44cefa2dd047e6138d1dc1aed0f9290b738fe0cb4a7235b51f618a761c72789182b1ae8c48b50a2635edfb69530cb2f2dd454dd7fda994cbd2fd9b590bed24f39946241285a58b2dd8cbede5a228e416d23b22e42b2fa6e382bcba90b6af2885be67a"}, {0xd0, 0x115, 0xb67, "d1092011750340be5487b05a56a2b0ce0e399b5f60183b299c201671f7486a6bc417e6d38129631366aaaa24fe7a4eeed3f40257e59443a51d20d3c100b479505d2256216f64d6dbd01f4d5362590108c427dd140f6dc61a998d8ae7d2ffb437033104b9146460c40d95f573d84f88f596528b6198a92f17e31435e2f13567fdff63fc04e9e14c4e369784bc5aea554108b2ac3a029d75368394282a303b60b2cc08e65ccd858974fef79b1bfac41135bcb731b57ed5416c6dd9ea9df6c58d76846f"}, {0x80, 0x129, 0xeb, "42dc9aad246a6d022ec2f1f558b1438d8f08e5716a7f2fd20dc7a46f0bacd31448ff893fdc1b6264c9ec815dd2c3799b32d92fe3a97939882198dabe4f0a676cb75d7a8227e59a7abf47d24e3e5ce02ca21e2f1b5db0f150bd7d3a1cbaf296ba288d4fb7bfd2830114f4e862dcf7d8cdff"}, {0x70, 0x10c, 0x1, "df0d2a5bd310db689d0732b3782382b4613cfe2842edae0dbea5add71ce6d699eceffdba8831360c227f9e51919757dc6db54e0f1f48e18af48f1aaae967190f33ab0f134bf92be47147165a41ba083d3ec1e1bb476bee3e9f825895660704515156"}], 0x390, 0x80}, 0x200}], 0x1, 0x805) 2017/12/01 20:56:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) syz_open_dev$vcsa(&(0x7f000000c000-0xb)="2f6465762f766373612300", 0x4, 0x200000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r2, &(0x7f0000015000-0x1)="23"}, 0x10) [ 246.029205] binder_alloc: 9944: binder_alloc_buf, no vma [ 246.029245] binder: 9944:9948 transaction failed 29189/-3, size 0-0 line 2870 [ 246.064839] binder: release 9944:9948 transaction 475 in, still active [ 246.064849] binder: send failed reply for transaction 475 to 9944:9962 [ 246.064866] binder: undelivered TRANSACTION_COMPLETE [ 246.064873] binder: undelivered TRANSACTION_ERROR: 29189 2017/12/01 20:56:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f000006a000)={0x8000, 0x20, 0x6}) seccomp(0x0, 0x0, &(0x7f0000495000-0x8)={0xa, &(0x7f0000fac000-0x50)=[{0x2, 0x3, 0x5, 0x1f}, {0x1, 0x6, 0x7, 0xfffffffffffffffb}, {0x8, 0x1f0, 0x10000, 0x7}, {0x0, 0x68, 0x5, 0x1f}, {0x8, 0x7fffffff, 0x100000001, 0x7f}, {0x0, 0x6, 0x3, 0x6}, {0x3ff, 0x9, 0x10001, 0x2}, {0x9, 0x1, 0xffffffffffff442d, 0x2}, {0x3ff, 0x8, 0x1, 0x100}, {0x9, 0x7fffffff, 0xcd3, 0x0}]}) memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) [ 246.135891] binder: 9994 RLIMIT_NICE not set 2017/12/01 20:56:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) clone(0x0, &(0x7f000016e000)="", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:51 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000606000-0xb)="2f6465762f6877726e6700", 0x180, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000a83000-0x8)={0x0, 0x1}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001000-0xc)={r1, 0x4080000000, 0x30}, &(0x7f0000001000-0x4)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_create(0x804b9) r3 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000922000-0xc)={0x80000000, 0x0}) getrandom(&(0x7f00008ea000-0x38)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x38, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000f47000)={r2, 0x9}, 0x8) close(r3) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) [ 246.164349] binder: 9994 RLIMIT_NICE not set [ 246.172749] binder_alloc: 9991: binder_alloc_buf, no vma [ 246.179757] binder: 9991:9994 transaction failed 29189/-3, size 0-0 line 2870 [ 246.210946] binder: BINDER_SET_CONTEXT_MGR already set 2017/12/01 20:56:51 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000463000)={0x0, r4, 0xfffd, 0x1f}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40086436, &(0x7f0000a02000-0x8)={r5, 0x100000001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) r6 = socket$unix(0x1, 0x1, 0x0) listen(r6, 0x0) 2017/12/01 20:56:51 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_wait(r1, &(0x7f0000cf1000)=[{0x0, 0x0}, {0x0, 0x0}], 0x2, 0x6) getsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000487000)=0x0, &(0x7f0000b79000-0x4)=0x4) memfd_create(&(0x7f0000129000-0x30)="2f6465762f7663732300", 0x7) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f00001b2000-0x28)=[{&(0x7f0000bfc000-0x53)="0f1e9f000141aac38eec69d6acc2b0c5f91be94b8c60006947000035edf8dba7a6197a711c570065a8000007ff0127d6c4123a5792d3f1924a01dbea77df36cef1a4001a3b4ba529e2106603f06d30e47d6df7", 0x53}, {&(0x7f0000e00000)="e5b0a94f1191933f6bc7e3c7d321f3ffa286d6c9d65233addc45c31ff28f7711d3f51ff55c07b2fd800801b506bf78c578079fc31b7e3a57d9927dac1971910df14654f00acad4067970807d6704a09b0e5d5ec3f808f228dc4e886551be710c1819f9220b70614fb8d756dac43611b52d4c70d1339b02e68659fd277d0bc91f21c8528c9e8dfcd8f9cfcaa4b9a67fc84383993b5ff20df69318c695e893eeb928b98bd2e8881e7efa522929dfab194ed21209fd86565d2a27d88bbb427c335426974bc8a4141164e599b0568baf216e37dd5afc16eac7", 0xd7}, {&(0x7f0000096000-0x3a)="1878ddafe6549841ec547a9919ff5e6c98970d194ef17ca4c6e903c10e45bc70b2901365e944a00ed5bd180dfde5942074700eb8b6ebe4ff210f", 0x3a}, {&(0x7f0000351000)="cb237df0bb43384edeb3d1393b8d1c0c3ef2c0ea364cee0a7db311eecf7f747cb71c39e9e105e300cf495e42e792f401a3be03090cc14cae35d323ed20d3ad8eca122fbf402887646bc38c25896860", 0x4f}, {&(0x7f00005f5000-0x44)="41f63204d86757e0ce90dcce5dde4326e69d77c7aa53fe969eec114f1d77de64bc54335a11e3f752c44b8b086bdf4f39097011fdb39bb1b21a676736e7e054d82a8fe760", 0x44}], 0x5, 0x0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000d1c000-0x4)=0x3) 2017/12/01 20:56:51 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000bf6000)={0x0, 0x0}) close(0xffffffffffffffff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) 2017/12/01 20:56:51 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r2, &(0x7f0000015000-0x1)="23"}, 0x10) 2017/12/01 20:56:51 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000ec3000)={0x3ff, 0x0, 0x10000, 