&(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x7f75]}, 0x10) 2018/06/03 08:31:32 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0xfec00000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x22f5]}, 0x10) 2018/06/03 08:31:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0xf9, 0x0, &(0x7f0000000100)="759187fe3e1e732535581bbcfb3e942398f4405ce7befd4fc9900fe875ab68ecae482e92534dfe5b2589e47ad2bc0f8614dcd3549c62940b3081a2ffabc3e364e3de560986a1d21533f2df68034562a69ff9600aefc1caf0f434117a17ad23b1560afa25a333601c9f8f7e72fe855e2fdba988c386dd225a1b883ecc859a94d47ef269f0d9c848ce5b70c8b2e501ca2009aca175f8ad5934711dfc38ab5235a7caf4b03231e5f2561746d7e259028f5c69579e908238dca82e268640457f14d3f696a047f3f822fc1bcabcf629a3512350b0a3b38515033c2f5e707caa1b8f481010feca12ab8520001a090a19be8c07ed44ff544cd6275f1e"}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000480)=[@acquire_done={0x40486311}], 0x39, 0x0, &(0x7f0000000400)="fa2c74d93088f7aed50498701336ce677393bfc2701e5cd1b8b11a001ded45df3a05de0aae58d275550cafa0e65eba341f21c4516625552cef"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'rose0\x00', 0x0}) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000300)={r4, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) 2018/06/03 08:31:32 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5], 0xaa}, 0x0, r3}) 2018/06/03 08:31:33 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0xff00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:33 executing program 4: bpf$MAP_CREATE(0x3600, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1080.216262] binder: 31568:31570 transaction failed 29189/-22, size 0-0 line 2856 [ 1080.235943] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbf0d]}, 0x10) 2018/06/03 08:31:33 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xe803000000000000]}, 0x10) [ 1080.276264] binder: 31568:31570 got transaction to context manager from process owning it [ 1080.284749] binder: 31568:31570 transaction failed 29201/-22, size 0-0 line 2847 2018/06/03 08:31:33 executing program 4: bpf$MAP_CREATE(0x7403000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1080.397185] binder: BINDER_SET_CONTEXT_MGR already set [ 1080.432566] binder: 31568:31592 ioctl 40046207 0 returned -16 [ 1080.459602] binder: 31568:31570 transaction failed 29189/-22, size 0-0 line 2856 [ 1080.489107] binder_alloc: 31568: binder_alloc_buf, no vma [ 1080.494761] binder: 31568:31591 transaction failed 29189/-3, size 0-0 line 2971 [ 1080.502854] IPVS: ftp: loaded support on port[0] = 21 [ 1080.573626] binder: undelivered TRANSACTION_ERROR: 29189 [ 1080.581379] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:31:33 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0xfec0]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:33 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x4d34000000000000]}, 0x10) 2018/06/03 08:31:33 executing program 4: bpf$MAP_CREATE(0x500, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3d850000]}, 0x10) 2018/06/03 08:31:33 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x400000000000000]}, 0x10) 2018/06/03 08:31:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(r0, 0x361b, &(0x7f0000000100)="639192f5b443ffd33a0b718e0c89eef766dc2b41a1d07db2bdd2b42bdc8db2f545dfe39750ebf7e7679224020c5db5b9a70e7f766e9153a25fef2d301dcf719e0aafe9af196c2ecc7087c58cd48d51264b4c4268c90fe38a8a4f6505f3dfe58fd20fd4bc7fa77b93091257e5c521e3ccb2f0c063b2e4dc9d500d3dbe555aa2dce72d90e8413b9390c0ea74cec28c88c59ddba4caa70826b28d8761818b28b728b36d5321ecef31eb576d62005f775c086b2b5ccca4004b0568ff7913cec3b5d89b19356cae49bea91134f18e3bd7") r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xd6, 0x40000) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001400)=[{0x1010, 0x11f, 0x7ff, "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"}, {0x38, 0x101, 0x80, "74f54d6cabffbb41bb0711e9cd66a5d088fee25d8f428dc3d8e19ab2d077a3757f9839b09dc1a7"}, {0x48, 0x10c, 0x10001, "dcc11dcbfcb32a282321e60d0a640faf6447d2cc3b6d5dc27269a17c9bef3e1c8842a628c8819cb0fa9d4dc258bf3165a5ae"}, {0x1010, 0x1, 0x5, "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"}], 0x20a0, 0x1}, 0x800) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x1c) fcntl$setstatus(r5, 0x4, 0x2005) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0xfffffffffffffffb) ioctl(r7, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") clone(0x0, &(0x7f0000000280), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000001c0)) dup2(r4, r6) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:33 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0xaa}, 0x0, r3}) 2018/06/03 08:31:33 executing program 4: bpf$MAP_CREATE(0x5402, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:33 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1081.172118] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1d6e0000]}, 0x10) 2018/06/03 08:31:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x8, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:34 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xd5c4000000000000]}, 0x10) 2018/06/03 08:31:34 executing program 4: bpf$MAP_CREATE(0x1e02, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:34 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:34 executing program 4: bpf$MAP_CREATE(0x5a010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:34 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x2dd6000000000000]}, 0x10) 2018/06/03 08:31:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd06000000000000]}, 0x10) 2018/06/03 08:31:34 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1081.431401] binder_alloc: 31650: binder_alloc_buf, no vma [ 1081.437087] binder: 31650:31651 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:31:34 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x852e0000]}, 0x10) 2018/06/03 08:31:34 executing program 4: bpf$MAP_CREATE(0x8602, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1081.495160] binder: 31650:31651 ioctl c0306201 20007000 returned -14 2018/06/03 08:31:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbd280000]}, 0x10) [ 1081.538117] binder_alloc: 31650: binder_alloc_buf, no vma [ 1081.538456] binder: BINDER_SET_CONTEXT_MGR already set [ 1081.544071] binder: 31650:31672 transaction failed 29189/-3, size 0-0 line 2971 [ 1081.558974] IPVS: ftp: loaded support on port[0] = 21 [ 1081.639108] binder: 31650:31672 ioctl c0306201 20007000 returned -14 [ 1081.647190] binder: 31650:31670 ioctl 40046207 0 returned -16 [ 1081.719343] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:31:35 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0xff, 0x2000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000400)=[@in={0x2, 0x4e20, @rand_addr=0xffffffffffffffc1}, @in6={0xa, 0x4e21, 0x2, @empty, 0x328c}], 0x2c) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000440)={0x9, 0x20}) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000180)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x114, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0d6300000c63000000634040020000000000000001000000000000000000000001000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a62770a000000", @ANYRES64=r4, @ANYBLOB="0100000000000000852a646600000000", @ANYRES32=r3, @ANYBLOB="000000000000000000000000852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000300000000000000"], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="d1980c630000f1c56a0da0546a92f8ca55f9ef03630840", @ANYRES64=r5, @ANYBLOB="0f630c400300000000000000000000000e630c40040000000200000000000000076304400200000001634040010000000000000000000000000000000000000010000000000000000000000000000000000000001800000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="11634840020000000000000002000000000000000000000001000000000000000000000028000000000000002800000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="852a747000000000", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="010000000000000003000000000000001100000000000000"], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="48000000000000007800000000000000000000000000000018000000000000000000000000000000"], @ANYBLOB="0000900000000000"], 0x13, 0x0, &(0x7f0000000540)="bc55d37c9043bc314dd64e2ce6632a95b81b81"}) syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x9, 0xd9b889b406ad7709) r6 = syz_open_dev$sndmidi(&(0x7f0000000340)='/dev/snd/midiC#D#\x00', 0x800, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000200)={0x40000008}) fcntl$dupfd(r2, 0x0, r3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="54ca0000"], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640), 0x1, 0x0, &(0x7f0000000280)="9c"}) socket$pptp(0x18, 0x1, 0x2) 2018/06/03 08:31:35 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xf5db000000000000]}, 0x10) 2018/06/03 08:31:35 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff], 0xaa}, 0x0, r3}) 2018/06/03 08:31:35 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x4ded0000]}, 0x10) 2018/06/03 08:31:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:35 executing program 4: bpf$MAP_CREATE(0x4c00, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbde1000000000000]}, 0x10) 2018/06/03 08:31:35 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:36 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1083.213656] binder: 31701:31711 got transaction to invalid handle [ 1083.220053] binder: 31701:31711 transaction failed 29201/-22, size 72-24 line 2856 [ 1083.268316] IPVS: ftp: loaded support on port[0] = 21 [ 1083.269121] binder: 31701:31711 ioctl c0306201 20007000 returned -14 [ 1084.127542] binder: 31701:31729 got transaction to invalid handle [ 1084.133870] binder: 31701:31729 transaction failed 29201/-22, size 72-24 line 2856 [ 1084.149105] binder_alloc: binder_alloc_mmap_handler: 31701 20001000-20004000 already mapped failed -16 [ 1084.162136] binder: BINDER_SET_CONTEXT_MGR already set [ 1084.167960] binder_alloc: 31701: binder_alloc_buf, no vma [ 1084.173585] binder: 31701:31732 transaction failed 29189/-3, size 0-0 line 2971 [ 1084.181525] binder: 31701:31729 ioctl 40046207 0 returned -16 [ 1084.187599] binder: 31701:31732 ioctl c0306201 20007000 returned -14 2018/06/03 08:31:37 executing program 4: bpf$MAP_CREATE(0x17e, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x300000000000000]}, 0x10) 2018/06/03 08:31:37 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xb5ad]}, 0x10) 2018/06/03 08:31:37 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:37 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x9d110000]}, 0x10) 2018/06/03 08:31:37 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xaa}, 0x0, r3}) 2018/06/03 08:31:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) write$binfmt_misc(r1, &(0x7f0000000100)={'syz1', "ae6d14b07537abde6a627d8974049834e00ad9f53fabbf2366326e3cf75699bf04802ea5a7bba10195f829413cad2368aa6304bc7866b89874f3356b30925b2592d2ad0135e676ea5ce74a0fcf7a0e23b79636bc440769c9f4251cfd7fa616ed960ab823bb09f8a0c467c8f9eb2a22cfcfc56d8eab400da409e5a7065824fe5819"}, 0x85) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1802], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) [ 1084.347144] binder: undelivered TRANSACTION_ERROR: 29189 [ 1084.357306] binder: undelivered TRANSACTION_ERROR: 29201 [ 1084.362834] binder: undelivered TRANSACTION_ERROR: 29201 [ 1084.368392] binder: send failed reply for transaction 946 to 31701:31711 [ 1084.376521] binder: undelivered TRANSACTION_COMPLETE [ 1084.381789] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:31:37 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:37 executing program 4: bpf$MAP_CREATE(0x4a, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1084.433216] IPVS: ftp: loaded support on