INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. 2018/04/21 01:35:20 fuzzer started 2018/04/21 01:35:20 dialing manager at 10.128.0.26:39431 syzkaller login: [ 51.103589] can: request_module (can-proto-0) failed. [ 51.112672] can: request_module (can-proto-0) failed. 2018/04/21 01:35:43 kcov=true, comps=true 2018/04/21 01:35:43 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0xa000c0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file0/file0\x00') 2018/04/21 01:35:43 executing program 2: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r1 = open$dir(&(0x7f0000000b80)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0xfffffddd) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) read(r0, &(0x7f0000000c00)=""/194, 0xffffff58) 2018/04/21 01:35:43 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:35:43 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) syz_emit_ethernet(0x1f0, &(0x7f00003f3fd5)={@random="17ca660a423b", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/21 01:35:43 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) 2018/04/21 01:35:43 executing program 5: prctl$intptr(0x18, 0x20) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8273}) 2018/04/21 01:35:43 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x4e21, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x1a0) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/21 01:35:43 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) [ 53.590800] IPVS: ftp: loaded support on port[0] = 21 [ 53.646827] IPVS: ftp: loaded support on port[0] = 21 [ 53.700621] IPVS: ftp: loaded support on port[0] = 21 [ 53.707931] IPVS: ftp: loaded support on port[0] = 21 [ 53.713949] IPVS: ftp: loaded support on port[0] = 21 [ 53.738673] IPVS: ftp: loaded support on port[0] = 21 [ 53.757093] IPVS: ftp: loaded support on port[0] = 21 [ 53.799961] IPVS: ftp: loaded support on port[0] = 21 [ 55.686044] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.692565] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.724302] device bridge_slave_0 entered promiscuous mode [ 55.812084] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.818493] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.860468] device bridge_slave_0 entered promiscuous mode [ 55.870044] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.876412] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.884121] device bridge_slave_0 entered promiscuous mode [ 55.924623] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.931056] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.954975] device bridge_slave_1 entered promiscuous mode [ 55.975384] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.981779] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.989054] device bridge_slave_0 entered promiscuous mode [ 55.997420] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.003794] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.014055] device bridge_slave_0 entered promiscuous mode [ 56.021773] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.028147] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.036500] device bridge_slave_0 entered promiscuous mode [ 56.045966] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.052348] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.061398] device bridge_slave_1 entered promiscuous mode [ 56.069592] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.075970] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.088463] device bridge_slave_0 entered promiscuous mode [ 56.096673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.109191] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.115584] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.143334] device bridge_slave_1 entered promiscuous mode [ 56.151977] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.158421] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.165883] device bridge_slave_1 entered promiscuous mode [ 56.174994] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.181371] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.189897] device bridge_slave_1 entered promiscuous mode [ 56.196742] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.203136] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.221371] device bridge_slave_0 entered promiscuous mode [ 56.229571] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.235999] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.243657] device bridge_slave_1 entered promiscuous mode [ 56.250330] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.256732] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.264546] device bridge_slave_1 entered promiscuous mode [ 56.272831] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.281207] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.290479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.301715] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.309131] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.317296] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.323675] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.357054] device bridge_slave_1 entered promiscuous mode [ 56.379887] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.388466] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.400238] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.419568] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.427578] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.488051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.496760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 56.558603] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.594508] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.668546] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 56.749471] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.774370] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.786713] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.897234] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.906227] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.916433] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.927239] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.952013] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 56.962842] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 56.973619] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.023316] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.060239] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.089406] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.106315] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.117339] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 57.126879] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.133775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.172567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.179458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.194172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.202856] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.210260] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.217138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.235990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.265917] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.284735] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 57.294155] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.302193] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.313101] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.325996] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.358778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.367425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.379556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.406551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.436549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.447635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.457593] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 57.464631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.474194] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.485511] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.522155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.537493] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.592256] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 57.599143] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.656164] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.680814] team0: Port device team_slave_0 added [ 57.689120] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.697998] team0: Port device team_slave_0 added [ 57.742688] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.763593] team0: Port device team_slave_0 