0x4}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) listen(0xffffffffffffffff, 0x0) 2017/12/01 20:56:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x3f) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) [ 246.230430] binder: 9991:10005 ioctl 40046207 0 returned -16 [ 246.232406] binder: 10005 RLIMIT_NICE not set [ 246.255467] binder_alloc: 9991: binder_alloc_buf, no vma [ 246.255510] binder: 9991:9994 transaction failed 29189/-3, size 0-0 line 2870 [ 246.268432] binder: 10025 RLIMIT_NICE not set [ 246.279578] binder_alloc: 9991: binder_alloc_buf, no vma [ 246.279602] binder: 9991:10027 transaction failed 29189/-3, size 0-0 line 2870 [ 246.287006] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.287407] binder: release 9991:9994 transaction 479 in, still active [ 246.287417] binder: send failed reply for transaction 479 to 9991:10005 [ 246.287436] binder: undelivered TRANSACTION_COMPLETE [ 246.287443] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.292971] binder: 10025 RLIMIT_NICE not set [ 246.299790] binder_alloc: 10024: binder_alloc_buf, no vma [ 246.299834] binder: 10024:10025 transaction failed 29189/-3, size 0-0 line 2870 [ 246.307646] binder: 10038 RLIMIT_NICE not set [ 246.315977] binder: BINDER_SET_CONTEXT_MGR already set [ 246.315987] binder: 10024:10036 ioctl 40046207 0 returned -16 [ 246.318619] binder: 10036 RLIMIT_NICE not set [ 246.330076] binder: 10038 RLIMIT_NICE not set [ 246.333924] binder_alloc: 10037: binder_alloc_buf, no vma [ 246.333960] binder: 10037:10038 transaction failed 29189/-3, size 0-0 line 2870 [ 246.343581] binder: BINDER_SET_CONTEXT_MGR already set [ 246.343589] binder: 10037:10044 ioctl 40046207 0 returned -16 [ 246.345545] binder: 10044 RLIMIT_NICE not set [ 246.346131] binder_alloc: 10024: binder_alloc_buf, no vma [ 246.346167] binder: 10024:10025 transaction failed 29189/-3, size 0-0 line 2870 [ 246.373274] binder: release 10024:10025 transaction 484 in, still active [ 246.373284] binder: send failed reply for transaction 484 to 10024:10036 [ 246.373302] binder: undelivered TRANSACTION_COMPLETE [ 246.373309] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.376221] binder_alloc: 10037: binder_alloc_buf, no vma [ 246.376254] binder: 10037:10038 transaction failed 29189/-3, size 0-0 line 2870 [ 246.403650] binder_alloc: 10037: binder_alloc_buf, no vma 2017/12/01 20:56:52 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) 2017/12/01 20:56:52 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f00007f4000-0x1)="00") r0 = epoll_create(0xffd) r1 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000b03000-0xa8)={{0x0, 0x0}, "706f7274310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x8, 0x100000, 0x0, 0x2, 0x7f, 0x7fff, 0x7e2, 0x0, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000e8f000-0xc)={0x0, 0x0}) close(r2) fcntl$setlease(r2, 0x400, 0x2) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00001f8000)={0x0, 0x0}) fcntl$getflags(r0, 0x40a) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000327000-0x63)={0x1, 0x5b, "3d0d426b1c9b5778564061d350a725e7d40fb2b4237c964debe15a5bf5eaed9ae985e3ab4474a4ac508493667b4a6d349159ff943a371042d619f756209813fe9cc62bb66193657791efe7d06bc29f8d822dca0ee5ad89f0bcb104"}) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000e8b000)=0x0) getsockname$llc(r1, &(0x7f0000e73000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, [0x0, 0x0]}, &(0x7f0000450000-0x4)=0x10) 2017/12/01 20:56:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000ff8000-0x8)={0x0, 0x0}) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000516000)=0x0, &(0x7f0000088000)=0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000149000)="2f6465762f72746300", 0x600, 0x0) 2017/12/01 20:56:52 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)="2f6465762f6375736500", 0x222000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x10203, 0x0, &(0x7f0000488000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000a4f000-0x1c)={0x5, 0xc, 0x5, 0x9, 0x2, 0xffffffffffffffff, 0x0}, 0x1c) getpgrp(0xffffffffffffffff) r1 = perf_event_open(&(0x7f00002c4000)={0x0, 0x78, 0xde, 0x7, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x1, 0x0, 0x0, 0x20000000000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x3, &(0x7f0000bb8000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7fffffff, 0x407ffc0003}]}) syslog(0x3, &(0x7f0000f0b000)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xfffffe06) r2 = syz_open_dev$loop(&(0x7f0000356000)="2f6465762f6c6f6f702300", 0x0, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x1ff, 0x20000000, 0x6000, 0x0, 0x864, 0x33e, 0x1, 0x4, 0x6fd6, 0x80}, 0x10) read(r2, &(0x7f0000e5c000-0x1000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x1007c) fdatasync(r1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ee000-0x11)="2f6465762f7161745f6164665f63746c00", 0x105004, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000a16000-0x8c)={0x0, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000abf000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f000071d000-0x8)={0x0, 0x6}, &(0x7f0000289000)=0x8) clone(0x0, &(0x7f000016e000)="f8", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) listen(0xffffffffffffffff, 0x0) 2017/12/01 20:56:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r2, &(0x7f0000015000-0x1)="23"}, 0x10) 2017/12/01 20:56:52 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000ef8000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000896000-0xa)={0x3, [0x1, 0x2, 0xfffffffffffff2ef]}, 0xa) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:52 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x101) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) memfd_create(&(0x7f0000ed8000)="00", 