port[0] = 21 [ 1084.452233] binder: 31747:31748 ioctl c0306201 20007000 returned -14 2018/06/03 08:31:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc4d5]}, 0x10) 2018/06/03 08:31:37 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x85e7]}, 0x10) 2018/06/03 08:31:37 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:37 executing program 4: bpf$MAP_CREATE(0x200000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1084.524096] binder_alloc: binder_alloc_mmap_handler: 31747 20001000-20004000 already mapped failed -16 [ 1084.601291] binder_alloc: 31747: binder_alloc_buf, no vma [ 1084.606974] binder: 31747:31758 transaction failed 29189/-3, size 0-0 line 2971 [ 1084.613146] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:31:37 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xd065]}, 0x10) [ 1084.646815] binder: 31747:31748 ioctl 40046207 0 returned -16 [ 1084.691741] binder: 31747:31758 ioctl c0306201 20007000 returned -14 [ 1084.731604] binder_alloc: 31747: binder_alloc_buf, no vma [ 1084.737353] binder: 31747:31759 transaction failed 29189/-3, size 0-0 line 2971 [ 1084.748357] IPVS: ftp: loaded support on port[0] = 21 [ 1084.822297] binder: undelivered TRANSACTION_ERROR: 29189 [ 1084.828775] binder: release 31747:31748 transaction 950 out, still active [ 1084.850294] binder: send failed reply for transaction 950, target dead [ 1084.857177] binder: undelivered transaction 951, process died. 2018/06/03 08:31:38 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45a5]}, 0x10) 2018/06/03 08:31:38 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x1100000000000000]}, 0x10) 2018/06/03 08:31:38 executing program 4: bpf$MAP_CREATE(0x28000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="0047cd2f07d82c99240970885fc20d0f7032f390006e0edd19bbd113c5f74ded26fd31c18ce7dddacd4e12d383f23f3d4c3ead9c2906e0fd18eee72a762cf2326a2ced71f6f33604b374d56dbce24233a7d372dd4dd8bc16df9eff703038c3702b45a2f0bade5e0501c07c8abcc0bc3c8a7cfaeb0cd80a9480aad47483e98d6c4a86df481076a37e82be615ac8783487fcdea31aedf74a250d25be9a6316") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$TUNSETLINK(r2, 0x400454cd, 0x309) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:38 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x40030000000000]}, 0x10) 2018/06/03 08:31:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe0], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:38 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0xaa}, 0x0, r3}) 2018/06/03 08:31:38 executing program 4: bpf$MAP_CREATE(0x2200000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:38 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1085.300563] binder_alloc: binder_alloc_mmap_handler: 31801 20001000-20004000 already mapped failed -16 [ 1085.308505] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6d4b000000000000]}, 0x10) [ 1085.372969] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:31:38 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x2dd60000]}, 0x10) 2018/06/03 08:31:38 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xb5ad000000000000]}, 0x10) 2018/06/03 08:31:38 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1085.414480] binder: 31801:31802 ioctl 40046207 0 returned -16 2018/06/03 08:31:38 executing program 4: bpf$MAP_CREATE(0x5200, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = request_key(&(0x7f0000000100)='encrypted\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)='trusted:cgroup/[vmnet1vmnet1cgroup\x00', 0xfffffffffffffff8) add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x65d00000]}, 0x10) 2018/06/03 08:31:38 executing program 4: bpf$MAP_CREATE(0x8201, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1085.627550] binder: 31839:31841 ioctl c0306201 20007000 returned -14 [ 1085.686310] binder: BINDER_SET_CONTEXT_MGR already set [ 1085.691938] IPVS: ftp: loaded support on port[0] = 21 [ 1085.708252] binder_alloc: 31839: binder_alloc_buf, no vma [ 1085.714007] binder: 31839:31849 transaction failed 29189/-3, size 0-0 line 2971 [ 1085.716940] binder: 31839:31841 ioctl 40046207 0 returned -16 [ 1085.745744] binder: 31839:31849 ioctl c0306201 20007000 returned -14 [ 1085.796435] binder: undelivered TRANSACTION_ERROR: 29189 [ 1085.802540] binder: release 31839:31841 transaction 956 out, still active [ 1085.819427] binder: send failed reply for transaction 956, target dead [ 1085.826260] binder: undelivered transaction 957, process died. 2018/06/03 08:31:38 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:38 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x7db3000000000000]}, 0x10) 2018/06/03 08:31:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdbf0000]}, 0x10) 2018/06/03 08:31:38 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x100000000000000]}, 0x10) 2018/06/03 08:31:38 executing program 4: bpf$MAP_CREATE(0x254, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="354b936e4fe5fa095bb64db6fe54674deb3c9c083fa8c54d5866f51c524882c94c1e2519a6f4d0e0f6e87cc411351e68c2b4011c5799c930ecde094e6db5656f312fe39f79caf5b7aa24d057a22f8db1f38bdba66ebfe17d2c7f3872d9876832f8", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18020000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:38 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0xaa}, 0x0, r3}) 2018/06/03 08:31:39 executing program 4: bpf$MAP_CREATE(0x16a, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1086.201738] binder: 31865:31873 unknown command 1855146805 [ 1086.218896] IPVS: ftp: loaded support on port[0] = 21 [ 1086.224545] binder: 31865:31873 ioctl c0306201 20007000 returned -22 2018/06/03 08:31:39 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x852e]}, 0x10) 2018/06/03 08:31:39 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xd06000000000000]}, 0x10) [ 1086.262204] binder_alloc: binder_alloc_mmap_handler: 31865 20001000-20004000 already mapped failed -16 [ 1086.319227] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:31:39 executing program 4: bpf$MAP_CREATE(0x232, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:39 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:39 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x852e]}, 0x10) [ 1086.350666] binder: 31865:31879 ioctl 40046207 0 returned -16 2018/06/03 08:31:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xfd56]}, 0x10) 2018/06/03 08:31:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = semget(0x0, 0x0, 0x24) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000100)=""/40) r3 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0xcfd09667c26b98e2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) signalfd4(r0, &(0x7f0000000080)={0x6}, 0x8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl(r3, 0x2, &(0x7f0000000000)="58691674249af075070f5538e924a51566ad23e106959b2c7031d18de489c2419eeaf6daa996c5a2b2bc832ba6") sysfs$3(0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) [ 1086.461335] binder: undelivered transaction 960, process died. [ 1086.531693] binder: 31911:31912 transaction failed 29189/-22, size 0-0 line 2856 [ 1086.605487] binder: 31911:31919 transaction failed 29189/-22, size 0-0 line 2856 [ 1086.633772] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:39 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x25a2]}, 0x10) 2018/06/03 08:31:39 executing program 4: bpf$MAP_CREATE(0x5c00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:39 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc55c]}, 0x10) 2018/06/03 08:31:39 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x5d9c000000000000]}, 0x10) 2018/06/03 08:31:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@ipv4={[], [0xff, 0xff], @rand_addr}, 0xfff, 0x2, 0x3, 0x1, 0x80, 0x1, 0x286}, &(0x7f0000000180)=0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xffffffffffffff80, 0x240040) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x1c, r4, 0x1, 0x0, 0x6, @random="ede38de1a0df"}, 0x14) 2018/06/03 08:31:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:39 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0xaa}, 0x0, r3}) [ 1087.116797] binder: 31932:31934 ioctl c0306201 20007000 returned -14 [ 1087.156837] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:39 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6855]}, 0x10) 2018/06/03 08:31:40 executing program 4: bpf$MAP_CREATE(0x72010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:40 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x45b9]}, 0x10) [ 1087.171615] binder_alloc: binder_alloc_mmap_handler: 31932 20001000-20004000 already mapped failed -16 [ 1087.241580] binder_alloc: 31932: binder_alloc_buf, no vma [ 1087.247353] binder: 31932:31934 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:31:40 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x45b9000000000000]}, 0x10) 2018/06/03 08:31:40 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1087.317184] binder_alloc: 31932: binder_alloc_buf, no vma [ 1087.322995] binder: 31932:31947 transaction failed 29189/-3, size 0-0 line 2971 [ 1087.395005] binder: 31932:31934 ioctl c0306201 20007000 returned -14 [ 1087.491543] binder: undelivered TRANSACTION_ERROR: 29189 [ 1087.497678] binder: release 31932:31934 transaction 964 out, still active [ 1087.506274] IPVS: ftp: loaded support on port[0] = 21 [ 1087.519309] binder: send failed reply for transaction 964, target dead [ 1087.526308] binder: undelivered transaction 965, process died. 2018/06/03 08:31:40 executing program 4: bpf$MAP_CREATE(0x8802, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6517000000000000]}, 0x10) 2018/06/03 08:31:40 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:40 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xdd3f]}, 0x10) 2018/06/03 08:31:40 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x1d6e000000000000]}, 0x10) 2018/06/03 08:31:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11734840000000000000000000000000000000000000000700000000000000000000000000000000000000080000000000000000b60efc22078aaecf945753559ad7000b78cb42552128bbdb64e361a55bbf0b897698455e18fb04117cf5abcad847d19dcdca5526387b812c630192", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="db32620000"], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:40 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0xfffffff5, r3}) [ 1088.055494] binder: 31988:31995 transaction failed 29189/-22, size 0-0 line 2856 [ 1088.085234] IPVS: ftp: loaded support on port[0] = 21 [ 1088.095213] binder: 31988:31995 ioctl c0306201 20007000 returned -14 2018/06/03 08:31:40 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:40 executing program 4: bpf$MAP_CREATE(0xee03, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc805000000000000]}, 0x10) [ 1088.110725] binder_alloc: binder_alloc_mmap_handler: 31988 20001000-20004000 already mapped failed -16 [ 1088.139627] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:31:40 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xe000000]}, 0x10) [ 1088.173806] binder: 31988:31995 ioctl 40046207 0 returned -16 2018/06/03 08:31:41 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xd50b0000]}, 0x10) 2018/06/03 08:31:41 executing program 4: bpf$MAP_CREATE(0x3c, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:41 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1088.214536] binder: 31988:32011 transaction failed 29189/-22, size 0-0 line 2856 [ 1088.246422] binder: 31988:32011 ioctl c0306201 20007000 returned -14 2018/06/03 08:31:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xad79000000000000]}, 0x10) 2018/06/03 08:31:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="00d10770ae000000f505"], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="590e0000000000000000000000000000aba00000000000006f4311000000000000000000000000000000000000001500000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000280)="9c"}) [ 