added [ 57.789435] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.822661] team0: Port device team_slave_1 added [ 57.836607] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.845144] team0: Port device team_slave_0 added [ 57.852683] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.863858] team0: Port device team_slave_0 added [ 57.875885] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.883396] team0: Port device team_slave_0 added [ 57.893498] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.904327] team0: Port device team_slave_1 added [ 57.918069] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 57.939131] team0: Port device team_slave_0 added [ 57.952355] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 57.970323] team0: Port device team_slave_1 added [ 57.988744] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.004821] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 58.017802] team0: Port device team_slave_1 added [ 58.028101] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 58.039549] team0: Port device team_slave_1 added [ 58.047332] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 58.060937] team0: Port device team_slave_0 added [ 58.071097] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 58.080163] team0: Port device team_slave_1 added [ 58.098531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.110491] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 58.124049] team0: Port device team_slave_1 added [ 58.140930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.178154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.209343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.220555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.228288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.240368] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 58.247528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.256776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.266686] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 58.275542] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.282723] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.293416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.301316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.310324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.320500] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.329454] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.336513] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 58.347618] team0: Port device team_slave_1 added [ 58.359538] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.368061] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.375751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.386914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.418548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.433571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.441485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.449315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.456718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.464439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.473932] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.481289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.489919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.498204] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.506742] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.515776] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 58.524782] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 58.533776] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.544396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 58.555346] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 58.566224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.585093] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.622426] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.638400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.651194] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.658890] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.666639] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.674346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.681720] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.689419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.696783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.704696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.712441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.720389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.728662] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 58.736094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.744472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.758707] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.770271] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 58.781811] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.792140] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.800645] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 58.808567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.826114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.858440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.883604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.901757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.909475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.917309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.925110] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.932811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.940581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.955341] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.987119] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 58.994427] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.013538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.043104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.065263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.073543] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 59.080993] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.088876] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.231573] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 59.238790] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.253328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.107842] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.114387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.121396] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.127786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.153932] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.161817] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.192891] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.199278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.205933] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.212303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.255808] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.266199] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.272591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.279205] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.285584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.317381] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.332476] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.338864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.345530] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.351899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.365522] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.375819] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.382192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.388857] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.395236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.428706] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.455168] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.461568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.468240] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.474628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.523966] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.552875] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.559273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.565948] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.572329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.623977] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 