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) flock(r0, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000edd000-0x9)="2f6465762f6b766d00", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x80003, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000f9c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000927000-0x8)=@abs={0x1, 0x0, 0x1}, 0x8) sendmmsg$unix(r4, &(0x7f00000bd000)=[], 0x80, 0xc0) sendmmsg(r4, &(0x7f000046b000-0xb4)=[], 0x0, 0x40) sendmsg(r4, &(0x7f0000081000-0x38)={&(0x7f0000c4c000)=@un=@file={0x1, "2e2f66696c653000"}, 0xa, &(0x7f0000915000)=[], 0x0, &(0x7f0000215000+0xad)=[], 0x0, 0x0}, 0x40004) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = getpgid(0x0) ioprio_set$pid(0x1, r5, 0x27) pipe(&(0x7f00004a3000)={0x0, 0x0}) r6 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000d52000-0xe8)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0xac, 0x14, 0x0, 0xaa}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) r7 = socket(0x4000000000000f, 0x3, 0x2) mount(&(0x7f0000374000)="2e2f66696c653000", &(0x7f0000b31000-0x8)="2e2f66696c653000", &(0x7f0000ec2000)="72616d667300", 0x0, &(0x7f0000115000)="") write(r7, &(0x7f00006dc000-0x10)="0212a1250200000009e5000000000900", 0x10) dup2(r2, r6) rmdir(&(0x7f00005c5000)="2e2f66696c653000") [ 246.403679] binder: 10037:10049 transaction failed 29189/-3, size 0-0 line 2870 [ 246.425496] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.425728] binder: release 10037:10038 transaction 487 in, still active [ 246.425737] binder: send failed reply for transaction 487 to 10037:10044 [ 246.425754] binder: undelivered TRANSACTION_COMPLETE [ 246.425761] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.581618] kauditd_printk_skb: 5895 callbacks suppressed [ 246.581626] audit: type=1326 audit(1512161812.290:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=10058 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 246.582486] binder: 10067 RLIMIT_NICE not set 2017/12/01 20:56:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r2 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000001000-0x6)={0x1f, 0xffff, 0x3}, 0x6) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) listen(0xffffffffffffffff, 0x0) [ 246.610791] binder: 10067 RLIMIT_NICE not set [ 246.614764] binder_alloc: 10060: binder_alloc_buf, no vma [ 246.614802] binder: 10060:10067 transaction failed 29189/-3, size 0-0 line 2870 [ 246.626837] binder: BINDER_SET_CONTEXT_MGR already set [ 246.626846] binder: 10060:10073 ioctl 40046207 0 returned -16 [ 246.633696] binder: 10073 RLIMIT_NICE not set [ 246.651480] binder_alloc: 10060: binder_alloc_buf, no vma [ 246.651516] binder: 10060:10067 transaction failed 29189/-3, size 0-0 line 2870 2017/12/01 20:56:52 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r1 = userfaultfd(0x80800) read(r1, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r2, &(0x7f0000015000-0x1)="23"}, 0x10) [ 246.658456] binder_alloc: 10060: binder_alloc_buf, no vma [ 246.658480] binder: 10060:10079 transaction failed 29189/-3, size 0-0 line 2870 [ 246.666901] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.667165] binder: release 10060:10067 transaction 493 in, still active [ 246.667174] binder: send failed reply for transaction 493 to 10060:10073 [ 246.667191] binder: undelivered TRANSACTION_COMPLETE [ 246.667197] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.731417] audit: type=1326 audit(1512161812.290:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=10058 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 246.731435] audit: type=1326 audit(1512161812.295:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=10058 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 2017/12/01 20:56:52 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) socket$bt_sco(0x1f, 0x5, 0x2) r2 = memfd_create(&(0x7f0000ed8000)="00", 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000ef4000)={0x0, 0x7f}, &(0x7f00004b5000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f000074b000)={r3, 0x401}, 0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f000002f000)="69645f6c656761637900", &(0x7f00005d5000)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f00003e8000-0x69)="24b9ad5ffe2e185c67d242b28fa806eeac98cd6819f0dc78ff3a7fb925a7f3f96dd14d9a57e388b1624b2047d4c39ff585c9efef57a0f399ffb6c37ed98c800546296859f739c2af8c05a46ee6d26958a11101d4df9601bac6f5281b6b3297f796a2a918fb0747ebb0", 0x69, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000c2a000)="6b657972696e6700", &(0x7f0000e4e000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, r4) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00006c2000)={0xfffffffffffffffd, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00008b6000)=@assoc_value={0x0, 0x0}, 0x8) pwritev(0xffffffffffffffff, &(0x7f000059f000)=[], 0x0, 0x0) 2017/12/01 20:56:52 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000e0d000-0x5c)={{0xa, 0x1, 0x3, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x10000}, {0xa, 0x3, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, 0x49, [0x3c01, 0x6, 0xe, 0x5, 0x0, 0x8, 0x6, 0xffffffffffff0001]}, 0x5c) r1 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r1, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) [ 246.731450] audit: type=1326 audit(1512161812.295:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=10058 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 246.731464] audit: type=1326 audit(1512161812.295:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=10058 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 2017/12/01 20:56:52 executing program 0 (fault-call:2 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) clone(0x0, &(0x7f000016e000)="", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:52 