1088.328229] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:31:41 executing program 4: bpf$MAP_CREATE(0x8201000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:41 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x8d62]}, 0x10) 2018/06/03 08:31:41 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1088.403946] binder_alloc: 32033: binder_alloc_buf size 31535250184919048 failed, no address space [ 1088.413362] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1088.422401] binder: 32033:32034 transaction failed 29201/-28, size 0-0 line 2971 [ 1088.464863] IPVS: ftp: loaded support on port[0] = 21 [ 1088.565284] binder: 32033:32034 ioctl c0306201 20007000 returned -14 [ 1088.598132] binder_alloc: binder_alloc_mmap_handler: 32033 20001000-20004000 already mapped failed -16 [ 1088.617358] binder: BINDER_SET_CONTEXT_MGR already set [ 1088.643091] binder_alloc: 32033: binder_alloc_buf, no vma [ 1088.648804] binder: 32033:32054 transaction failed 29189/-3, size 0-0 line 2971 [ 1088.664290] binder: 32033:32034 ioctl 40046207 0 returned -16 [ 1088.670689] binder: 32033:32054 ioctl c0306201 20007000 returned -14 [ 1088.696060] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:31:42 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x65170000]}, 0x10) 2018/06/03 08:31:42 executing program 4: bpf$MAP_CREATE(0x1000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:42 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xb5ad000000000000]}, 0x10) 2018/06/03 08:31:42 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xd50b]}, 0x10) 2018/06/03 08:31:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x4, 0x40000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x6) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x20282, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000080)={0x9}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r4, &(0x7f0000000100)="9ef7feb0b04ae8f17d4a60b0e81a7eb8407b006031d9e46a10197aa153dfbc7360a2c34f3d6f3da7aee2cfec1e7386c9b3b9488a4dbdff0574eccdd8dd813dfc2d1ea35fd00395efe2e50157b39ccf7bc1ab1e9cd72f1be2b7a34cd9d98d3b583cc1865a9687601c6db9e5d58b39d2dd46f9cc7397b997ef926277", &(0x7f0000000380)=""/143}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) 2018/06/03 08:31:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97890b1400000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:42 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x2, r3}) [ 1089.934713] binder: 32063:32065 ioctl c0306201 20007000 returned -14 [ 1089.961494] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:42 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:42 executing program 4: bpf$MAP_CREATE(0xf8030000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:42 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xe]}, 0x10) [ 1089.991440] binder_alloc: binder_alloc_mmap_handler: 32063 20001000-20004000 already mapped failed -16 [ 1090.013351] binder: BINDER_SET_CONTEXT_MGR already set [ 1090.019080] binder: 32063:32065 ioctl 40046207 0 returned -16 2018/06/03 08:31:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe803000000000000]}, 0x10) [ 1090.069476] binder_alloc: 32063: binder_alloc_buf, no vma [ 1090.075183] binder: 32063:32081 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:31:42 executing program 4: bpf$MAP_CREATE(0x4e01000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1090.127967] binder_alloc: 32063: binder_alloc_buf, no vma [ 1090.133870] binder: 32063:32084 transaction failed 29189/-3, size 0-0 line 2971 [ 1090.202243] binder: 32063:32084 ioctl c0306201 20007000 returned -14 [ 1090.241249] IPVS: ftp: loaded support on port[0] = 21 [ 1090.280251] binder: undelivered TRANSACTION_ERROR: 29189 [ 1090.286458] binder: send failed reply for transaction 975 to 32063:32065 [ 1090.293404] binder: undelivered transaction 976, process died. [ 1090.314745] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:31:43 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:43 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xa225]}, 0x10) 2018/06/03 08:31:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5900]}, 0x10) 2018/06/03 08:31:43 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x3d850000]}, 0x10) 2018/06/03 08:31:43 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xae, 0x12400) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0xfffffffffffffff8}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r1, &(0x7f0000000300)=0x4) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000100)="0047fc2f07d82c992474089f26619befcae76621c8cfb628f2717b22707732900039e8452ccbff0ea50ab1ce503da035cf0509bbea17f6d65f978907ac67a50a51df9d04bbdd6ae929cd43b164789ecc73b43b0cd5d40b2b0090e31d447183ada1418f4f4b27f8ddd893410e016b45be75e56157ecb3edf308bf61e6ee61837f48a6bec8bbb371fecd9ef22b18a8954c24fba35bc6a99efd3bdf8360866aecbf8fbe8d3e1886bf2efba96de48faed69986660e52a3728fe2a1b1ef1c3483a1b9d87f0d52dd4eab5d7bb00cbd3e2e1d32c5ff0c6c") r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0300000000000000c01820106fa90e9c347a028c7acb1d162818fe5145d76ea4fc9b000b8c231c233eb6e9d26d99ae8a27f94f3073c8396821d0a69ec029acd070ce41218d8ce84ea0de71b0d1d20a61f083a1ec5aa70cf8a7ae96ad6b70809f14d51abc6ec910a745fc6ee394d811094fe6"], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:43 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0xf5ffffff00000000, r3}) 2018/06/03 08:31:43 executing program 4: bpf$MAP_CREATE(0x2a00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:43 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:43 executing program 4: bpf$MAP_CREATE(0x42010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1090.817861] binder: 32123:32128 ioctl c0306201 20007000 returned -14 [ 1090.840883] IPVS: ftp: loaded support on port[0] = 21 [ 1090.854907] binder: 32123:32128 got transaction with unaligned buffers size, 3 2018/06/03 08:31:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2e85]}, 0x10) 2018/06/03 08:31:43 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xddf8]}, 0x10) 2018/06/03 08:31:43 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x79ad]}, 0x10) [ 1090.895357] binder: 32123:32128 transaction failed 29201/-22, size 0-0 line 3016 2018/06/03 08:31:43 executing program 4: bpf$MAP_CREATE(0x2e000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1090.971996] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:31:43 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1090.997328] binder_alloc: binder_alloc_mmap_handler: 32123 20001000-20004000 already mapped failed -16 2018/06/03 08:31:43 executing program 4: bpf$MAP_CREATE(0x23e, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45b9000000000000]}, 0x10) [ 1091.086401] binder: 32123:32141 ioctl 40046207 0 returned -16 [ 1091.113730] binder_alloc: 32123: binder_alloc_buf, no vma [ 1091.119401] binder: 32123:32162 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:31:43 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1091.160413] IPVS: ftp: loaded support on port[0] = 21 [ 1091.231077] binder_alloc: 32123: binder_alloc_buf, no vma [ 1091.236749] binder: 32123:32163 transaction failed 29189/-3, size 0-0 line 2971 [ 1091.294179] binder: 32123:32162 ioctl c0306201 20007000 returned -14 [ 1091.336640] binder: undelivered TRANSACTION_ERROR: 29189 [ 1091.342607] binder: release 32123:32128 transaction 980 out, still active [ 1091.351149] binder: send failed reply for transaction 980, target dead 2018/06/03 08:31:44 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x8d62000000000000]}, 0x10) 2018/06/03 08:31:44 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xf522000000000000]}, 0x10) 2018/06/03 08:31:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9dca0000]}, 0x10) 2018/06/03 08:31:44 executing program 4: bpf$MAP_CREATE(0x278, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:44 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:44 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='rose0\x00') r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x2200, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000680)=0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x1, 0x2, &(0x7f0000000300)=[0x0], 0x1}, 0x20) getpeername$packet(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000500)=0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x800) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000380)=""/198, &(0x7f00000002c0)=0xc6) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x400, 0x40000) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="da66e044327126d6f6a3b60185417b001537b9d0edcb2c06957f13c6c91b833afdee08eb5cd27d03c995fc4e0f3cfeaf8515a78dab2d42e67c0edecaa3ad0e567b0888ad79840a21015ea81ad62e22d4d4c1a76704a454a9a51475d1a032ca97e60bbaebd849f18a1a804bc63e9577ff414113eefaa3b33eaaaac98f95a905be888f446ca18e214d907dd657042904df7455c98158bb29b589aa0c2e1445ee5afb8af35b068cf88d3e54300b1d", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="40000000000000005ce61726bca33212fb1baa802fcebb66333d26b8481b255ec2f53adc65ca78c0d5eb5cbdddbaf5bbd977be7f0c8a2dcc4369db748bc2ae62c8e6f82fb7c9ba72134e274190ea0a972e320aa3ce3fe3f573369dd64d7d49c942e71efe4e69c6ecd9a5997d813d57c2d791b3ed81d9ee353db657d5a985fd5bc3148773b7d9752f48b59171d8edd605c9efa5ef3c0ba69204cda61468f30b3659103d3bdb154580b32d40e19af0b7dd0000000000000000000000000000"], 0x1, 0x0, &(0x7f0000000280)="9c"}) fchmod(r5, 0x1) 2018/06/03 08:31:44 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x500000000000000, r3}) 2018/06/03 08:31:44 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:44 executing program 4: bpf$MAP_CREATE(0x56010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1091.746798] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3d85]}, 0x10) 2018/06/03 08:31:44 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xd5c4000000000000]}, 0x10) 2018/06/03 08:31:44 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xf5db000000000000]}, 0x10) [ 1091.805809] binder: 32184:32185 unknown command 1155557082 [ 1091.841804] binder: 32184:32185 ioctl c0306201 20007000 returned -22 [ 1091.897125] binder: 32184:32185 transaction failed 29189/-22, size 0-0 line 2856 [ 1092.003402] IPVS: ftp: loaded support on port[0] = 21 [ 1092.008803] binder: BINDER_SET_CONTEXT_MGR already set [ 1092.017568] binder: 32184:32225 unknown command 1155557082 [ 1092.043571] binder: 32184:32224 ioctl 40046207 0 returned -16 [ 1092.055173] binder: 32184:32225 ioctl c0306201 20007000 returned -22 [ 1092.061235] binder: 32184:32185 transaction failed 29189/-22, size 0-0 line 2856 2018/06/03 08:31:45 executing program 4: bpf$MAP_CREATE(0x8401000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:45 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf522000000000000]}, 0x10) 2018/06/03 08:31:45 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xffffffff00000000]}, 0x10) 2018/06/03 08:31:45 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xddf8000000000000]}, 0x10) 2018/06/03 08:31:45 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x40000000, r3}) 2018/06/03 08:31:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000008, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:45 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) [ 1092.634352] binder: 32247:32248 ioctl c0306201 20007000 returned -14 [ 1092.658742] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:45 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe00]}, 0x10) [ 1092.678431] binder_alloc: binder_alloc_mmap_handler: 32247 20001000-20004000 already mapped failed -16 2018/06/03 08:31:45 executing