60.641458] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.647838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.654499] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.660872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.703962] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 61.215283] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.227678] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.256071] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.263813] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.271749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.278992] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 61.286669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.135414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.310061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.330254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.358804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.501133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.528380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.590667] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 65.696010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.723750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.747101] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 65.829964] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 65.843677] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 65.995480] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.002976] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.093438] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.099661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.107802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.145843] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.221481] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.227747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.239397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.258294] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 66.279751] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.285928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.300123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.325068] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.331577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.361862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.501225] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.508611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.516869] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.550438] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.556758] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.572684] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.652458] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.676211] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.702215] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.725836] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.742755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.758507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.799966] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.916784] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 66.923054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.934566] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.976404] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.008062] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.277325] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.455783] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/21 01:36:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/21 01:36:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) [ 69.584803] capability: warning: `syz-executor5' uses deprecated v2 capabilities in a way that may be insecure 2018/04/21 01:36:00 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:36:00 executing program 5: prctl$intptr(0x18, 0x20) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8273}) 2018/04/21 01:36:00 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) 2018/04/21 01:36:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/21 01:36:00 executing program 5: prctl$intptr(0x18, 0x20) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8273}) 2018/04/21 01:36:00 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 70.670818] syz-executor2 (6663) used greatest stack depth: 13272 bytes left 2018/04/21 01:36:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0xa000c0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file0/file0\x00') 2018/04/21 01:36:01 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x4e21, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x1a0) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/21 01:36:01 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) syz_emit_ethernet(0x1f0, &(0x7f00003f3fd5)={@random="17ca660a423b", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/21 01:36:01 executing program 2: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r1 = open$dir(&(0x7f0000000b80)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0xfffffddd) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) read(r0, &(0x7f0000000c00)=""/194, 0xffffff58) 2018/04/21 01:36:01 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/21 01:36:01 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) 2018/04/21 01:36:01 executing program 5: prctl$intptr(0x18, 0x20) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8273}) 2018/04/21 01:36:01 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:36:01 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) syz_emit_ethernet(0x1f0, &(0x7f00003f3fd5)={@random="17ca660a423b", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/21 01:36:01 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0xa000c0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file0/file0\x00') 2018/04/21 01:36:01 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0xa000c0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file0/file0\x00') 2018/04/21 01:36:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0xa000c0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file0/file0\x00') 2018/04/21 01:36:02 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x4e21, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x1a0) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/21 01:36:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0xa000c0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file0/file0\x00') 2018/04/21 01:36:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0xa000c0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file0/file0\x00') 2018/04/21 01:36:02 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0xa000c0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file0/file0\x00') 2018/04/21 01:36:02 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0xa000c0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file0/file0\x00') 2018/04/21 01:36:02 executing program 2: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r1 = open$dir(&(0x7f0000000b80)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0xfffffddd) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) read(r0, &(0x7f0000000c00)=""/194, 0xffffff58) 2018/04/21 01:36:02 executing program 7: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r1 = open$dir(&(0x7f0000000b80)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0xfffffddd) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) read(r0, &(0x7f0000000c00)=""/194, 0xffffff58) 2018/04/21 01:36:02 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='syz_tun\x00', 0x10) syz_emit_ethernet(0x1f0, &(0x7f00003f3fd5)={@random="17ca660a423b", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) 2018/04/21 01:36:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x4e21, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x1a0) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/21 01:36:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0xa000c0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file0/file0\x00') 2018/04/21 01:36:02 executing program 4: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0xa000c0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file0/file0\x00') 2018/04/21 01:36:03 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0xa000c0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file0/file0\x00') 2018/04/21 01:36:03 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0xa000c0, &(0x7f0000000240)=ANY=[]) r0 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file0/file1\x00', 0x0) renameat(r0, &(0x7f00000000c0)='./file1\x00', r0, &(0x7f0000000180)='./file0/file0\x00') 2018/04/21 01:36:03 executing program 5: prctl$intptr(0x18, 0x20) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8273}) 2018/04/21 