executing program 0 (fault-call:2 fault-nth:1): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) clone(0x0, &(0x7f000016e000)="", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:52 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x1e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000f5d000)="2e2f66696c653000", 0x0) r1 = syz_open_dev$binder(&(0x7f0000008000)="2f6465762f62696e6465722300", 0x0, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)="2f6465762f62696e6465722300", 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) poll(&(0x7f0000003000)=[{0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x88, 0x0}, {0xffffffffffffffff, 0x8, 0x0}, {0xffffffffffffffff, 0x0, 0x0}, {0xffffffffffffffff, 0x0, 0x0}], 0x5, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00005ec000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000004000)="2716c84bf81a477ad3318aa4e22d244b801491b0ab3199a92b022cdb390aa97e9ed8e452dae8d724c26d0eb93c4d31a71851a3526cb61fba5ea33823f4f692f013167a905e9788f0"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readlink(&(0x7f0000001000-0x8)="2e2f66696c653000", &(0x7f0000001000-0x28)="00000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x28) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f000091b000-0x6)={0xfffffffffffffffa, 0x10001}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f00007dc000)=[]}}], 0x1, 0x0, &(0x7f0000f50000-0x1)="63"}) listen(0xffffffffffffffff, 0x0) [ 246.731479] audit: type=1326 audit(1512161812.296:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=10058 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 246.731494] audit: type=1326 audit(1512161812.296:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=10058 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=265 compat=1 ip=0xf7f49c79 code=0x7ffc0000 2017/12/01 20:56:52 executing program 0 (fault-call:2 fault-nth:2): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) clone(0x0, &(0x7f000016e000)="", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 246.731511] audit: type=1326 audit(1512161812.296:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=10058 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 246.731527] audit: type=1326 audit(1512161812.297:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=10058 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f49c79 code=0x7ffc0000 2017/12/01 20:56:52 executing program 0 (fault-call:2 fault-nth:3): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) clone(0x0, &(0x7f000016e000)="", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") [ 246.731543] audit: type=1326 audit(1512161812.297:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=kernel pid=10058 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f49c79 code=0x7ffc0000 [ 246.758349] binder: 10086 RLIMIT_NICE not set [ 246.832977] binder: 10086 RLIMIT_NICE not set [ 246.837533] binder_alloc: 10084: binder_alloc_buf, no vma [ 246.837573] binder: 10084:10086 transaction failed 29189/-3, size 0-0 line 2870 [ 246.858580] binder_alloc: 10084: binder_alloc_buf, no vma [ 246.858614] binder: 10084:10086 transaction failed 29189/-3, size 0-0 line 2870 [ 246.859310] FAULT_INJECTION: forcing a failure. [ 246.859310] name failslab, interval 1, probability 0, space 0, times 0 [ 246.859325] CPU: 0 PID: 10104 Comm: syz-executor0 Not tainted 4.15.0-rc1+ #113 [ 246.859331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.859334] Call Trace: [ 246.859348] dump_stack+0x194/0x257 [ 246.859366] ? arch_local_irq_restore+0x53/0x53 [ 246.859400] should_fail+0x8c0/0xa40 [ 246.859418] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 246.859437] ? lock_page_memcg+0x2bd/0x3b0 [ 246.859446] ? perf_trace_lock_acquire+0xe3/0x980 [ 246.859465] ? find_held_lock+0x39/0x1d0 [ 246.859499] ? lock_downgrade+0x980/0x980 [ 246.859543] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 246.859552] ? trace_event_raw_event_lock+0x340/0x340 [ 246.859565] ? rcu_note_context_switch+0x710/0x710 [ 246.859595] should_failslab+0xec/0x120 [ 246.859609] kmem_cache_alloc_node+0x56/0x760 [ 246.859629] ? reacquire_held_locks+0x201/0x3e0 [ 246.859653] copy_process.part.36+0x1a6a/0x4ae0 [ 246.859666] ? __lock_acquire+0x6e9/0x47f0 [ 246.859700] ? __cleanup_sighand+0x40/0x40 [ 246.859728] ? print_usage_bug+0x3f0/0x3f0 [ 246.859736] ? wake_up_page_bit+0x530/0x530 [ 246.859752] ? __lock_is_held+0xbc/0x140 [ 246.859802] ? __lock_acquire+0x6e9/0x47f0 [ 246.859830] ? perf_trace_lock+0xd6/0x900 [ 246.859838] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 246.859866] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 246.859876] ? get_mem_cgroup_from_mm+0x49b/0x710 [ 246.859886] ? check_noncircular+0x20/0x20 [ 246.859898] ? perf_trace_lock+0x900/0x900 [ 246.859910] ? print_usage_bug+0x3f0/0x3f0 [ 246.859926] ? perf_trace_lock+0xd6/0x900 [ 246.859951] ? trace_event_raw_event_lock+0x340/0x340 [ 246.859970] ? check_noncircular+0x20/0x20 [ 246.859982] ? perf_trace_lock+0x900/0x900 [ 246.860014] ? perf_trace_lock+0xd6/0x900 [ 246.860023] ? check_noncircular+0x20/0x20 [ 246.860044] ? trace_event_raw_event_lock+0x340/0x340 [ 246.860056] ? find_held_lock+0x39/0x1d0 [ 246.860068] ? check_noncircular+0x20/0x20 [ 246.860096] ? lock_downgrade+0x980/0x980 [ 246.860106] ? __lock_is_held+0xbc/0x140 [ 246.860122] ? perf_trace_lock+0xd6/0x900 [ 246.860146] ? find_held_lock+0x39/0x1d0 [ 246.860181] ? lock_downgrade+0x980/0x980 [ 246.860195] ? get_pid_task+0xbc/0x140 [ 246.860208] ? proc_fail_nth_write+0xb5/0x260 [ 246.860221] ? map_files_get_link+0x3a0/0x3a0 [ 246.860227] ? __lock_is_held+0xbc/0x140 [ 246.860251] _do_fork+0x1ef/0xff0 [ 246.860275] ? fork_idle+0x2d0/0x2d0 [ 246.860295] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 