program 4: bpf$MAP_CREATE(0x74030000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:45 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x9d110000]}, 0x10) [ 1092.739215] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:31:45 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x153a0000]}, 0x10) 2018/06/03 08:31:45 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1092.773226] binder: 32247:32248 ioctl 40046207 0 returned -16 2018/06/03 08:31:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@dev, @in6=@dev}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) 2018/06/03 08:31:45 executing program 4: bpf$MAP_CREATE(0x52000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1092.860564] binder: send failed reply for transaction 988 to 32247:32248 [ 1092.867583] binder: undelivered transaction 989, process died. [ 1092.903081] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:31:45 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x15f3000000000000]}, 0x10) 2018/06/03 08:31:45 executing program 4: bpf$MAP_CREATE(0x5a02, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:45 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:45 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x9695]}, 0x10) [ 1092.952199] binder: 32284:32285 ioctl c0306201 20007000 returned -14 [ 1092.965686] IPVS: ftp: loaded support on port[0] = 21 [ 1092.986386] binder_alloc: binder_alloc_mmap_handler: 32284 20001000-20004000 already mapped failed -16 [ 1093.065757] binder_alloc: 32284: binder_alloc_buf, no vma [ 1093.071457] binder: 32284:32292 transaction failed 29189/-3, size 0-0 line 2971 [ 1093.105399] binder: BINDER_SET_CONTEXT_MGR already set [ 1093.111733] binder: 32284:32285 ioctl 40046207 0 returned -16 [ 1093.123345] binder_alloc: 32284: binder_alloc_buf, no vma [ 1093.129235] binder: 32284:32294 transaction failed 29189/-3, size 0-0 line 2971 [ 1093.137404] binder: 32284:32292 ioctl c0306201 20007000 returned -14 [ 1093.206626] binder: undelivered TRANSACTION_ERROR: 29189 [ 1093.212668] binder: release 32284:32285 transaction 991 out, still active [ 1093.230176] binder: send failed reply for transaction 991, target dead [ 1093.237140] binder: undelivered transaction 992, process died. 2018/06/03 08:31:47 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x3d850000]}, 0x10) 2018/06/03 08:31:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe0], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45b9]}, 0x10) 2018/06/03 08:31:47 executing program 4: bpf$MAP_CREATE(0x22a, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:47 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x34, 0x8000) openat$cgroup_subtree(r3, &(0x7f00000002c0)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$KDSKBMODE(r3, 0x4b45, &(0x7f0000000080)=0x1ff) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = semget(0x0, 0x4, 0x8) semctl$GETVAL(r4, 0x0, 0xc, &(0x7f0000000100)=""/213) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:47 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x5d9c0000]}, 0x10) 2018/06/03 08:31:47 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x2000000, r3}) [ 1094.502894] binder: 32319:32321 ioctl c0306201 20007000 returned -14 2018/06/03 08:31:47 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:47 executing program 4: bpf$MAP_CREATE(0x158, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1094.548657] binder: BINDER_SET_CONTEXT_MGR already set [ 1094.573807] IPVS: ftp: loaded support on port[0] = 21 [ 1094.585465] binder_alloc: binder_alloc_mmap_handler: 32319 20001000-20004000 already mapped failed -16 2018/06/03 08:31:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45]}, 0x10) 2018/06/03 08:31:47 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xe5730000]}, 0x10) [ 1094.606125] binder: 32319:32337 ioctl 40046207 0 returned -16 2018/06/03 08:31:47 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xeda7]}, 0x10) [ 1094.655639] binder_alloc: 32319: binder_alloc_buf, no vma [ 1094.661343] binder: 32319:32321 transaction failed 29189/-3, size 0-0 line 2971 [ 1094.687254] binder_alloc: 32319: binder_alloc_buf, no vma [ 1094.692998] binder: 32319:32337 transaction failed 29189/-3, size 0-0 line 2971 [ 1094.754528] binder: 32319:32321 ioctl c0306201 20007000 returned -14 [ 1094.869286] binder: undelivered TRANSACTION_ERROR: 29189 [ 1094.876141] binder: send failed reply for transaction 996 to 32319:32321 [ 1094.883121] binder: undelivered transaction 997, process died. [ 1094.895207] IPVS: ftp: loaded support on port[0] = 21 [ 1094.909812] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:31:48 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:48 executing program 4: bpf$MAP_CREATE(0x56, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xffffff80]}, 0x10) 2018/06/03 08:31:48 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x58b]}, 0x10) 2018/06/03 08:31:48 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x119d]}, 0x10) 2018/06/03 08:31:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x10001) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x1f) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ff], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:48 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x5, r3}) [ 1095.372256] binder: 32387:32388 ioctl c0306201 20007000 returned -14 [ 1095.387436] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:48 executing program 4: bpf$MAP_CREATE(0x4002000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:48 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xb945]}, 0x10) [ 1095.413550] binder_alloc: binder_alloc_mmap_handler: 32387 20001000-20004000 already mapped failed -16 2018/06/03 08:31:48 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x4000000]}, 0x10) [ 1095.487836] binder_alloc: 32387: binder_alloc_buf, no vma [ 1095.493586] binder: 32387:32391 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:31:48 executing program 4: bpf$MAP_CREATE(0x46020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:48 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:48 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5135]}, 0x10) 2018/06/03 08:31:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdc05]}, 0x10) [ 1095.548161] binder: 32387:32391 ioctl c0306201 20007000 returned -14 2018/06/03 08:31:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) flistxattr(r2, &(0x7f0000000100)=""/129, 0x81) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:48 executing program 4: bpf$MAP_CREATE(0x7c000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:48 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1095.665189] binder: undelivered TRANSACTION_ERROR: 29189 [ 1095.678430] binder: release 32387:32388 transaction 1001 out, still active [ 1095.692390] IPVS: ftp: loaded support on port[0] = 21 [ 1095.718260] binder: send failed reply for transaction 1001, target dead [ 1095.725131] binder: undelivered transaction 1002, process died. [ 1095.775314] binder: 32425:32430 ioctl c0306201 20007000 returned -14 [ 1095.830426] binder_alloc: binder_alloc_mmap_handler: 32425 20001000-20004000 already mapped failed -16 [ 1095.873299] binder: BINDER_SET_CONTEXT_MGR already set [ 1095.883633] binder: 32425:32435 ioctl 40046207 0 returned -16 [ 1095.901755] binder_alloc: 32425: binder_alloc_buf, no vma [ 1095.907442] binder: 32425:32430 transaction failed 29189/-3, size 0-0 line 2971 [ 1095.909205] binder_alloc: 32425: binder_alloc_buf, no vma [ 1095.920542] binder: 32425:32434 transaction failed 29189/-3, size 0-0 line 2971 [ 1095.931327] binder: 32425:32430 ioctl c0306201 20007000 returned -14 [ 1095.960350] binder: undelivered TRANSACTION_ERROR: 29189 [ 1095.968966] binder: release 32425:32430 transaction 1005 out, still active [ 1095.984357] binder: send failed reply for transaction 1005, target dead [ 1095.991295] binder: undelivered transaction 1006, process died. 2018/06/03 08:31:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:48 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:48 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x7db3000000000000]}, 0x10) 2018/06/03 08:31:48 executing program 4: bpf$MAP_CREATE(0x6c010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:48 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x4000000000000000, r3}) 2018/06/03 08:31:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1765]}, 0x10) 2018/06/03 08:31:48 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x25a20000]}, 0x10) 2018/06/03 08:31:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163480000000000000000000000000000000000000000110000df5220d3a2a88825000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:49 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:49 executing program 4: bpf$MAP_CREATE(0x5802, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1096.207873] binder: 32449:32450 ioctl c0306201 20007000 returned -14 [ 1096.238442] IPVS: ftp: loaded support on port[0] = 21 [ 1096.246406] binder: 32449:32450 unknown command 4743953 2018/06/03 08:31:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xeda70000]}, 0x10) 2018/06/03 08:31:49 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xf401000000000000]}, 0x10) [ 1096.303534] binder: 32449:32450 ioctl c0306201 20000340 returned -22 [ 1096.358624] binder_alloc: binder_alloc_mmap_handler: 32449 20001000-20004000 already mapped failed -16 [ 1096.390098] binder: BINDER_SET_CONTEXT_MGR already set [ 1096.469364] IPVS: ftp: loaded support on port[0] = 21 [ 1096.471955] binder: 32449:32471 ioctl 40046207 0 returned -16 [ 1096.501220] binder_alloc: 32449: binder_alloc_buf, no vma [ 1096.506933] binder: 32449:32485 transaction failed 29189/-3, size 0-0 line 2971 [ 1096.553168] binder: 32449:32485 ioctl c0306201 20007000 returned -14 [ 1096.611822] binder: undelivered TRANSACTION_ERROR: 29189 [ 1096.617853] binder: release 32449:32450 transaction 1010 out, still active [ 1096.624988] binder: undelivered TRANSACTION_COMPLETE [ 1096.644653] binder: send failed reply for transaction 1010, target dead 2018/06/03 08:31:49 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:49 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45000000]}, 0x10) 2018/06/03 08:31:49 executing program 4: bpf$MAP_CREATE(0x288, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdc050000]}, 0x10) 2018/06/03 08:31:49 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x1000000]}, 0x10) 2018/06/03 08:31:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000007c0)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000008c0)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setflags(r2, 0x2, 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl(r0, 0xdf, &(0x7f0000000100)="a9252e32b5d0fd8359f373c1dedf16a4e1aab81dbc41de1dac4d8856dcdd908a5167badde358cae45f07a9b6b7201638cc4e77ca4fd41022e9aa39cea79f0ea9f7d658f51b4a4bdba0149847a74ad7b86331c9cdd0df11641fdd367de08468ff7ac37867279cfaeb6c9398289824d250f3b5c36ea32842a8") r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000800)='/dev/rtc0\x00', 0x8000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r0}) renameat(r3, &(0x7f0000000740)='./file0\x00', r0, &(0x7f0000000840)='./file0\x00') setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000780)={0x84, @empty, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x5, 0x65}, 0x2c) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r4, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x10) readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/250, 0xfa}, {&(0x7f0000000480)=""/186, 0xba}, {&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f00000002c0)=""/43, 0x2b}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000640)=""/83, 