01:36:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:36:03 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x4e21, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x1a0) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/21 01:36:03 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x4e21, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x1a0) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/21 01:36:03 executing program 2: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r1 = open$dir(&(0x7f0000000b80)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0xfffffddd) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) read(r0, &(0x7f0000000c00)=""/194, 0xffffff58) 2018/04/21 01:36:03 executing program 7: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r1 = open$dir(&(0x7f0000000b80)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0xfffffddd) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) read(r0, &(0x7f0000000c00)=""/194, 0xffffff58) 2018/04/21 01:36:03 executing program 5: prctl$intptr(0x18, 0x20) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8273}) 2018/04/21 01:36:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:36:03 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:36:03 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/21 01:36:03 executing program 5: prctl$intptr(0x18, 0x20) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8273}) 2018/04/21 01:36:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:36:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/21 01:36:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:36:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/21 01:36:04 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1}}, {{&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=""/226, 0xe2}, 0x3c}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)=""/53, 0x35}, {&(0x7f0000001100)=""/63, 0x3f}], 0x2, &(0x7f0000004240)=""/178, 0xb2}}], 0x3, 0x10100, &(0x7f00000011c0)={0x0, 0x989680}) 2018/04/21 01:36:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000516ff0)={0x2, 0x4e21, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x1a0) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) shutdown(r0, 0x1) 2018/04/21 01:36:04 executing program 7: r0 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) r1 = open$dir(&(0x7f0000000b80)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f0000000000), 0xfffffddd) getsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) read(r0, &(0x7f0000000c00)=""/194, 0xffffff58) 2018/04/21 01:36:04 executing program 2: rt_sigaction(0x7, &(0x7f0000000040)={0x42a535, {0xfffffffffffffffc}}, &(0x7f00000002c0), 0x8, &(0x7f0000000280)) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) 2018/04/21 01:36:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/21 01:36:04 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/21 01:36:04 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1}}, {{&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=""/226, 0xe2}, 0x3c}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)=""/53, 0x35}, {&(0x7f0000001100)=""/63, 0x3f}], 0x2, &(0x7f0000004240)=""/178, 0xb2}}], 0x3, 0x10100, &(0x7f00000011c0)={0x0, 0x989680}) 2018/04/21 01:36:04 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000001c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3ff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:36:04 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mq_open(&(0x7f0000000080)="2f6465765d01eac8990d6b98bc752f736e649ca01ce7827f3b94a014418d4620e5d7cc1b8665fb9028bb91f2cf1163c10751afdfab44638006612570c2", 0x0, 0x0, &(0x7f0000000100)) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/93, 0x5d) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 2018/04/21 01:36:04 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x7ff, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/21 01:36:04 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1}}, {{&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=""/226, 0xe2}, 0x3c}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)=""/53, 0x35}, {&(0x7f0000001100)=""/63, 0x3f}], 0x2, &(0x7f0000004240)=""/178, 0xb2}}], 0x3, 0x10100, &(0x7f00000011c0)={0x0, 0x989680}) 2018/04/21 01:36:04 executing program 0: syz_open_dev$random(&(0x7f0000000080)='/dev/random\x00', 0x0, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "c3f1b7fb1599e8a004e390320f5ed54a"}) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080045432, &(0x7f0000000000)) 2018/04/21 01:36:04 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mq_open(&(0x7f0000000080)="2f6465765d01eac8990d6b98bc752f736e649ca01ce7827f3b94a014418d4620e5d7cc1b8665fb9028bb91f2cf1163c10751afdfab44638006612570c2", 0x0, 0x0, &(0x7f0000000100)) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/93, 0x5d) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 2018/04/21 01:36:04 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x4, {{0x2, 0x0, @multicast1=0xe0000001}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffff45, 0x0, 0x0, 0xfffffffffffffe05) 2018/04/21 01:36:04 executing program 1: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000001}, 0x0) 2018/04/21 01:36:04 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000035000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c4c220f3943900180000b98c0b00000f32b9aa0b00000f32420f2210c4e1b3585f000fc71cb93665470f01d1470f32b9800000c00f3235000100000f30ab", 0x3e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:36:04 executing program 7: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a2809302000000030343026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f000002c000)}, 0x0) 2018/04/21 01:36:04 executing program 0: syz_open_dev$random(&(0x7f0000000080)='/dev/random\x00', 0x0, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "c3f1b7fb1599e8a004e390320f5ed54a"}) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080045432, &(0x7f0000000000)) 2018/04/21 01:36:04 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000d26000)={0x1, &(0x7f0000818000)=[{0x6, 0x0, 0x0, 0x100}]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000), 0xfda0, 0x20000800, &(0x7f0000000080)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="a6", 0x1, 0x0, &(0x7f0000001200)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) recvmmsg(r0, &(0x7f0000004300)=[{{&(0x7f0000000100)=@can, 0x80, &(0x7f0000000180)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1}}, {{&(0x7f0000000b40)=@hci, 0x80, &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=""/226, 0xe2}, 0x3c}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)=""/53, 0x35}, {&(0x7f0000001100)=""/63, 0x3f}], 0x2, &(0x7f0000004240)=""/178, 0xb2}}], 0x3, 0x10100, &(0x7f00000011c0)={0x0, 0x989680}) 2018/04/21 01:36:04 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000081a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000b1d000)=[{0x24}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f000011e000)=[{&(0x7f000001aff6)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000012fa0), 0x0, &(0x7f000001a000)}], 0x1, 0x0) 2018/04/21 01:36:05 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 2018/04/21 01:36:05 executing program 0: syz_open_dev$random(&(0x7f0000000080)='/dev/random\x00', 0x0, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "c3f1b7fb1599e8a004e390320f5ed54a"}) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080045432, &(0x7f0000000000)) [ 74.501602] netlink: 'syz-executor7': attribute type 4 has an invalid length. [ 74.509192] netlink: 17 bytes leftover after parsing attributes in process `syz-executor7'. [ 74.525104] capability: warning: `syz-executor1' uses 32-bit capabilities (legacy support in use) 2018/04/21 01:36:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000081a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000b1d000)=[{0x24}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f000011e000)=[{&(0x7f000001aff6)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000012fa0), 0x0, &(0x7f000001a000)}], 0x1, 0x0) 2018/04/21 01:36:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x4, {{0x2, 0x0, @multicast1=0xe0000001}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffff45, 0x0, 0x0, 0xfffffffffffffe05) 2018/04/21 01:36:05 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mq_open(&(0x7f0000000080)="2f6465765d01eac8990d6b98bc752f736e649ca01ce7827f3b94a014418d4620e5d7cc1b8665fb9028bb91f2cf1163c10751afdfab44638006612570c2", 0x0, 0x0, &(0x7f0000000100)) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/93, 0x5d) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 2018/04/21 01:36:05 executing program 1: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000001}, 0x0) 2018/04/21 01:36:05 executing program 