246.860306] ? kernel_read+0x120/0x120 [ 246.860324] ? wait_for_completion+0x7b0/0x7b0 [ 246.860389] ? __sb_end_write+0x9e/0xd0 [ 246.860410] ? fput+0xd2/0x140 [ 246.860421] ? SyS_write+0x184/0x220 [ 246.860429] ? __do_page_fault+0x3d6/0xc90 [ 246.860444] ? SyS_read+0x220/0x220 [ 246.860469] SyS_clone+0x37/0x50 [ 246.860482] ? entry_INT80_compat+0x40/0x40 [ 246.860498] do_fast_syscall_32+0x3ee/0xf9d [ 246.860526] ? do_int80_syscall_32+0x9d0/0x9d0 [ 246.860549] ? lockdep_sys_exit+0x47/0xf0 [ 246.860560] ? syscall_return_slowpath+0x2ad/0x550 [ 246.860579] ? sysret32_from_system_call+0x5/0x3b [ 246.860602] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.860628] entry_SYSENTER_compat+0x51/0x60 [ 246.860635] RIP: 0023:0xf7f49c79 [ 246.860640] RSP: 002b:00000000f774508c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 246.860649] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000002016e000 [ 246.860654] RDX: 0000000020a25ffc RSI: 000000002039f000 RDI: 0000000020402000 [ 246.860659] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.860663] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 246.860667] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.873263] binder: release 10084:10086 transaction 498 in, still active [ 246.873273] binder: send failed reply for transaction 498 to 10084:10096 [ 246.873291] binder: undelivered TRANSACTION_COMPLETE [ 246.873298] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.892263] FAULT_INJECTION: forcing a failure. [ 246.892263] name failslab, interval 1, probability 0, space 0, times 0 [ 246.892277] CPU: 1 PID: 10109 Comm: syz-executor0 Not tainted 4.15.0-rc1+ #113 [ 246.892282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.892286] Call Trace: [ 246.892301] dump_stack+0x194/0x257 [ 246.892320] ? arch_local_irq_restore+0x53/0x53 [ 246.892360] should_fail+0x8c0/0xa40 [ 246.892380] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 246.892420] ? find_held_lock+0x39/0x1d0 [ 246.892463] ? lock_downgrade+0x980/0x980 [ 246.892512] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 246.892522] ? rcu_read_lock_sched_held+0x108/0x120 [ 246.892538] ? rcu_note_context_switch+0x710/0x710 [ 246.892572] should_failslab+0xec/0x120 [ 246.892587] kmem_cache_alloc+0x47/0x760 [ 246.892599] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 246.892612] ? rcu_pm_notify+0xc0/0xc0 [ 246.892636] prepare_creds+0x78/0x360 [ 246.892648] ? abort_creds+0x130/0x130 [ 246.892664] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 246.892671] ? __lockdep_init_map+0xe4/0x650 [ 246.892697] copy_creds+0x7b/0x3a0 [ 246.892722] copy_process.part.36+0xb28/0x4ae0 [ 246.892738] ? __lock_acquire+0x6e9/0x47f0 [ 246.892775] ? __cleanup_sighand+0x40/0x40 [ 246.892807] ? print_usage_bug+0x3f0/0x3f0 [ 246.892823] ? wake_up_page_bit+0x530/0x530 [ 246.892841] ? __lock_is_held+0xbc/0x140 [ 246.892898] ? __lock_acquire+0x6e9/0x47f0 [ 246.892930] ? perf_trace_lock+0xd6/0x900 [ 246.892938] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 246.892971] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 246.892980] ? get_mem_cgroup_from_mm+0x49b/0x710 [ 246.892990] ? check_noncircular+0x20/0x20 [ 246.893002] ? perf_trace_lock+0x900/0x900 [ 246.893015] ? print_usage_bug+0x3f0/0x3f0 [ 246.893032] ? perf_trace_lock+0xd6/0x900 [ 246.893059] ? trace_event_raw_event_lock+0x340/0x340 [ 246.893080] ? check_noncircular+0x20/0x20 [ 246.893093] ? perf_trace_lock+0x900/0x900 [ 246.893124] ? perf_trace_lock+0xd6/0x900 [ 246.893133] ? check_noncircular+0x20/0x20 [ 246.893165] ? find_held_lock+0x39/0x1d0 [ 246.893178] ? check_noncircular+0x20/0x20 [ 246.893204] ? lock_downgrade+0x980/0x980 [ 246.893212] ? __lock_is_held+0xbc/0x140 [ 246.893224] ? perf_trace_lock+0xd6/0x900 [ 246.893244] ? find_held_lock+0x39/0x1d0 [ 246.893270] ? lock_downgrade+0x980/0x980 [ 246.893281] ? get_pid_task+0xbc/0x140 [ 246.893292] ? proc_fail_nth_write+0xb5/0x260 [ 246.893302] ? map_files_get_link+0x3a0/0x3a0 [ 246.893307] ? __lock_is_held+0xbc/0x140 [ 246.893327] _do_fork+0x1ef/0xff0 [ 246.893346] ? fork_idle+0x2d0/0x2d0 [ 246.893362] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 246.893371] ? kernel_read+0x120/0x120 [ 246.893381] ? wait_for_completion+0x7b0/0x7b0 [ 246.893431] ? __sb_end_write+0x9e/0xd0 [ 246.893447] ? fput+0xd2/0x140 [ 246.893456] ? SyS_write+0x184/0x220 [ 246.893463] ? __do_page_fault+0x3d6/0xc90 [ 246.893475] ? SyS_read+0x220/0x220 [ 246.893492] SyS_clone+0x37/0x50 [ 246.893501] ? entry_INT80_compat+0x40/0x40 [ 246.893513] do_fast_syscall_32+0x3ee/0xf9d [ 246.893533] ? do_int80_syscall_32+0x9d0/0x9d0 [ 246.893551] ? lockdep_sys_exit+0x47/0xf0 [ 246.893560] ? syscall_return_slowpath+0x2ad/0x550 [ 246.893574] ? sysret32_from_system_call+0x5/0x3b [ 246.893590] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.893610] entry_SYSENTER_compat+0x51/0x60 [ 246.893615] RIP: 0023:0xf7f49c79 [ 246.893619] RSP: 002b:00000000f774508c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 246.893626] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000002016e000 [ 246.893630] RDX: 0000000020a25ffc RSI: 000000002039f000 RDI: 0000000020402000 [ 246.893633] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.893636] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 246.893640] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.916687] binder: 10111 RLIMIT_NICE not set [ 246.942295] binder: 10111 RLIMIT_NICE not set [ 246.949443] FAULT_INJECTION: forcing a failure. [ 246.949443] name failslab, interval 1, probability 0, space 0, times 0 [ 246.949453] CPU: 0 PID: 10115 Comm: syz-executor0 Not tainted 4.15.0-rc1+ #113 [ 246.949458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.949462] Call Trace: [ 246.949475] dump_stack+0x194/0x257 [ 246.949492] ? arch_local_irq_restore+0x53/0x53 [ 246.949527] should_fail+0x8c0/0xa40 [ 246.949545] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 246.949560] ? depot_save_stack+0x12c/0x490 [ 246.949585] ? find_held_lock+0x39/0x1d0 [ 246.949620] ? lock_downgrade+0x980/0x980 [ 246.949664] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 246.949681] ? rcu_note_context_switch+0x710/0x710 [ 246.949713] should_failslab+0xec/0x120 [ 246.949727] __kmalloc_track_caller+0x5f/0x760 [ 246.949733] ? rcu_pm_notify+0xc0/0xc0 [ 246.949752] ? prepare_creds+0x78/0x360 [ 246.949760] ? selinux_cred_prepare+0x43/0xa0 [ 246.949785] kmemdup+0x24/0x50 [ 246.949799] selinux_cred_prepare+0x43/0xa0 [ 246.949814] security_prepare_creds+0x7d/0xb0 [ 246.949834] prepare_creds+0x2b1/0x360 [ 246.949848] ? abort_creds+0x130/0x130 [ 246.949863] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 246.949870] ? __lockdep_init_map+0xe4/0x650 [ 246.949893] copy_creds+0x7b/0x3a0 [ 246.949915] copy_process.part.36+0xb28/0x4ae0 [ 246.949929] ? __lock_acquire+0x6e9/0x47f0 [ 246.949963] ? __cleanup_sighand+0x40/0x40 [ 246.949992] ? print_usage_bug+0x3f0/0x3f0 [ 246.950000] ? wake_up_page_bit+0x530/0x530 [ 246.950016] ? __lock_is_held+0xbc/0x140 [ 246.950067] ? __lock_acquire+0x6e9/0x47f0 [ 246.950096] ? perf_trace_lock+0xd6/0x900 [ 246.950104] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 246.950134] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 246.950143] ? get_mem_cgroup_from_mm+0x49b/0x710 [ 246.950153] ? check_noncircular+0x20/0x20 [ 246.950166] ? perf_trace_lock+0x900/0x900 [ 246.950178] ? print_usage_bug+0x3f0/0x3f0 [ 246.950194] ? perf_trace_lock+0xd6/0x900 [ 246.950219] ? trace_event_raw_event_lock+0x340/0x340 [ 246.950239] ? check_noncircular+0x20/0x20 [ 246.950251] ? perf_trace_lock+0x900/0x900 [ 246.950280] ? perf_trace_lock+0xd6/0x900 [ 246.950289] ? check_noncircular+0x20/0x20 [ 246.950322] ? find_held_lock+0x39/0x1d0 [ 246.950335] ? check_noncircular+0x20/0x20 [ 246.950363] ? lock_downgrade+0x980/0x980 [ 246.950375] ? __lock_is_held+0xbc/0x140 [ 246.950393] ? perf_trace_lock+0xd6/0x900 [ 246.950420] ? find_held_lock+0x39/0x1d0 [ 246.950456] ? lock_downgrade+0x980/0x980 [ 246.950473] ? get_pid_task+0xbc/0x140 [ 246.950489] ? proc_fail_nth_write+0xb5/0x260 [ 246.950503] ? map_files_get_link+0x3a0/0x3a0 [ 246.950510] ? __lock_is_held+0xbc/0x140 [ 246.950534] _do_fork+0x1ef/0xff0 [ 246.950558] ? fork_idle+0x2d0/0x2d0 [ 246.950578] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 246.950590] ? kernel_read+0x120/0x120 [ 246.950603] ? wait_for_completion+0x7b0/0x7b0 [ 246.950668] ? __sb_end_write+0x9e/0xd0 [ 246.950689] ? fput+0xd2/0x140 [ 246.950700] ? SyS_write+0x184/0x220 [ 246.950709] ? __do_page_fault+0x3d6/0xc90 [ 246.950724] ? SyS_read+0x220/0x220 [ 246.950747] SyS_clone+0x37/0x50 [ 246.950760] ? entry_INT80_compat+0x40/0x40 [ 246.950774] do_fast_syscall_32+0x3ee/0xf9d [ 246.950801] ? do_int80_syscall_32+0x9d0/0x9d0 [ 246.950824] ? lockdep_sys_exit+0x47/0xf0 [ 246.950835] ? syscall_return_slowpath+0x2ad/0x550 [ 246.950854] ? sysret32_from_system_call+0x5/0x3b [ 246.950875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.950901] entry_SYSENTER_compat+0x51/0x60 [ 246.950908] RIP: 0023:0xf7f49c79 [ 246.950913] RSP: 002b:00000000f774508c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 246.950923] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000002016e000 [ 246.950929] RDX: 0000000020a25ffc RSI: 000000002039f000 RDI: 0000000020402000 [ 246.950933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.950938] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 246.950943] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.967669] binder_alloc: 10110: binder_alloc_buf, no vma [ 246.967711] binder: 10110:10111 transaction failed 29189/-3, size 0-0 line 2870 [ 246.977144] FAULT_INJECTION: forcing a failure. [ 246.977144] name failslab, interval 1, probability 0, space 0, times 0 [ 246.977154] CPU: 0 PID: 10119 Comm: syz-executor0 Not tainted 4.15.0-rc1+ #113 [ 246.977160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.977164] Call Trace: [ 246.977178] dump_stack+0x194/0x257 [ 246.977199] ? arch_local_irq_restore+0x53/0x53 [ 246.977241] should_fail+0x8c0/0xa40 [ 246.977266] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 246.977283] ? depot_save_stack+0x12c/0x490 [ 246.977318] ? find_held_lock+0x39/0x1d0 [ 246.977358] ? lock_downgrade+0x980/0x980 [ 246.977410] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 246.977432] ? rcu_note_context_switch+0x710/0x710 [ 246.977466] should_failslab+0xec/0x120 [ 246.977482] __kmalloc_track_caller+0x5f/0x760 [ 246.977489] ? rcu_pm_notify+0xc0/0xc0 [ 246.977510] ? prepare_creds+0x78/0x360 [ 246.977518] ? selinux_cred_prepare+0x43/0xa0 [ 246.977543] kmemdup+0x24/0x50 [ 246.977558] selinux_cred_prepare+0x43/0xa0 [ 246.977575] security_prepare_creds+0x7d/0xb0 [ 246.977597] prepare_creds+0x2b1/0x360 [ 246.977608] ? abort_creds+0x130/0x130 [ 246.977625] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 246.977632] ? __lockdep_init_map+0xe4/0x650 [ 246.977659] copy_creds+0x7b/0x3a0 [ 246.977683] copy_process.part.36+0xb28/0x4ae0 [ 246.977699] ? __lock_acquire+0x6e9/0x47f0 [ 246.977737] ? __cleanup_sighand+0x40/0x40 [ 246.977770] ? print_usage_bug+0x3f0/0x3f0 [ 246.977779] ? wake_up_page_bit+0x530/0x530 [ 246.977796] ? __lock_is_held+0xbc/0x140 [ 246.977854] ? __lock_acquire+0x6e9/0x47f0 [ 246.977887] ? perf_trace_lock+0xd6/0x900 [ 246.977896] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 246.977926] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 246.977938] ? check_noncircular+0x20/0x20 [ 246.977953] ? perf_trace_lock+0x900/0x900 [ 246.977966] ? print_usage_bug+0x3f0/0x3f0 [ 