0x53}], 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="50b1f1f4", @ANYRES64=0x0, @ANYBLOB="000000003b61208ebedba21ab4632f1a795cafeae9e8ccaee2927ccdc7418d0424e19404000000aea2671f2d92ede684e84e4ae54d0874fc595e3fa204a0dc26ff47cf8b01b5c757ea802ae7d6507b8f0878596678a415f8b7c265802af8225ac03a8e000000000000000000000000"], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0000000101010000"], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:49 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x200000000000000, r3}) 2018/06/03 08:31:49 executing program 4: bpf$MAP_CREATE(0x20e, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:49 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1097.143473] binder: 32496:32497 unknown command -185487024 [ 1097.153759] IPVS: ftp: loaded support on port[0] = 21 [ 1097.177232] binder: 32496:32497 ioctl c0306201 20007000 returned -22 2018/06/03 08:31:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xb5ad]}, 0x10) 2018/06/03 08:31:50 executing program 4: bpf$MAP_CREATE(0x2c00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:50 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xa]}, 0x10) 2018/06/03 08:31:50 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x35510000]}, 0x10) 2018/06/03 08:31:50 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1097.252238] binder: 32496:32497 transaction failed 29189/-22, size 0-0 line 2856 2018/06/03 08:31:50 executing program 4: bpf$MAP_CREATE(0xb8000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1097.317175] binder: 32496:32525 unknown command -185487024 [ 1097.348321] binder: 32496:32525 ioctl c0306201 20007000 returned -22 2018/06/03 08:31:50 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5dc]}, 0x10) 2018/06/03 08:31:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x3) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000080)=0x9, 0x1) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BLKREPORTZONE(r3, 0xc0101282, &(0x7f0000000400)={0x5, 0x6, 0x0, [{0x0, 0x88d9, 0x6, 0x6, 0x1f, 0x3}, {0x0, 0x1, 0x200, 0x200, 0x1, 0x6, 0x4}, {0x2, 0xff, 0x400, 0x3, 0x10000, 0x8, 0x100000001}, {0xff, 0x0, 0x60000000, 0xfaa, 0x4c, 0x7ff, 0x5}, {0x3, 0x36, 0x81, 0x1, 0xfffffffffffffffd, 0x6, 0x7}, {0xfffffffffffff22d, 0x0, 0x4, 0x8, 0xfff, 0x1ff, 0x7}]}) fchownat(r3, &(0x7f0000000100)='./file0\x00', r4, r5, 0x1900) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:50 executing program 4: bpf$MAP_CREATE(0x5c02000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1097.485861] IPVS: ftp: loaded support on port[0] = 21 [ 1097.567658] binder_alloc: 32549: binder_alloc_buf, no vma [ 1097.573441] binder: 32549:32551 transaction failed 29189/-3, size 0-0 line 2971 [ 1097.640546] binder_alloc: 32549: binder_alloc_buf, no vma [ 1097.646230] binder: 32549:32551 transaction failed 29189/-3, size 0-0 line 2971 [ 1097.661384] binder: BINDER_SET_CONTEXT_MGR already set [ 1097.675444] binder: 32549:32551 ioctl 40046207 0 returned -16 [ 1097.698801] binder_alloc: 32549: binder_alloc_buf, no vma [ 1097.704483] binder: 32549:32560 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:31:51 executing program 4: bpf$MAP_CREATE(0x6a000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:51 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x6855]}, 0x10) 2018/06/03 08:31:51 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4ded]}, 0x10) 2018/06/03 08:31:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf401000000000000]}, 0x10) 2018/06/03 08:31:51 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:51 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x100000000000000, r3}) 2018/06/03 08:31:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sync_file_range(r1, 0xffffffff, 0xea8, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0xfffffffffffffd2f, 0x0, &(0x7f0000000100)="b27d4a919ed55eb4938243022b2ae19ee0cd2d1302e18ee2012be4cf06375926e0fcb5971b369a83ed0bca96db1fb71cd03a1e15d031edda57a49004c9a6c131f9dc50e96d7034fa10ad235aef59428cce74a27940593efde9ac038deeecd7dedc61596a1dc078a901b01c33e38d3582622e11cd8ded29cecd9acfa642ccf73af620e1ffe8"}) pipe(&(0x7f0000000000)) 2018/06/03 08:31:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) [ 1098.755387] binder: 32569:32570 ioctl c0306201 20007000 returned -14 2018/06/03 08:31:51 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:51 executing program 4: bpf$MAP_CREATE(0x2002, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1098.803169] IPVS: ftp: loaded support on port[0] = 21 [ 1098.814790] binder: BINDER_SET_CONTEXT_MGR already set [ 1098.832892] binder: 32569:32587 ioctl 40046207 0 returned -16 2018/06/03 08:31:51 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x852e]}, 0x10) 2018/06/03 08:31:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x7db30000]}, 0x10) [ 1098.860444] binder_alloc: 32569: binder_alloc_buf, no vma [ 1098.866124] binder: 32569:32570 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:31:51 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5568]}, 0x10) [ 1098.948210] binder_alloc: 32569: binder_alloc_buf, no vma [ 1098.953910] binder: 32569:32587 transaction failed 29189/-3, size 0-0 line 2971 [ 1098.976756] binder: 32569:32570 ioctl c0306201 20007000 returned -14 [ 1099.071429] binder: undelivered TRANSACTION_ERROR: 29189 [ 1099.074995] IPVS: ftp: loaded support on port[0] = 21 [ 1099.077555] binder: release 32569:32570 transaction 1020 out, still active [ 1099.115775] binder: send failed reply for transaction 1020, target dead [ 1099.122674] binder: undelivered transaction 1021, process died. 2018/06/03 08:31:52 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:52 executing program 4: bpf$MAP_CREATE(0x20000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x90cd]}, 0x10) 2018/06/03 08:31:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="116348400000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000007e4cc08d35c81343a7c7feff610b08349111a5e3a5fde94648eebd75620b0c1705c550d0c63777bed0372881b33769c0ff2ba346862d950438d97fd6b572e34264080cc13e2c74b7ca86ab6ef5438d7f800b8c4c09cdfbd29ce7a31bec85d6cddd77c1392eb4a44024333f6cb51236a1802a3d012446427b02ca3bbff68764659d1e23c2c0ff1c480d25558e9c34ce635f80c6f6e08d54106daf48813559b57ee00e41f9a1338c9352f188523995d1", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:52 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x5cc5]}, 0x10) 2018/06/03 08:31:52 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe573]}, 0x10) 2018/06/03 08:31:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:52 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x1000000, r3}) [ 1099.617167] binder: 32620:32622 ioctl c0306201 20007000 returned -14 [ 1099.653596] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:52 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:52 executing program 4: bpf$MAP_CREATE(0x5a00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:52 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x700000000000000]}, 0x10) 2018/06/03 08:31:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x7]}, 0x10) [ 1099.675290] binder: 32620:32622 transaction failed 29201/-28, size 0-0 line 2971 [ 1099.714537] binder_alloc: binder_alloc_mmap_handler: 32620 20001000-20004000 already mapped failed -16 [ 1099.747257] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:31:52 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xb945]}, 0x10) 2018/06/03 08:31:52 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1099.809438] binder_alloc: 32620: binder_alloc_buf, no vma [ 1099.815236] binder: 32620:32641 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:31:52 executing program 4: bpf$MAP_CREATE(0x4003000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:52 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x58b000000000000]}, 0x10) [ 1099.891515] binder: 32620:32622 ioctl 40046207 0 returned -16 [ 1099.926649] binder: 32620:32641 ioctl c0306201 20007000 returned -14 [ 1099.972906] IPVS: ftp: loaded support on port[0] = 21 [ 1100.029317] binder: undelivered TRANSACTION_ERROR: 29189 [ 1100.038394] binder: release 32620:32622 transaction 1025 out, still active [ 1100.073581] binder: send failed reply for transaction 1025, target dead 2018/06/03 08:31:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5c8]}, 0x10) 2018/06/03 08:31:53 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:53 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd065]}, 0x10) 2018/06/03 08:31:53 executing program 4: bpf$MAP_CREATE(0x3000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:53 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000100)={0xffff, 0x6, 0x1000}) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0x0, 0x0) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000001000/0x3000)=nil) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:53 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xc805000000000000]}, 0x10) 2018/06/03 08:31:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:53 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x5000000, r3}) [ 1100.539641] IPVS: ftp: loaded support on port[0] = 21 [ 1100.548948] binder: 32691:32693 transaction failed 29189/-22, size 0-0 line 2856 2018/06/03 08:31:53 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:53 executing program 4: bpf$MAP_CREATE(0x6a010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:53 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6855]}, 0x10) [ 1100.596321] binder: 32691:32693 ioctl c0306201 20007000 returned -14 2018/06/03 08:31:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5cc5]}, 0x10) 2018/06/03 08:31:53 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x153a]}, 0x10) [ 1100.692091] binder: BINDER_SET_CONTEXT_MGR already set [ 1100.724949] binder_alloc: binder_alloc_mmap_handler: 32691 20001000-20004000 already mapped failed -16 2018/06/03 08:31:53 executing program 4: bpf$MAP_CREATE(0x70010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1100.740233] binder: 32691:32712 ioctl 40046207 0 returned -16 2018/06/03 08:31:53 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1100.769439] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:53 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xeda7000000000000]}, 0x10) [ 1100.797524] binder: 32691:32693 transaction failed 29189/-22, size 0-0 line 2856 [ 1100.798298] binder: 32691:32712 transaction failed 29189/-22, size 0-0 line 2856 [ 1100.937241] binder: 32691:32693 ioctl c0306201 20007000 returned -14 [ 1101.014248] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:31:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x80ffffff]}, 0x10) 2018/06/03 08:31:54 executing program 4: bpf$MAP_CREATE(0x4401, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:54 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x5135]}, 0x10) 2018/06/03 08:31:54 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:54 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x40000, r3}) 2018/06/03 08:31:54 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x852e000000000000]}, 0x10) 2018/06/03 08:31:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:54 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8914, &(0x7f0000000580)="0047fc2f07676a99240970192a43204ca7aebc8b1518ff052d2db8eb0437b1249d53") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x80000, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000300)={'sit0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) readv(r1, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/208, 0xd0}, {&(0x7f00000006c0)=""/238, 0xee}, {&(0x7f00000007c0)=""/167, 0xa7}, {&(0x7f0000000880)=""/110, 0x6e}, {&(0x7f0000000900)=""/60, 0x3c}, {&(0x7f0000000940)=""/45, 