7: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a2809302000000030343026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f000002c000)}, 0x0) 2018/04/21 01:36:05 executing program 0: syz_open_dev$random(&(0x7f0000000080)='/dev/random\x00', 0x0, 0x80) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, [], [], [], 0x0, 0x0, 0x0, 0x0, "c3f1b7fb1599e8a004e390320f5ed54a"}) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000080045432, &(0x7f0000000000)) 2018/04/21 01:36:05 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 2018/04/21 01:36:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000035000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c4c220f3943900180000b98c0b00000f32b9aa0b00000f32420f2210c4e1b3585f000fc71cb93665470f01d1470f32b9800000c00f3235000100000f30ab", 0x3e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 74.751171] netlink: 'syz-executor7': attribute type 4 has an invalid length. [ 74.758571] netlink: 17 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/21 01:36:05 executing program 1: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000001}, 0x0) 2018/04/21 01:36:05 executing program 7: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a2809302000000030343026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f000002c000)}, 0x0) 2018/04/21 01:36:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000081a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000b1d000)=[{0x24}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f000011e000)=[{&(0x7f000001aff6)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000012fa0), 0x0, &(0x7f000001a000)}], 0x1, 0x0) [ 74.936348] netlink: 'syz-executor7': attribute type 4 has an invalid length. [ 74.943728] netlink: 17 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/21 01:36:05 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mq_open(&(0x7f0000000080)="2f6465765d01eac8990d6b98bc752f736e649ca01ce7827f3b94a014418d4620e5d7cc1b8665fb9028bb91f2cf1163c10751afdfab44638006612570c2", 0x0, 0x0, &(0x7f0000000100)) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/93, 0x5d) ioctl(r0, 0xc2604110, &(0x7f0000000000)) 2018/04/21 01:36:05 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 2018/04/21 01:36:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x4, {{0x2, 0x0, @multicast1=0xe0000001}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffff45, 0x0, 0x0, 0xfffffffffffffe05) 2018/04/21 01:36:05 executing program 1: capset(&(0x7f0000594ff8)={0x19980330}, &(0x7f0000244000)) sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x80000001}, 0x0) 2018/04/21 01:36:05 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 2018/04/21 01:36:05 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000035000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c4c220f3943900180000b98c0b00000f32b9aa0b00000f32420f2210c4e1b3585f000fc71cb93665470f01d1470f32b9800000c00f3235000100000f30ab", 0x3e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:36:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000081a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000b1d000)=[{0x24}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f000011e000)=[{&(0x7f000001aff6)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000012fa0), 0x0, &(0x7f000001a000)}], 0x1, 0x0) 2018/04/21 01:36:05 executing program 7: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f000002aff0)=[{&(0x7f0000010000)="5500000020007fafb72d13b2a4a2809302000000030343026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d544000000000000f75ae583de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f000002c000)}, 0x0) 2018/04/21 01:36:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 2018/04/21 01:36:05 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 2018/04/21 01:36:05 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x4, {{0x2, 0x0, @multicast1=0xe0000001}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffff45, 0x0, 0x0, 0xfffffffffffffe05) [ 75.127382] netlink: 'syz-executor7': attribute type 4 has an invalid length. [ 75.134777] netlink: 17 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/21 01:36:05 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000081a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000b1d000)=[{0x24}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f000011e000)=[{&(0x7f000001aff6)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000012fa0), 0x0, &(0x7f000001a000)}], 0x1, 0x0) 2018/04/21 01:36:05 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 2018/04/21 01:36:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x4, {{0x2, 0x0, @multicast1=0xe0000001}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffff45, 0x0, 0x0, 0xfffffffffffffe05) 2018/04/21 01:36:05 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x0, 0x800}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x6]) 2018/04/21 01:36:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 2018/04/21 01:36:06 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 2018/04/21 01:36:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000035000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="c4c220f3943900180000b98c0b00000f32b9aa0b00000f32420f2210c4e1b3585f000fc71cb93665470f01d1470f32b9800000c00f3235000100000f30ab", 0x3e}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/21 01:36:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x4, {{0x2, 0x0, @multicast1=0xe0000001}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffff45, 0x0, 0x0, 0xfffffffffffffe05) 2018/04/21 01:36:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000081a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000b1d000)=[{0x24}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f000011e000)=[{&(0x7f000001aff6)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000012fa0), 0x0, &(0x7f000001a000)}], 0x1, 0x0) 2018/04/21 01:36:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpriority(0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) 2018/04/21 01:36:06 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) 2018/04/21 01:36:06 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x0, 0x800}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x6]) 2018/04/21 01:36:06 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x0, 0x800}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x6]) 2018/04/21 01:36:06 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000081a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000018000)={0x2, &(0x7f0000b1d000)=[{0x24}, {0x6}]}, 0x10) sendmmsg$unix(r1, &(0x7f000011e000)=[{&(0x7f000001aff6)=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000012fa0), 0x0, &(0x7f000001a000)}], 0x1, 0x0) 2018/04/21 01:36:06 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x0, 0x800}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x6]) 2018/04/21 01:36:06 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}], 0x98}], 0x1, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) 2018/04/21 01:36:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xb6, &(0x7f0000000040)={&(0x7f00003c0fdc)={0x24, 0x1, 0x9, 0x808000003, 0x0, 0x0, {}, [@nested={0x10, 0x2, [@typed={0xc, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}]}, 0x24}, 0x1}, 0x0) 2018/04/21 01:36:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x4, {{0x2, 0x0, @multicast1=0xe0000001}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x108) recvfrom(r0, &(0x7f0000f9cf9b)=""/101, 0xffffffffffffff45, 0x0, 0x0, 0xfffffffffffffe05) 2018/04/21 01:36:06 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f}, 0x8) listen(r0, 0x0) 2018/04/21 01:36:06 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}], 0x98}], 0x1, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) [ 76.415304] netlink: 'syz-executor2': attribute type 1 has an invalid length. 