246.977982] ? perf_trace_lock+0xd6/0x900 [ 246.978008] ? trace_event_raw_event_lock+0x340/0x340 [ 246.978030] ? check_noncircular+0x20/0x20 [ 246.978043] ? perf_trace_lock+0x900/0x900 [ 246.978074] ? perf_trace_lock+0xd6/0x900 [ 246.978084] ? check_noncircular+0x20/0x20 [ 246.978115] ? find_held_lock+0x39/0x1d0 [ 246.978129] ? check_noncircular+0x20/0x20 [ 246.978159] ? lock_downgrade+0x980/0x980 [ 246.978168] ? __lock_is_held+0xbc/0x140 [ 246.978184] ? perf_trace_lock+0xd6/0x900 [ 246.978213] ? find_held_lock+0x39/0x1d0 [ 246.978253] ? lock_downgrade+0x980/0x980 [ 246.978268] ? get_pid_task+0xbc/0x140 [ 246.978284] ? proc_fail_nth_write+0xb5/0x260 [ 246.978298] ? map_files_get_link+0x3a0/0x3a0 [ 246.978312] ? __lock_is_held+0xbc/0x140 [ 246.978339] _do_fork+0x1ef/0xff0 [ 246.978367] ? fork_idle+0x2d0/0x2d0 [ 246.978391] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 246.978404] ? kernel_read+0x120/0x120 [ 246.978419] ? wait_for_completion+0x7b0/0x7b0 [ 246.978487] ? __sb_end_write+0x9e/0xd0 [ 246.978509] ? fput+0xd2/0x140 [ 246.978521] ? SyS_write+0x184/0x220 [ 246.978530] ? __do_page_fault+0x3d6/0xc90 [ 246.978546] ? SyS_read+0x220/0x220 [ 246.978569] SyS_clone+0x37/0x50 [ 246.978582] ? entry_INT80_compat+0x40/0x40 [ 246.978596] do_fast_syscall_32+0x3ee/0xf9d [ 246.978621] ? do_int80_syscall_32+0x9d0/0x9d0 [ 246.978636] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 246.978651] ? lockdep_sys_exit+0x47/0xf0 [ 246.978664] ? syscall_return_slowpath+0x2ad/0x550 [ 246.978682] ? sysret32_from_system_call+0x5/0x3b [ 246.978703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.978730] entry_SYSENTER_compat+0x51/0x60 [ 246.978737] RIP: 0023:0xf7f49c79 [ 246.978743] RSP: 002b:00000000f774508c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 246.978752] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000002016e000 [ 246.978758] RDX: 0000000020a25ffc RSI: 000000002039f000 RDI: 0000000020402000 [ 246.978763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.978768] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 246.978773] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.979406] binder: BINDER_SET_CONTEXT_MGR already set [ 246.979415] binder: 10110:10113 ioctl 40046207 0 returned -16 [ 246.981481] binder: 10113 RLIMIT_NICE not set [ 247.004219] binder_alloc: 10110: binder_alloc_buf, no vma [ 247.004253] binder: 10110:10111 transaction failed 29189/-3, size 0-0 line 2870 [ 247.012270] binder_alloc: 10110: binder_alloc_buf, no vma 2017/12/01 20:56:54 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xd4e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x48c) socket$inet_tcp(0x2, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(0xffffffffffffffff) 2017/12/01 20:56:54 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create(0x804b8) r1 = syz_open_dev$vcsn(&(0x7f00000df000)="2f6465762f7663732300", 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f000017f000-0x4)=0xfffffffffffffffb, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000bf6000)={0x0, 0x0}) close(r1) fcntl$setlease(r1, 0x400, 0x0) 2017/12/01 20:56:54 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) pause() r0 = userfaultfd(0x80800) read(r0, &(0x7f0000600000-0x77)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0x77) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x1, 0x82, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x1c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000b000)={r1, &(0x7f0000015000-0x1)="23"}, 0x10) 2017/12/01 20:56:54 executing program 0 (fault-call:2 fault-nth:4): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write(0x1, &(0x7f000043d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) clone(0x0, &(0x7f000016e000)="", &(0x7f0000a26000-0x4)=0x0, &(0x7f000039f000)=0x0, &(0x7f0000402000)="") 2017/12/01 20:56:54 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xf75000)=nil, 0xf75000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f00007a0000)="2f6465762f7573626d6f6e2300", 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00008d3000)="2f6465762f6877726e6700", 0x40100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x6) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f000028a000)={0x11, 0x0}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) fgetxattr(r0, &(0x7f0000875000-0x13)=@random={"73797374656d2e00", "2f6465762f6877726e6700"}, &(0x7f0000380000-0xe9)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xe9) readv(r2, &(0x7f0000dec000-0x28)=[{&(0x7f0000932000-0xe8)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", 0xbd}, {&(0x7f000014e000+0x671)="0000000000000000", 0x8}], 0x2) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x400000000d3, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x5, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00005ca000-0x10)={&(0x7f00001a2000/0x4000)=nil, 0x4000}) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000fbd000)={0x0, 0x0}) getpgrp(0x0) [ 247.012293] binder: 10110:10122 transaction failed 29189/-3, size 0-0 line 2870 [ 247.017833] binder: undelivered TRANSACTION_ERROR: 29189 [ 247.018090] binder: release 10110:10111 transaction 502 in, still active [ 247.018100] binder: send failed reply for transaction 502 to 10110:10113 [ 247.018117] binder: undelivered TRANSACTION_COMPLETE [ 247.018123] binder: undelivered TRANSACTION_ERROR: 29189 [ 248.663056] FAULT_INJECTION: forcing a failure. [ 248.663056] name failslab, interval 1, probability 0, space 0, times 0 [ 248.677057] CPU: 0 PID: 10127 Comm: syz-executor0 Not tainted 4.15.0-rc1+ #113 [ 248.684435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.684438] Call Trace: [ 248.684455] dump_stack+0x194/0x257 [ 248.684473] ? arch_local_irq_restore+0x53/0x53 [ 248.684506] should_fail+0x8c0/0xa40 [ 248.684524] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 248.684541] ? find_held_lock+0x39/0x1d0 [ 248.684560] ? find_held_lock+0x39/0x1d0 [ 248.684590] ? lock_downgrade+0x980/0x980 [ 248.684629] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 248.684644] ? rcu_note_context_switch+0x710/0x710 [ 248.684656] ? kvm_clock_get_cycles+0x25/0x30 [ 248.684678] should_failslab+0xec/0x120 [ 248.684691] kmem_cache_alloc_trace+0x4b/0x750 [ 248.684700] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 248.684706] ? __lockdep_init_map+0xe4/0x650 [ 248.684719] ? __lockdep_init_map+0xe4/0x650 [ 248.684738] lockdep_init_task+0x187/0x210 [ 248.684752] copy_process.part.36+0x16eb/0x4ae0 [ 248.684788] ? __cleanup_sighand+0x40/0x40 [ 248.684813] ? print_usage_bug+0x3f0/0x3f0 [ 248.684820] ? wake_up_page_bit+0x530/0x530 [ 248.684835] ? __lock_is_held+0xbc/0x140 [ 248.684878] ? __lock_acquire+0x6e9/0x47f0 [ 248.684903] ? perf_trace_lock+0xd6/0x900 [ 248.684910] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 248.684936] ? debug_check_no_locks_freed+0x3d0/0x3d0 [ 248.684945] ? get_mem_cgroup_from_mm+0x49b/0x710 [ 248.684955] ? check_noncircular+0x20/0x20 [ 248.684965] ? perf_trace_lock+0x900/0x900 [ 248.684977] ? print_usage_bug+0x3f0/0x3f0 [ 248.684990] ? perf_trace_lock+0xd6/0x900 [ 248.685013] ? trace_event_raw_event_lock+0x340/0x340 [ 248.685031] ? check_noncircular+0x20/0x20 [ 248.685063] ? perf_trace_lock+0xd6/0x900 [ 248.685071] ? check_noncircular+0x20/0x20 [ 248.685096] ? find_held_lock+0x39/0x1d0 [ 248.685108] ? check_noncircular+0x20/0x20 [ 248.685132] ? lock_downgrade+0x980/0x980 [ 248.685141] ? __lock_is_held+0xbc/0x140 [ 248.685155] ? perf_trace_lock+0xd6/0x900 [ 248.685183] ? find_held_lock+0x39/0x1d0 [ 248.685213] ? lock_downgrade+0x980/0x980 [ 248.685226] ? get_pid_task+0xbc/0x140 [ 248.685239] ? proc_fail_nth_write+0xb5/0x260 [ 248.685251] ? map_files_get_link+0x3a0/0x3a0 [ 248.685257] ? __lock_is_held+0xbc/0x140 [ 248.685278] _do_fork+0x1ef/0xff0 [ 248.685300] ? fork_idle+0x2d0/0x2d0 [ 248.685318] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 248.685329] ? kernel_read+0x120/0x120 [ 248.685341] ? wait_for_completion+0x7b0/0x7b0 [ 248.685396] ? __sb_end_write+0x9e/0xd0 [ 248.685415] ? fput+0xd2/0x140 [ 248.685425] ? SyS_write+0x184/0x220 [ 248.685433] ? __do_page_fault+0x3d6/0xc90 [ 248.685448] ? SyS_read+0x220/0x220 [ 248.685468] SyS_clone+0x37/0x50 [ 248.685478] ? entry_INT80_compat+0x40/0x40 [ 248.685492] do_fast_syscall_32+0x3ee/0xf9d [ 248.685514] ? do_int80_syscall_32+0x9d0/0x9d0 [ 248.685535] ? lockdep_sys_exit+0x47/0xf0 [ 248.685546] ? syscall_return_slowpath+0x2ad/0x550 [ 248.685562] ? sysret32_from_system_call+0x5/0x3b [ 248.685582] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.685604] entry_SYSENTER_compat+0x51/0x60 [ 248.685610] RIP: 0023:0xf7f49c79 [ 248.685615] RSP: 002b:00000000f774508c EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 248.685623] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000002016e000 [ 248.685628] RDX: 0000000020a25ffc RSI: 000000002039f000 RDI: 0000000020402000 [ 248.685633] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.685637] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 248.685641] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.687538] kasan: CONFIG_KASAN_INLINE enabled [ 248.687541] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 248.687548] general protection fault: 0000 [#1] SMP KASAN [ 248.687553] Dumping ftrace buffer: [ 248.687557] (ftrace buffer empty) [ 248.687559] Modules linked in: [ 248.687567] CPU: 0 PID: 10133 Comm: syz-executor0 Not tainted 4.15.0-rc1+ #113 [ 248.687571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.687575] task: 0000000015b2b89a task.stack: 000000007f185d83 [ 248.687584] RIP: 0010:lockdep_invariant_state+0xd6/0x120 [ 248.687587] RSP: 0018:ffff8801c1defe48 EFLAGS: 00010002 [ 248.687593] RAX: dffffc0000000000 RBX: 0000000000001d88 RCX: ffffffff81008dab [ 248.687597] RDX: 00000000000003bc RSI: 0000000000000000 RDI: 0000000000001de0 [ 248.687601] RBP: ffff8801c1defe58 R08: 0000000000000000 R09: 0000000000000000 [ 248.687604] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 248.687608] R13: ffff8801c1deff20 R14: ffff8801c1deff58 R15: ffff8801c4eb64c0 [ 248.687614] FS: 0000000000000000(0000) GS:ffff8801db400000(0063) knlGS:00000000f7745b40 [ 248.687618] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 248.687622] CR2: 00000000f7745100 CR3: 00000001ca8d8000 CR4: 00000000001406f0 [ 248.687626] Call Trace: [ 248.687636] lockdep_sys_exit+0x47/0xf0 [ 248.687645] syscall_return_slowpath+0x240/0x550 [ 248.687653] ? prepare_exit_to_usermode+0x340/0x340 [ 248.687663] ? copy_overflow+0x20/0x20 [ 248.687685] ret_from_fork+0x15/0x30 [ 248.687690] RIP: 0023:0xf7f49c79 [ 248.687693] RSP: 002b:000000002016e000 EFLAGS: 00000296 ORIG_RAX: 0000000000000078 [ 248.687700] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000002016e000 [ 248.687703] RDX: 0000000020a25ffc RSI: 000000002039f000 RDI: 0000000020402000 [ 248.687707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.687710] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 248.687714] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.687733] Code: 83 90 11 00 00 83 e0 3f 48 89 c2 48 c1 e2 04 48 29 c2 48 b8 00 00 00 00 00 fc ff df 49 8d 1c d4 48 8d 7b 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 2f 48 c7 43 58 00 00 00 00 5b 41 5c 5d c3 0f ff [ 248.687859] RIP: lockdep_invariant_state+0xd6/0x120 RSP: ffff8801c1defe48 [ 248.687868] ---[ end trace 8b46e21c05524fe8 ]--- [ 248.687872] Kernel panic - not syncing: Fatal exception [ 248.694484] Dumping ftrace buffer: [ 248.694487] (ftrace buffer empty) [ 248.694490] Kernel Offset: disabled