0x2d}], 0x6) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x400000, 0x0) sendmsg$unix(r4, &(0x7f00000002c0)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000380)="95bf988248407b035a2534cc65eaa42d958c1328c4fbdcc17f7e9fcbdf41683a0b7a44622284b74bd7da3d98e6d6e7bcb727e7a46815f3fb7a21f8b15d1213f9c3835a594ac4a7ba405113c4de89b731f3c42aec88ae495d9748314c1c46d6918789e7378ef8ab28fc166c2576b0b5bc46c023166211fe10877e62b3c500328b846083961dc0db6f0ca3151a76531c6c223fcd2a42f60ce38b6ccd7df5fe49412ee2e313983a2b279fef6379481fb6bce560dfa489ff8561c0b66e76a9103bcd2d11cd4995fce83f84fac47014dc7a0a0b73", 0xd2}, {&(0x7f0000000180)="142bfa0fcb4a79d7a067ff69d23c81132e26056bc72c80b853", 0x19}, {&(0x7f0000000480)="7edf8204e16e06465e994f9e338025162e3d11d59bdac0ce299d09747ddcf3ffa28ec39f9bf0856c88d23ac634303819087ba13600d89230193076fdeb8c5976304e4f220b6021e5c3530b6c4e3dc97ce4a6fd70d662bf77ff089227be012ed9c2177abb6cf722a6a6f1b710e3fb060b6b695d8429172bf5d08a2d4d69269c1d8c046acc4c409bbaea5571cd37ac221eaaffd43fa421ef5e08de8350ff9a681c1e115a2e610edffa0a23b1e43a4db5c0d27f58e14d547ff8302acee8d04830bd40c993478131bbfcec27bc37709f9dae53f0", 0xd2}], 0x3, 0x0, 0x0, 0x8c0}, 0x4000800) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x10, 0x0, &(0x7f0000000cc0)=[@reply_sg={0x40486312, {{0x2, 0x0, 0x2, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f0000000c80)=[0x30, 0x0, 0x28, 0x40, 0x48, 0x0, 0x40]}, 0x200}}], 0xfffffffffffffcf8, 0x0, &(0x7f0000000d40)="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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0000003da48d898e5950ce4d180400af0020000000"], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:54 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1101.463772] binder: 32750:32751 transaction failed 29201/-28, size 0-0 line 2971 [ 1101.494463] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:54 executing program 4: bpf$MAP_CREATE(0x1f1, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2]}, 0x10) [ 1101.519329] binder_alloc: binder_alloc_mmap_handler: 32750 20001000-20004000 already mapped failed -16 2018/06/03 08:31:54 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1101.571160] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:31:54 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xf8dd]}, 0x10) [ 1101.594129] binder: 32750:32763 ioctl 40046207 0 returned -16 2018/06/03 08:31:54 executing program 4: bpf$MAP_CREATE(0xc000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1101.636273] binder_alloc: 32750: binder_alloc_buf, no vma [ 1101.641968] binder: 32750:32763 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:31:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xb37d]}, 0x10) 2018/06/03 08:31:54 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x400300]}, 0x10) [ 1101.857560] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:55 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffffff, 0x7, 0x1, 0x100000000000, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) read$eventfd(r2, &(0x7f0000000100), 0x8) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:55 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x3551]}, 0x10) 2018/06/03 08:31:55 executing program 4: bpf$MAP_CREATE(0x78020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xa545000000000000]}, 0x10) 2018/06/03 08:31:55 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc0ffffff]}, 0x10) 2018/06/03 08:31:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:55 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x500, r3}) [ 1102.361051] binder: 348:350 ioctl c0306201 20007000 returned -14 [ 1102.389801] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:55 executing program 4: bpf$MAP_CREATE(0x54010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:55 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x80ffffff00000000]}, 0x10) 2018/06/03 08:31:55 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x9596000000000000]}, 0x10) [ 1102.410865] binder_alloc: binder_alloc_mmap_handler: 348 20001000-20004000 already mapped failed -16 2018/06/03 08:31:55 executing program 4: bpf$MAP_CREATE(0x6c00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:55 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1102.471849] binder: BINDER_SET_CONTEXT_MGR already set [ 1102.511248] binder: 348:350 ioctl 40046207 0 returned -16 2018/06/03 08:31:55 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3fdd]}, 0x10) 2018/06/03 08:31:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xeda7000000000000]}, 0x10) 2018/06/03 08:31:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000003f0000000000803e0100000000000040000000000000000049000000a094f6cbdd5bf2285661861dc2cd28b176e2e810ff7069cd9664f8508366bd90b6f36fcf785eb10f7c85cf0457c48ccc7483d921af15d24141fa72010087551535e1641156d817fb257a313e26a399a2", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000280)="9c"}) [ 1102.627182] binder: send failed reply for transaction 1036 to 348:350 [ 1102.633912] binder: undelivered transaction 1037, process died. [ 1102.680763] binder: undelivered TRANSACTION_ERROR: 29189 [ 1102.704878] binder: 391:392 ioctl c0306201 20007000 returned -14 [ 1102.707527] IPVS: ftp: loaded support on port[0] = 21 [ 1102.742205] binder: 391:392 transaction failed 29201/-28, size 1073741824-313532612608 line 2971 [ 1102.769921] binder_alloc: binder_alloc_mmap_handler: 391 20001000-20004000 already mapped failed -16 [ 1102.790763] binder: BINDER_SET_CONTEXT_MGR already set [ 1102.800742] binder: 391:392 ioctl 40046207 0 returned -16 [ 1102.823167] binder_alloc: 391: binder_alloc_buf, no vma [ 1102.828677] binder: 391:401 transaction failed 29189/-3, size 0-0 line 2971 [ 1102.852483] binder: 391:401 ioctl c0306201 20007000 returned -14 [ 1102.881988] binder: undelivered TRANSACTION_ERROR: 29189 [ 1102.887891] binder: release 391:392 transaction 1039 out, still active [ 1102.899819] binder: send failed reply for transaction 1039, target dead 2018/06/03 08:31:56 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x4d34000000000000]}, 0x10) 2018/06/03 08:31:56 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:56 executing program 4: bpf$MAP_CREATE(0x7c00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:56 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0xfffffdfd, r3}) 2018/06/03 08:31:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45b90000]}, 0x10) 2018/06/03 08:31:56 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x757f000000000000]}, 0x10) 2018/06/03 08:31:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r3, 0x4) 2018/06/03 08:31:56 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe573]}, 0x10) [ 1103.253826] binder: 412:413 got transaction to context manager from process owning it [ 1103.261932] binder: 412:413 transaction failed 29201/-22, size 0-0 line 2847 [ 1103.291012] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:56 executing program 4: bpf$MAP_CREATE(0x5001000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:56 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x5dc]}, 0x10) [ 1103.365228] binder: 412:413 ioctl c0306201 20007000 returned -14 2018/06/03 08:31:56 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1103.415741] binder_alloc: binder_alloc_mmap_handler: 412 20001000-20004000 already mapped failed -16 [ 1103.459880] binder: BINDER_SET_CONTEXT_MGR already set [ 1103.485316] binder: 412:413 ioctl 40046207 0 returned -16 [ 1103.524864] binder_alloc: 412: binder_alloc_buf, no vma [ 1103.530479] binder: 412:439 transaction failed 29189/-3, size 0-0 line 2971 [ 1103.557147] IPVS: ftp: loaded support on port[0] = 21 [ 1103.563968] binder_alloc: 412: binder_alloc_buf, no vma [ 1103.569543] binder: 412:451 transaction failed 29189/-3, size 0-0 line 2971 [ 1103.597559] binder: 412:439 ioctl c0306201 20007000 returned -14 [ 1103.633193] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:31:56 executing program 4: bpf$MAP_CREATE(0x4a010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:56 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x15f3]}, 0x10) 2018/06/03 08:31:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf522]}, 0x10) 2018/06/03 08:31:56 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:56 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xe785]}, 0x10) 2018/06/03 08:31:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000001e80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/78, 0x4e}], 0x1, &(0x7f0000000040)=""/45, 0x2d}}], 0x1, 0x0, &(0x7f0000001f80)={0x77359400}) sendmmsg$unix(r3, &(0x7f0000000340), 0x492492492492a59, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:56 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0xfdfdffff00000000, r3}) 2018/06/03 08:31:57 executing program 4: bpf$MAP_CREATE(0xe, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1104.175964] binder: 467:473 got transaction to context manager from process owning it [ 1104.181582] IPVS: ftp: loaded support on port[0] = 21 [ 1104.184089] binder: 467:473 transaction failed 29201/-22, size 0-0 line 2847 2018/06/03 08:31:57 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:57 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xf4010000]}, 0x10) 2018/06/03 08:31:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1d2d]}, 0x10) [ 1104.251194] binder: 467:473 ioctl c0306201 20007000 returned -14 2018/06/03 08:31:57 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x7db3]}, 0x10) 2018/06/03 08:31:57 executing program 4: bpf$MAP_CREATE(0x52, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:57 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1104.358921] binder_alloc: binder_alloc_mmap_handler: 467 20001000-20004000 already mapped failed -16 [ 1104.385672] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:31:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9dca000000000000]}, 0x10) [ 1104.411226] binder: 467:473 ioctl 40046207 0 returned -16 [ 1104.448308] binder_alloc: 467: binder_alloc_buf, no vma [ 1104.453798] binder: 467:494 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:31:57 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xdc05]}, 0x10) [ 1104.474552] IPVS: ftp: loaded support on port[0] = 21 [ 1104.515209] binder: 467:494 ioctl c0306201 20007000 returned -14 [ 1104.549337] binder_alloc: 467: binder_alloc_buf, no vma [ 1104.554838] binder: 467:495 transaction failed 29189/-3, size 0-0 line 2971 [ 1104.645186] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:31:57 executing program 4: bpf$MAP_CREATE(0x26e, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:57 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:57 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6d4b]}, 0x10) 2018/06/03 08:31:57 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x3d85]}, 0x10) 2018/06/03 08:31:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1100]}, 0x10) 2018/06/03 08:31:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x2, 0x0, &(0x7f0000000000)="0624"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:57 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0xfdfdffff, r3}) 2018/06/03 08:31:57 executing program 4: bpf$MAP_CREATE(0xe00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:57 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x85e70000]}, 0x10) [ 1105.109411] binder_alloc: binder_alloc_mmap_handler: 537 20001000-20004000 already mapped failed -16 [ 1105.136550] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:58 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x153a000000000000]}, 0x10) [ 1105.206167] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.233428] binder: 537:539 ioctl 40046207 0 returned -16 2018/06/03 08:31:58 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf522]}, 