2018/04/21 01:36:06 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f}, 0x8) listen(r0, 0x0) 2018/04/21 01:36:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xb6, &(0x7f0000000040)={&(0x7f00003c0fdc)={0x24, 0x1, 0x9, 0x808000003, 0x0, 0x0, {}, [@nested={0x10, 0x2, [@typed={0xc, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}]}, 0x24}, 0x1}, 0x0) 2018/04/21 01:36:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f}, 0x8) listen(r0, 0x0) 2018/04/21 01:36:07 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f}, 0x8) listen(r0, 0x0) 2018/04/21 01:36:07 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}], 0x98}], 0x1, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) 2018/04/21 01:36:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f}, 0x8) listen(r0, 0x0) [ 76.546479] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 77.008446] binder: undelivered transaction 2, process died. [ 77.032086] binder: BINDER_SET_CONTEXT_MGR already set [ 77.037839] binder: 6982:7038 ioctl 40046207 0 returned -16 [ 77.046524] binder_alloc: 6982: binder_alloc_buf, no vma [ 77.052237] binder: 6982:6984 transaction failed 29189/-3, size 0-0 line 2963 [ 77.083987] binder: undelivered TRANSACTION_ERROR: 29189 [ 77.089847] binder: undelivered TRANSACTION_COMPLETE 2018/04/21 01:36:07 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x0, 0x800}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x6]) 2018/04/21 01:36:07 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x0, 0x800}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x6]) 2018/04/21 01:36:07 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x0, 0x800}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x6]) 2018/04/21 01:36:07 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) 2018/04/21 01:36:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xb6, &(0x7f0000000040)={&(0x7f00003c0fdc)={0x24, 0x1, 0x9, 0x808000003, 0x0, 0x0, {}, [@nested={0x10, 0x2, [@typed={0xc, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}]}, 0x24}, 0x1}, 0x0) 2018/04/21 01:36:07 executing program 5: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f}, 0x8) listen(r0, 0x0) 2018/04/21 01:36:07 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f}, 0x8) listen(r0, 0x0) 2018/04/21 01:36:07 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000a000)=[{&(0x7f000000a000)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000001ef8)=[@cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @cred={0x20, 0x1, 0x2}, @rights={0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}, @cred={0x20, 0x1, 0x2}], 0x98}], 0x1, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc1004110, &(0x7f0000001f64)) 2018/04/21 01:36:07 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) 2018/04/21 01:36:07 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) [ 77.177823] netlink: 'syz-executor2': attribute type 1 has an invalid length. 2018/04/21 01:36:07 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) 2018/04/21 01:36:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xb6, &(0x7f0000000040)={&(0x7f00003c0fdc)={0x24, 0x1, 0x9, 0x808000003, 0x0, 0x0, {}, [@nested={0x10, 0x2, [@typed={0xc, 0x1, @ipv4=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}]}]}, 0x24}, 0x1}, 0x0) [ 77.300875] binder: BINDER_SET_CONTEXT_MGR already set [ 77.317685] binder: 7062:7063 ioctl 40046207 0 returned -16 [ 77.318938] netlink: 'syz-executor2': attribute type 1 has an invalid length. [ 77.332545] binder: BINDER_SET_CONTEXT_MGR already set [ 77.338272] binder: 7066:7067 ioctl 40046207 0 returned -16 [ 77.341727] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/21 01:36:07 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) [ 77.352091] binder: 7068:7069 ioctl 40046207 0 returned -16 [ 77.402568] binder: BINDER_SET_CONTEXT_MGR already set [ 77.408141] binder: 7073:7075 ioctl 40046207 0 returned -16 2018/04/21 01:36:08 executing program 6: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x0, 0x800}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x6]) 2018/04/21 01:36:08 executing program 7: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x0, 0x800}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x6]) [ 77.996146] binder: undelivered transaction 5, process died. [ 78.043754] binder: undelivered transaction 6, process died. [ 78.049904] binder: undelivered TRANSACTION_COMPLETE [ 78.073211] binder: 7066:7089 transaction failed 29189/-22, size 0-0 line 2848 [ 78.084494] binder: 7068:7090 transaction failed 29189/-22, size 0-0 line 2848 [ 78.177265] binder: 7073:7091 transaction failed 29189/-22, size 0-0 line 2848 [ 78.217575] binder: undelivered TRANSACTION_COMPLETE [ 78.253267] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.275828] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.369455] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 01:36:09 executing program 4: sched_setaffinity(0x0, 0x8, &(0x7f0000d81ff8)=0x101) r0 = semget$private(0x0, 0x20000000102, 0x0) semtimedop(r0, &(0x7f0000033816)=[{0x0, 0x0, 0x800}, {0x0, 0x8091}], 0x2, &(0x7f0000034000)={0x77359400}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x6]) 2018/04/21 01:36:09 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) 2018/04/21 01:36:09 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) 2018/04/21 01:36:09 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) 2018/04/21 01:36:09 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4001, &(0x7f0000527ff8)=0x7fff, 0x401c, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 2018/04/21 01:36:09 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) 2018/04/21 01:36:09 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) 2018/04/21 01:36:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14}, @in=@dev={0xac, 0x14}}}}, [@policy_type={0xc, 0x10, {0x8}}]}, 0xcc}, 0x1}, 0x0) 2018/04/21 01:36:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14}, @in=@dev={0xac, 0x14}}}}, [@policy_type={0xc, 0x10, {0x8}}]}, 0xcc}, 0x1}, 0x0) [ 78.932302] binder: BINDER_SET_CONTEXT_MGR already set [ 78.937690] binder: BINDER_SET_CONTEXT_MGR already set [ 78.942329] binder: 7104:7112 ioctl 40046207 0 returned -16 [ 78.947211] binder: BINDER_SET_CONTEXT_MGR already set [ 78.952447] binder: 7101:7103 ioctl 40046207 0 returned -16 [ 78.954158] binder: BINDER_SET_CONTEXT_MGR already set [ 78.966986] binder: 7099:7100 ioctl 40046207 0 returned -16 2018/04/21 01:36:09 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4001, &(0x7f0000527ff8)=0x7fff, 0x401c, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 2018/04/21 01:36:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14}, @in=@dev={0xac, 0x14}}}}, [@policy_type={0xc, 0x10, {0x8}}]}, 0xcc}, 0x1}, 0x0) [ 78.978154] binder: 7106:7107 ioctl 40046207 0 returned -16 2018/04/21 01:36:09 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x0, {{{@in=@dev={0xac, 0x14}, @in=@dev={0xac, 0x14}}}}, [@policy_type={0xc, 0x10, {0x8}}]}, 0xcc}, 0x1}, 0x0) 2018/04/21 01:36:09 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4001, &(0x7f0000527ff8)=0x7fff, 0x401c, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 2018/04/21 01:36:09 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4001, &(0x7f0000527ff8)=0x7fff, 0x401c, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 2018/04/21 01:36:09 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4001, &(0x7f0000527ff8)=0x7fff, 0x401c, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 2018/04/21 01:36:09 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4001, &(0x7f0000527ff8)=0x7fff, 0x401c, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 2018/04/21 01:36:10 executing program 6: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4001, &(0x7f0000527ff8)=0x7fff, 0x401c, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) [ 79.641106] binder: undelivered transaction 11, process died. [ 79.664085] binder: undelivered transaction 12, process died. [ 79.670061] binder: undelivered transaction 13, process died. [ 79.675999] binder: undelivered transaction 14, process died. [ 79.682010] binder: 7104:7146 transaction failed 29189/-22, size 0-0 line 2848 [ 79.692056] binder: undelivered TRANSACTION_COMPLETE [ 79.834733] binder: undelivered TRANSACTION_COMPLETE [ 79.848779] binder: undelivered TRANSACTION_COMPLETE [ 79.864383] binder: undelivered TRANSACTION_COMPLETE 2018/04/21 01:36:10 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) 2018/04/21 01:36:10 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) 2018/04/21 01:36:10 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) 2018/04/21 01:36:10 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4001, &(0x7f0000527ff8)=0x7fff, 0x401c, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 2018/04/21 01:36:10 executing program 4: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000dd0ff0)={&(0x7f0000d3dc98)={0x1c, 0x13, 0x800000a, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x3, [@generic="ba"]}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 01:36:10 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) io_setup(0x8000000007, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)='0', 0x1}]) 2018/04/21 01:36:10 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) 2018/04/21 01:36:10 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x100000005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = dup(r3) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000aff0)=[@enter_looper={0x630c}], 0x4, 0x0, &(0x7f0000004000)="2716c84b"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000afd0)={0x19, 0x0, &(0x7f0000009f84)=ANY=[@ANYBLOB="11634840000000000000004000000000000000000000000007"], 0x0, 0x0, &(0x7f0000003fb3)}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) accept$alg(r4, 0x0, 0x0) io_setup(0x3f, &(0x7f00000001c0)) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000c80)={0x27}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r1}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000300)='bic\x00', 0x4) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000cc0)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x10}}, 0x9}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x14}, 0x6}, 0x5, [0xeaf, 0xffff, 0x0, 0x800, 0x7, 0x0, 0x0, 0xb236]}, 0x5c) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000000380)={0x18, 0x0, {0x1, @random="8a2cde8fb84b", 'yam0\x00'}}) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000c00)='/dev/cuse\x00', 0x101, 0x0) r8 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x121000, 0x0) write$cgroup_int(r8, &(0x7f00000001c0)={[0x35, 0x34, 0x3b, 0x0, 0x30, 0x3d, 0x2f]}, 0x7) r9 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") ioctl$fiemap(r9, 0x40086610, &(0x7f0000000080)=ANY=[@ANYRES64=r9]) r10 = openat$cgroup_int(r6, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) getsockopt$inet_dccp_buf(r7, 0x21, 0x2, &(0x7f0000000200)=""/35, &(0x7f0000000240)=0x23) dup3(r10, r6, 0x0) write$cgroup_int(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='9:4\r'], 0x4) [ 79.887442] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 01:36:10 executing program 4: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000dd0ff0)={&(0x7f0000d3dc98)={0x1c, 0x13, 0x800000a, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x3, [@generic="ba"]}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 01:36:10 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) io_setup(0x8000000007, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)='0', 0x1}]) 2018/04/21 01:36:10 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4001, &(0x7f0000527ff8)=0x7fff, 0x401c, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) [ 80.012835] binder: BINDER_SET_CONTEXT_MGR already set [ 80.023775] binder: BINDER_SET_CONTEXT_MGR already set [ 80.031983] binder: BINDER_SET_CONTEXT_MGR already set [ 80.037377] binder: BINDER_SET_CONTEXT_MGR already set [ 80.044723] binder: 7164:7167 ioctl 40046207 0 returned -16 [ 80.047214] binder: 7171:7173 ioctl 40046207 0 returned -16 2018/04/21 01:36:10 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) io_setup(0x8000000007, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)='0', 0x1}]) [ 80.063875] binder: 7155:7158 ioctl 40046207 0 returned -16 [ 80.068426] binder: 7162:7166 ioctl 40046207 0 returned -16 2018/04/21 01:36:10 executing program 4: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000dd0ff0)={&(0x7f0000d3dc98)={0x1c, 0x13, 0x800000a, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x3, [@generic="ba"]}]}, 0x1c}, 0x1}, 0x0) 2018/04/21 01:36:10 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x71, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4001, &(0x7f0000527ff8)=0x7fff, 0x401c, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x0, 0x64031, 0xffffffffffffffff, 0x0) 2018/04/21 01:36:10 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) io_setup(0x8000000007, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000200)='0', 0x1}]) 2018/04/21 01:36:10 executing program 4: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000dd0ff0)={&(0x7f0000d3dc98)={0x1c, 0x13, 0x800000a, 0xffffffffffffffff, 0x0, 0x0, {}, [@nested={0x8, 0x3, [@generic="ba"]}]}, 0x1c}, 0x1}, 0x0) [ 80.715337] binder: undelivered transaction 17, process died. [ 80.738150] binder: undelivered transaction 18, process died. [ 80.744115] binder: undelivered transaction 19, process died. [ 80.750063] binder: undelivered transaction 20, process died. [ 80.756095] binder: 7171:7204 transaction failed 29189/-22, size 0-0 line 2848 [ 80.764231] binder: undelivered TRANSACTION_COMPLETE [ 80.891437] binder: undelivered TRANSACTION_COMPLETE 2018/04/21 01:36:11 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000480)=""/165) 2018/04/21 01:36:11 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f00000000c0)) 2018/04/21 01:36:11 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000000)=@srh={0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, [@local={0xfe, 0x80, [], 0xaa}]}, 0x18) setsockopt$inet6_opts(r0, 0x29, 0x6, &(0x7f00000000c0)=@routing, 0x8) 2018/04/21 01:36:11 executing program 6: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e20}, 0x10) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000ce6ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) recvmsg(r0, &(0x7f0000edffc8)={0x0, 0x0, &(0x7f0000ef8fd0), 0x1, &(0x7f0000603000)=""/81, 0x51}, 0x40002102) 2018/04/21 01:36:11 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) [ 80.916520] binder: undelivered TRANSACTION_COMPLETE [ 80.933538] binder: undelivered TRANSACTION_COMPLETE 2018/04/21 01:36:11 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000000), 0x4) 2018/04/21 01:36:11 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f00002e4000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) name_to_handle_at(r0, &(0x7f00002e4000)='./file0\x00', &(0x7f0000000ff4)={0xc, 0x0, "1ca00205"}, &(0x7f0000000000), 0x1400) 2018/04/21 01:36:11 executing program 2: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, '\x00', '\x00', '\x00', '\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0xc0, 0xf8}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, 0xfffffffffffffffc}}}}]}]}, 0x230) getpeername(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) [ 80.963903] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/21 01:36:11 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f00000000c0)) 2018/04/21 01:36:11 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) 2018/04/21 01:36:11 executing program 2: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, '\x00', '\x00', '\x00', '\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0xc0, 0xf8}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, 0xfffffffffffffffc}}}}]}]}, 0x230) getpeername(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) [ 81.077313] ================================================================== [ 81.084815] BUG: KASAN: null-ptr-deref in refcount_inc_not_zero+0x8f/0x2d0 [ 81.091829] Read of size 4 at addr 0000000000000004 by task syz-executor3/7216 [ 81.099178] [ 81.100828] CPU: 0 PID: 7216 Comm: syz-executor3 Not tainted 4.17.0-rc1+ #10 [ 81.108007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.117360] Call Trace: [ 81.119951] dump_stack+0x1b9/0x294 [ 81.123587] ? dump_stack_print_info.cold.2+0x52/0x52 [ 81.128779] ? kasan_check_write+0x14/0x20 [ 81.133014] ? do_raw_spin_lock+0xc1/0x200 [ 81.137255] ? vprintk_func+0x81/0xe7 [ 81.141060] ? refcount_inc_not_zero+0x8f/0x2d0 [ 81.145734] kasan_report.cold.7+0x6d/0x2fe [ 81.150066] check_memory_region+0x13e/0x1b0 [ 81.154479] kasan_check_read+0x11/0x20 [ 81.158456] refcount_inc_not_zero+0x8f/0x2d0 [ 81.162954] ? refcount_add_not_zero+0x320/0x320 [ 81.167712] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 81.172727] ? lock_sock_nested+0x9f/0x120 [ 81.176972] refcount_inc+0x15/0x70 [ 81.180601] llc_ui_release+0xba/0x2b0 [ 81.184488] ? fsnotify_first_mark+0x330/0x330 [ 81.189074] sock_release+0x96/0x1b0 [ 81.192793] ? sock_alloc_file+0x4e0/0x4e0 [ 81.197032] sock_close+0x16/0x20 [ 81.200485] __fput+0x34d/0x890 [ 81.203773] ? fput+0x1a0/0x1a0 [ 81.207057] ? _raw_spin_unlock_irq+0x27/0x70 [ 81.211560] ____fput+0x15/0x20 [ 81.214843] task_work_run+0x1e4/0x290 [ 81.218738] ? task_work_cancel+0x240/0x240 [ 81.223066] ? switch_task_namespaces+0xbd/0xd0 [ 81.227739] do_exit+0x1aee/0x2730 [ 81.231284] ? mm_update_next_owner+0x980/0x980 [ 81.235950] ? print_usage_bug+0xc0/0xc0 [ 81.240012] ? check_same_owner+0x320/0x320 [ 81.244335] ? do_raw_spin_unlock+0x9e/0x2e0 [ 81.248751] ? rcu_note_context_switch+0x710/0x710 [ 81.253677] ? lock_acquire+0x1dc/0x520 [ 81.257654] ? __might_sleep+0x95/0x190 [ 81.261634] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 81.267182] ? __lock_acquire+0x7f5/0x5140 [ 81.271424] ? kasan_check_write+0x14/0x20 2018/04/21 01:36:11 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x3, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000480)=""/165) 2018/04/21 01:36:11 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f00000000c0)) 2018/04/21 01:36:11 executing program 2: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, '\x00', '\x00', '\x00', '\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0xc0, 0xf8}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, 0xfffffffffffffffc}}}}]}]}, 0x230) getpeername(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) 2018/04/21 01:36:11 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) 2018/04/21 01:36:11 executing program 1: syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff84, 