0x10) 2018/06/03 08:31:58 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:58 executing program 4: bpf$MAP_CREATE(0xfe030000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1105.259856] binder_alloc: 537: binder_alloc_buf, no vma [ 1105.265455] binder: 537:541 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:31:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1000000]}, 0x10) 2018/06/03 08:31:58 executing program 4: bpf$MAP_CREATE(0xfe03, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x47010, r2, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x9, 0x2080) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7ff, 0x4, 0x1b, 0x10, "404e5ca15108a53c7a908f9dd8d964a99686c19262bdadbb00639935e914ff1d61a316f4f1a5a96bbe5081cf3275d4d017fd9ab19605bd9aa056f0f2f102054c", "9456a871d548913f6b3b00d2987541162a86ede47dcad2c234d33bfae4cad3de", [0x80000001, 0x2]}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:58 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1105.412909] binder: send failed reply for transaction 1051 to 537:539 [ 1105.419756] binder: undelivered transaction 1052, process died. [ 1105.462518] binder: undelivered TRANSACTION_ERROR: 29189 [ 1105.491532] binder_alloc: 583: binder_alloc_buf, no vma [ 1105.496276] IPVS: ftp: loaded support on port[0] = 21 [ 1105.497065] binder: 583:588 transaction failed 29189/-3, size 0-0 line 2971 [ 1105.571945] binder_alloc: 583: binder_alloc_buf, no vma [ 1105.577442] binder: 583:588 transaction failed 29189/-3, size 0-0 line 2971 [ 1105.610331] binder: BINDER_SET_CONTEXT_MGR already set [ 1105.610347] binder_alloc: 583: binder_alloc_buf, no vma [ 1105.621170] binder: 583:596 transaction failed 29189/-3, size 0-0 line 2971 [ 1105.626794] binder: 583:588 ioctl 40046207 0 returned -16 2018/06/03 08:31:58 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xa545]}, 0x10) 2018/06/03 08:31:58 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x200000000000000]}, 0x10) 2018/06/03 08:31:58 executing program 4: bpf$MAP_CREATE(0x3e00, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1f4]}, 0x10) 2018/06/03 08:31:58 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40020000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:31:58 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0xf5ffffff, r3}) 2018/06/03 08:31:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0000000000000000acc27507d10771657040b4bbabefb4ca5fd6170209f328d4839cb78bc2b1bd99335faee3fbf19937d1b85b2b2a81272167590bf9dad0ec4bddcdaec1b4e7b60e32cb9fc88d872a6f8065865f8e6429a982b8d27273e9e72b076c8eeac121316963ba599803f08be9c1220d1b5ea908e25437840b5b215337a6b37080916a8308db793ba0a9763bf4cdba23f3d85a2830f0e37ae95d16295eba43c39d85a874157f3737dcfc9467b7fbd434ebb56388215a857ee8524c3c2a4c984a9c0f41311d0a"], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:58 executing program 4: bpf$MAP_CREATE(0x4e000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1106.042742] binder: 604:611 ioctl c0306201 20007000 returned -14 [ 1106.069848] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:58 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1106.097566] binder_alloc: binder_alloc_mmap_handler: 604 20001000-20004000 already mapped failed -16 2018/06/03 08:31:58 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x15f30000]}, 0x10) 2018/06/03 08:31:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2d1d000000000000]}, 0x10) [ 1106.155971] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:31:58 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x153a]}, 0x10) [ 1106.184837] binder: 604:611 ioctl 40046207 0 returned -16 [ 1106.292260] binder: send failed reply for transaction 1059 to 604:611 [ 1106.299007] binder: undelivered transaction 1060, process died. [ 1106.332074] binder: undelivered TRANSACTION_ERROR: 29189 [ 1106.385526] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:31:59 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:31:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf8dd]}, 0x10) 2018/06/03 08:31:59 executing program 4: bpf$MAP_CREATE(0x51000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:31:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") inotify_init() timer_create(0x4, &(0x7f0000000000)={0x0, 0x3c, 0x4, @thr={&(0x7f0000000180)="e4f18fc8f1272b1561563ad984e065c1c0e27be9684d9669e0be6dab07495d7c0fdf7efa24ab555020231d8cd44746a5d935345c0d94b5f05f998fceaf5d5647d77914", &(0x7f0000000380)="f546c883df62b4753a3d3601344e518b9c18a417f64da1237c6ae039fece4974462f82335010ceb36497fad46bfc087620774c72c2c7ebfe8726c4e3aef29269a274a990fc35e94236248ac04606f63a0939876bcdc2fa0794d37d6e397876634f79f2097da74bf9f95f2fca491771345dc7c9de611d285d5f6a60a3b5722237afd2a9743297"}}, &(0x7f0000000080)=0x0) timer_delete(r1) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="0000000000000000eed9cac2620de7a6aa9fc759bf8867fd9c580e26250d9ce0a4c0eff07a9486a29ccd07a2f6fa71be9e79e8947514356de6cb5a3368b16ed7f1e1555ca1edba07493c99eedcd598fd8674e758"], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:31:59 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xb37d]}, 0x10) 2018/06/03 08:31:59 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x5568]}, 0x10) 2018/06/03 08:31:59 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x4000, r3}) 2018/06/03 08:31:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97890b14], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) [ 1107.219995] binder: 657:659 transaction failed 29201/-22, size -2261918459643406180--6735532936936832860 line 2971 2018/06/03 08:32:00 executing program 4: bpf$MAP_CREATE(0x15e, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:00 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1107.266999] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3551000000000000]}, 0x10) 2018/06/03 08:32:00 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x4d340000]}, 0x10) [ 1107.304194] binder: 657:659 ioctl c0306201 20007000 returned -14 [ 1107.332543] binder_alloc: binder_alloc_mmap_handler: 657 20001000-20004000 already mapped failed -16 [ 1107.360153] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:00 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:00 executing program 4: bpf$MAP_CREATE(0x246, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:00 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xffffffc0]}, 0x10) [ 1107.388063] binder: 657:678 ioctl 40046207 0 returned -16 [ 1107.391165] binder_alloc: 657: binder_alloc_buf, no vma [ 1107.399127] binder: 657:681 transaction failed 29189/-3, size -2261918459643406180--6735532936936832860 line 2971 2018/06/03 08:32:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4500]}, 0x10) 2018/06/03 08:32:00 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x3a15]}, 0x10) [ 1107.500724] IPVS: ftp: loaded support on port[0] = 21 [ 1107.539754] binder_alloc: 657: binder_alloc_buf, no vma [ 1107.545274] binder: 657:702 transaction failed 29189/-3, size 0-0 line 2971 [ 1107.630368] binder: 657:681 ioctl c0306201 20007000 returned -14 [ 1107.692271] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:00 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:00 executing program 4: bpf$MAP_CREATE(0x46000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:00 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x58b000000000000]}, 0x10) 2018/06/03 08:32:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xa00]}, 0x10) 2018/06/03 08:32:00 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x4, r3}) 2018/06/03 08:32:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffffff], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:00 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xca9d]}, 0x10) 2018/06/03 08:32:00 executing program 1: syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x802) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000180)={0x2, 0x4000}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="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"], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000001100000002000000000000000000000000e67f000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000280)="9c"}) getsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000100)=""/123, &(0x7f0000000000)=0x7b) 2018/06/03 08:32:00 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:00 executing program 4: bpf$MAP_CREATE(0x5a020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:00 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xa7ed]}, 0x10) [ 1108.098645] IPVS: ftp: loaded support on port[0] = 21 [ 1108.106621] binder: 733:736 transaction failed 29201/-22, size -8305149877312230292--4697717839580678360 line 2971 [ 1108.137123] binder: 733:736 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe]}, 0x10) 2018/06/03 08:32:01 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6d4b0000]}, 0x10) [ 1108.222238] binder_alloc: binder_alloc_mmap_handler: 733 20001000-20004000 already mapped failed -16 2018/06/03 08:32:01 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:01 executing program 4: bpf$MAP_CREATE(0xa801000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1108.295826] binder: BINDER_SET_CONTEXT_MGR already set [ 1108.324156] binder: 733:746 ioctl 40046207 0 returned -16 [ 1108.356982] binder_alloc: 733: binder_alloc_buf, no vma [ 1108.361318] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:01 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x3d85000000000000]}, 0x10) [ 1108.362506] binder: 733:768 transaction failed 29189/-3, size 36000209716641792-0 line 2971 [ 1108.393175] binder_alloc: 733: binder_alloc_buf, no vma [ 1108.398747] binder: 733:767 transaction failed 29189/-3, size -8305149877312230292--4697717839580678360 line 2971 [ 1108.477311] binder: 733:767 ioctl c0306201 20007000 returned -14 [ 1108.541532] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3551]}, 0x10) 2018/06/03 08:32:01 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:01 executing program 4: bpf$MAP_CREATE(0x2000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:01 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45b90000]}, 0x10) 2018/06/03 08:32:01 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xc0ffffff00000000]}, 0x10) 2018/06/03 08:32:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$setflags(r1, 0x2, 0x1) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mq_open(&(0x7f0000000080)='/dev/null\x00', 0x882, 0x8, &(0x7f00000002c0)={0x6, 0x0, 0xfffffffffffffff9, 0x5, 0x1, 0x0, 0x5, 0x7}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) readlinkat(r3, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)=""/112, 0x70) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000400)=0x5672, &(0x7f0000000440)=0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@exit_looper={0x630d}], 0xf1, 0x0, &(0x7f0000000100)="fd3c97238cfb29480d0232a6966386f06ebf2eaae67a46c1a18788c97c814a504033ea5bd1cd4a28b3d75c7a8f092c69cd077cc503daaa8112d214b27b194ad3eeeaf801c9998d19bdb4c6a10bd4cf433d0dc675b5b557094d0263afbccb5038cb5fc5b61508d8439d9dd11e7260d30b8c6629fb830e67a5892519a88fd10b6e14df6cc9b540a323bf7654b67d2794c330de69e742a582735d35f239a1e2bc8f73d43747a24478f47703ac78764ccea6f4158af192c279c8204aa8b52810e93cae9cf8f99997f9103471ed64d2fc43f995b1c4342f65760d7cb0ac481fe5abd37676f0edb73f23a8ca10ef3432de159e23"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:01 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x400000000000000, r3}) 2018/06/03 08:32:01 executing program 4: bpf$MAP_CREATE(0xf803, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:01 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1109.034165] binder: BINDER_SET_CONTEXT_MGR already set [ 