0x0, @local={0xac, 0x223, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, @udp={0x0, 0x0, 0x8}}}}}, &(0x7f00000000c0)) 2018/04/21 01:36:11 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000), 0x4) 2018/04/21 01:36:11 executing program 2: r0 = socket$inet(0x2, 0x3, 0x7) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000100, 0x0, 0x0, 0x20000130, 0x20000160], 0x0, &(0x7f0000000000), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x5, 0x0, 0x0, '\x00', '\x00', '\x00', '\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0xc0, 0xf8}, [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa]}, 0xfffffffffffffffc}}}}]}]}, 0x230) getpeername(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80) [ 81.275660] ? do_raw_spin_lock+0xc1/0x200 [ 81.279901] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 81.285450] ? debug_check_no_locks_freed+0x310/0x310 [ 81.290648] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 81.295844] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 81.301380] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 81.306481] ? futex_wait+0x5c1/0x9f0 [ 81.310290] ? futex_wait_setup+0x400/0x400 [ 81.314617] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 81.319816] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 81.325347] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 81.330451] ? futex_wake+0x2f6/0x750 [ 81.334256] ? graph_lock+0x170/0x170 [ 81.338069] ? memset+0x31/0x40 [ 81.341353] ? find_held_lock+0x36/0x1c0 [ 81.345422] ? lock_downgrade+0x8e0/0x8e0 [ 81.349573] do_group_exit+0x16f/0x430 [ 81.353461] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 81.358051] ? __ia32_sys_exit+0x50/0x50 [ 81.362114] ? _raw_spin_unlock_irq+0x27/0x70 [ 81.366618] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 81.371644] get_signal+0x886/0x1960 [ 81.375371] ? ptrace_notify+0x130/0x130 [ 81.379436] ? graph_lock+0x170/0x170 [ 81.383236] ? rcu_is_watching+0x85/0x140 [ 81.387388] ? mntput_no_expire+0x186/0xba0 [ 81.391714] ? dentry_kill+0xce/0x5a0 [ 81.395518] ? mnt_get_count+0x150/0x150 [ 81.399586] ? find_held_lock+0x36/0x1c0 [ 81.403659] do_signal+0x98/0x2040 [ 81.407205] ? lock_downgrade+0x8e0/0x8e0 [ 81.411350] ? setup_sigcontext+0x7d0/0x7d0 [ 81.415665] ? kasan_check_read+0x11/0x20 [ 81.419801] ? do_raw_spin_unlock+0x9e/0x2e0 [ 81.424199] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 81.428772] ? _raw_spin_unlock_irq+0x27/0x70 [ 81.433258] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 81.438277] ? exit_to_usermode_loop+0x87/0x310 [ 81.442937] exit_to_usermode_loop+0x28a/0x310 [ 81.447507] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 81.452334] ? fput+0x130/0x1a0 [ 81.455598] ? do_syscall_64+0x92/0x800 [ 81.459565] do_syscall_64+0x6ac/0x800 [ 81.463437] ? finish_task_switch+0x1ca/0x810 [ 81.467926] ? syscall_return_slowpath+0x5c0/0x5c0 [ 81.472843] ? syscall_return_slowpath+0x30f/0x5c0 [ 81.477761] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 81.483117] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 81.487956] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.493129] RIP: 0033:0x455389 [ 81.496306] RSP: 002b:00007fb602cc0ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 81.504006] RAX: 0000000000000000 RBX: 000000000072bec8 RCX: 0000000000455389 [ 81.511270] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bec8 [ 81.518528] RBP: 000000000072bec8 R08: 0000000000000000 R09: 000000000072bea0 [ 81.525786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.533043] R13: 00007ffdf4f765ff R14: 00007fb602cc19c0 R15: 0000000000000000 [ 81.540311] ================================================================== [ 81.547655] Disabling lock debugging due to kernel taint [ 81.553745] Kernel panic - not syncing: panic_on_warn set ... [ 81.553745] [ 81.561117] CPU: 0 PID: 7216 Comm: syz-executor3 Tainted: G B 4.17.0-rc1+ #10 [ 81.569688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.579034] Call Trace: [ 81.581624] dump_stack+0x1b9/0x294 [ 81.585254] ? dump_stack_print_info.cold.2+0x52/0x52 [ 81.590447] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 81.595211] ? refcount_add_not_zero+0x300/0x320 [ 81.599964] panic+0x22f/0x4de [ 81.603162] ? add_taint.cold.5+0x16/0x16 [ 81.607318] ? do_raw_spin_unlock+0x9e/0x2e0 [ 81.611729] ? do_raw_spin_unlock+0x9e/0x2e0 [ 81.616140] ? refcount_inc_not_zero+0x8f/0x2d0 [ 81.620832] kasan_end_report+0x47/0x4f [ 81.624804] kasan_report.cold.7+0x76/0x2fe [ 81.629127] check_memory_region+0x13e/0x1b0 [ 81.633541] kasan_check_read+0x11/0x20 [ 81.637520] refcount_inc_not_zero+0x8f/0x2d0 [ 81.642021] ? refcount_add_not_zero+0x320/0x320 [ 81.646768] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 81.651774] ? lock_sock_nested+0x9f/0x120 [ 81.656011] refcount_inc+0x15/0x70 [ 81.659626] llc_ui_release+0xba/0x2b0 [ 81.663497] ? fsnotify_first_mark+0x330/0x330 [ 81.668069] sock_release+0x96/0x1b0 [ 81.671770] ? sock_alloc_file+0x4e0/0x4e0 [ 81.675988] sock_close+0x16/0x20 [ 81.679430] __fput+0x34d/0x890 [ 81.682697] ? fput+0x1a0/0x1a0 [ 81.685964] ? _raw_spin_unlock_irq+0x27/0x70 [ 81.690449] ____fput+0x15/0x20 [ 81.693722] task_work_run+0x1e4/0x290 [ 81.697598] ? task_work_cancel+0x240/0x240 [ 81.701907] ? switch_task_namespaces+0xbd/0xd0 [ 81.706566] do_exit+0x1aee/0x2730 [ 81.710098] ? mm_update_next_owner+0x980/0x980 [ 81.714752] ? print_usage_bug+0xc0/0xc0 [ 81.718802] ? check_same_owner+0x320/0x320 [ 81.723105] ? do_raw_spin_unlock+0x9e/0x2e0 [ 81.727500] ? rcu_note_context_switch+0x710/0x710 [ 81.732413] ? lock_acquire+0x1dc/0x520 [ 81.736378] ? __might_sleep+0x95/0x190 [ 81.740342] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 81.745866] ? __lock_acquire+0x7f5/0x5140 [ 81.750091] ? kasan_check_write+0x14/0x20 [ 81.754308] ? do_raw_spin_lock+0xc1/0x200 [ 81.758531] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 81.764055] ? debug_check_no_locks_freed+0x310/0x310 [ 81.769236] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 81.774412] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 81.779935] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 81.785026] ? futex_wait+0x5c1/0x9f0 [ 81.788818] ? futex_wait_setup+0x400/0x400 [ 81.793125] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 81.798306] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 81.803828] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 81.808916] ? futex_wake+0x2f6/0x750 [ 81.812702] ? graph_lock+0x170/0x170 [ 81.816494] ? memset+0x31/0x40 [ 81.819762] ? find_held_lock+0x36/0x1c0 [ 81.823827] ? lock_downgrade+0x8e0/0x8e0 [ 81.827967] do_group_exit+0x16f/0x430 [ 81.831841] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 81.836408] ? __ia32_sys_exit+0x50/0x50 [ 81.840457] ? _raw_spin_unlock_irq+0x27/0x70 [ 81.844937] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 81.849943] get_signal+0x886/0x1960 [ 81.853647] ? ptrace_notify+0x130/0x130 [ 81.857696] ? graph_lock+0x170/0x170 [ 81.861487] ? rcu_is_watching+0x85/0x140 [ 81.865621] ? mntput_no_expire+0x186/0xba0 [ 81.869927] ? dentry_kill+0xce/0x5a0 [ 81.873718] ? mnt_get_count+0x150/0x150 [ 81.877763] ? find_held_lock+0x36/0x1c0 [ 81.881812] do_signal+0x98/0x2040 [ 81.885348] ? lock_downgrade+0x8e0/0x8e0 [ 81.889483] ? setup_sigcontext+0x7d0/0x7d0 [ 81.893788] ? kasan_check_read+0x11/0x20 [ 81.897923] ? do_raw_spin_unlock+0x9e/0x2e0 [ 81.902314] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 81.906881] ? _raw_spin_unlock_irq+0x27/0x70 [ 81.911364] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 81.916383] ? exit_to_usermode_loop+0x87/0x310 [ 81.921040] exit_to_usermode_loop+0x28a/0x310 [ 81.925610] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 81.930435] ? fput+0x130/0x1a0 [ 81.933699] ? do_syscall_64+0x92/0x800 [ 81.937664] do_syscall_64+0x6ac/0x800 [ 81.941534] ? finish_task_switch+0x1ca/0x810 [ 81.946019] ? syscall_return_slowpath+0x5c0/0x5c0 [ 81.950936] ? syscall_return_slowpath+0x30f/0x5c0 [ 81.955858] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 81.961210] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 81.966045] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 81.971216] RIP: 0033:0x455389 [ 81.974390] RSP: 002b:00007fb602cc0ce8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 81.982084] RAX: 0000000000000000 RBX: 000000000072bec8 RCX: 0000000000455389 [ 81.989336] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000072bec8 [ 81.996586] RBP: 000000000072bec8 R08: 0000000000000000 R09: 000000000072bea0 [ 82.003836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.011104] R13: 00007ffdf4f765ff R14: 00007fb602cc19c0 R15: 0000000000000000 [ 82.018923] Dumping ftrace buffer: [ 82.022447] (ftrace buffer empty) [ 82.026136] Kernel Offset: disabled [ 82.029745] Rebooting in 86400 seconds..