1109.051748] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:01 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x853d]}, 0x10) [ 1109.078297] binder: 800:803 ioctl 40046207 0 returned -16 2018/06/03 08:32:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4ded0000]}, 0x10) 2018/06/03 08:32:01 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1109.124569] binder_alloc: 800: binder_alloc_buf, no vma [ 1109.130151] binder: 800:803 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:01 executing program 4: bpf$MAP_CREATE(0x2e02, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:02 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd5c4]}, 0x10) 2018/06/03 08:32:02 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x400300]}, 0x10) 2018/06/03 08:32:02 executing program 4: bpf$MAP_CREATE(0x5a00, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1109.328677] binder: undelivered transaction 1070, process died. [ 1109.398124] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdd3f]}, 0x10) 2018/06/03 08:32:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="85634825", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:03 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:03 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x11]}, 0x10) 2018/06/03 08:32:03 executing program 4: bpf$MAP_CREATE(0x244, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:03 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4500]}, 0x10) 2018/06/03 08:32:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:03 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x4000000000000, r3}) [ 1110.320115] binder: 858:859 unknown command 625501061 [ 1110.336834] binder: 858:859 ioctl c0306201 20007000 returned -22 2018/06/03 08:32:03 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:03 executing program 4: bpf$MAP_CREATE(0x60020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf5db]}, 0x10) 2018/06/03 08:32:03 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xb5ad]}, 0x10) [ 1110.368133] IPVS: ftp: loaded support on port[0] = 21 [ 1110.386139] binder_alloc: binder_alloc_mmap_handler: 858 20001000-20004000 already mapped failed -16 2018/06/03 08:32:03 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xbd5]}, 0x10) 2018/06/03 08:32:03 executing program 4: bpf$MAP_CREATE(0x18000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:03 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1110.449924] binder: BINDER_SET_CONTEXT_MGR already set [ 1110.449932] binder: 858:874 unknown command 625501061 [ 1110.449952] binder: 858:874 ioctl c0306201 20007000 returned -22 [ 1110.489051] binder: 858:859 ioctl 40046207 0 returned -16 [ 1110.609498] binder: undelivered transaction 1073, process died. [ 1110.646763] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9695]}, 0x10) 2018/06/03 08:32:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x800, 0x12080) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x8e) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000097ae3d00000000000000003f000000000011000000000000000000000000000000000000000000000000000000553f3152be9e70880f36b9fbe67d78d7e0baa7511e18d9047b9d0ff7d2fb0142441f623d2a8fe10a4a3e280d7ec0a4c790d227127318cc138fb5fe59227d4f1116da36c75680aa6a7218b9b143c93fbf5e00400ae9ead979a6410ee4c682957f33d10cc59f3e9a187394ecaab4becf36801896e733fa09c7b63c9b5f1e714d944811ab9031b4ef00cc75a0a88ebe0f41d933049589fca6f5dea6b3fe0fbce2589b902b82060572bc931e30e583eed28f6ded1f", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000280)="9c"}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x3, 0x4) 2018/06/03 08:32:03 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:03 executing program 4: bpf$MAP_CREATE(0x6e020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:03 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x7f75]}, 0x10) 2018/06/03 08:32:03 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xad790000]}, 0x10) 2018/06/03 08:32:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:03 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x8000000000000000, r3}) 2018/06/03 08:32:04 executing program 4: bpf$MAP_CREATE(0x8000000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1111.188247] binder: 927:929 ioctl c0306201 20007000 returned -14 [ 1111.207236] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:04 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1111.242624] binder: 927:929 unknown command 0 2018/06/03 08:32:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x25a20000]}, 0x10) 2018/06/03 08:32:04 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x1100]}, 0x10) [ 1111.266483] binder: 927:929 ioctl c0306201 20000340 returned -22 2018/06/03 08:32:04 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbd5]}, 0x10) 2018/06/03 08:32:04 executing program 4: bpf$MAP_CREATE(0x4e020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1111.324498] binder_alloc: binder_alloc_mmap_handler: 927 20001000-20004000 already mapped failed -16 2018/06/03 08:32:04 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1d6e]}, 0x10) 2018/06/03 08:32:04 executing program 4: bpf$MAP_CREATE(0xea030000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1111.399208] binder_alloc: 927: binder_alloc_buf, no vma [ 1111.404734] binder: 927:949 transaction failed 29189/-3, size 0-0 line 2971 [ 1111.427222] binder: 927:949 ioctl c0306201 20007000 returned -14 [ 1111.518843] binder: 927:929 unknown command 0 [ 1111.571917] binder: 927:929 ioctl c0306201 20000340 returned -22 [ 1111.579382] IPVS: ftp: loaded support on port[0] = 21 [ 1111.645222] binder: undelivered TRANSACTION_ERROR: 29189 [ 1111.651255] binder: release 927:929 transaction 1075 out, still active [ 1111.658048] binder: undelivered TRANSACTION_COMPLETE [ 1111.687138] binder: send failed reply for transaction 1075, target dead 2018/06/03 08:32:04 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x60d]}, 0x10) 2018/06/03 08:32:04 executing program 4: bpf$MAP_CREATE(0x2200, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:04 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf5db000000000000]}, 0x10) 2018/06/03 08:32:04 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:04 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x4000000, r3}) 2018/06/03 08:32:04 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x25a2]}, 0x10) [ 1112.112816] IPVS: ftp: loaded support on port[0] = 21 [ 1112.144139] binder: 985:986 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc55c000000000000]}, 0x10) 2018/06/03 08:32:05 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:05 executing program 4: bpf$MAP_CREATE(0x142, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1112.202696] binder_alloc: binder_alloc_mmap_handler: 985 20001000-20004000 already mapped failed -16 [ 1112.226291] binder_alloc: 985: binder_alloc_buf, no vma [ 1112.226406] binder: BINDER_SET_CONTEXT_MGR already set [ 1112.231792] binder: 985:1008 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:05 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xe00000000000000]}, 0x10) 2018/06/03 08:32:05 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf522000000000000]}, 0x10) [ 1112.362777] IPVS: ftp: loaded support on port[0] = 21 [ 1112.364100] binder: 985:1008 ioctl c0306201 20007000 returned -14 [ 1112.378609] binder: 985:1007 ioctl 40046207 0 returned -16 [ 1112.475114] binder: undelivered TRANSACTION_ERROR: 29189 [ 1112.481418] binder: release 985:986 transaction 1078 out, still active [ 1112.506089] binder: send failed reply for transaction 1078, target dead [ 1112.512959] binder: undelivered transaction 1079, process died. 2018/06/03 08:32:05 executing program 4: bpf$MAP_CREATE(0x3e, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:05 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:05 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x40030000000000]}, 0x10) 2018/06/03 08:32:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x15f30000]}, 0x10) 2018/06/03 08:32:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) fcntl$setlease(r2, 0x400, 0x2) 2018/06/03 08:32:05 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xb5ad0000]}, 0x10) 2018/06/03 08:32:05 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) r4 = inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000000) inotify_rm_watch(r1, r4) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:05 executing program 4: bpf$MAP_CREATE(0x4602000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:05 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1113.045697] IPVS: ftp: loaded support on port[0] = 21 [ 1113.052629] binder: 1044:1056 ioctl c0306201 20007000 returned -14 [ 1113.076665] binder_alloc: binder_alloc_mmap_handler: 1044 20001000-20004000 already mapped failed -16 2018/06/03 08:32:05 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x4ded]}, 0x10) 2018/06/03 08:32:05 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x5900000000000000]}, 0x10) [ 1113.105548] binder: BINDER_SET_CONTEXT_MGR already set [ 1113.135133] binder: 1044:1056 ioctl 40046207 0 returned -16 [ 1113.169777] binder_alloc: 1044: binder_alloc_buf, no vma [ 1113.175365] binder: 1044:1074 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:06 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1000000]}, 0x10) 2018/06/03 08:32:06 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:06 executing program 4: bpf$MAP_CREATE(0x2e02000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x5568]}, 0x10) [ 1113.231380] binder: 1044:1074 ioctl c0306201 20007000 returned -14 [ 1113.284323] binder_alloc: 1044: binder_alloc_buf, no vma [ 1113.289912] binder: 1044:1056 transaction failed 29189/-3, size 0-0 line 2971 [ 1113.359590] IPVS: ftp: loaded support on port[0] = 21 [ 1113.468429] binder: undelivered TRANSACTION_ERROR: 29189 [ 1113.474603] binder: release 1044:1056 transaction 1082 out, still active [ 1113.492116] binder: send failed reply for transaction 1082, target dead [ 1113.498968] binder: undelivered transaction 1083, process died. 2018/06/03 08:32:06 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:06 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xa000000]}, 0x10) 2018/06/03 08:32:06 executing program 4: bpf$MAP_CREATE(0x5100, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x5900]}, 0x10) 2018/06/03 08:32:06 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3d85]}, 0x10) 2018/06/03 08:32:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x1, 0x400}, 0x20) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'ipddp0\x00', {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x100000000, 0x0, 0x0, 0x6, 0x4, 0x6, 0x9, 0xfffffffffffff52a, 0x2, 0x3}, 0xb) 2018/06/03 08:32:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:06 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) socketpair$inet(0x2, 0x80007, 0x3, &(0x7f0000000000)) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:06 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:06 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x7db30000]}, 0x10) [ 1113.950559] binder: 1114:1116 ioctl c0306201 20007000 returned -14 [ 1113.979359] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:06 executing program 4: bpf$MAP_CREATE(0x5e01000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x1f4]}, 0x10) 2018/06/03 08:32:06 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc55c]}, 0x10) [ 1114.026680] binder_alloc: binder_alloc_mmap_handler: 1114 20001000-20004000 already mapped failed -16 2018/06/03 08:32:06 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:06 executing program 4: bpf$MAP_CREATE(0x5201000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1114.144428] binder_alloc: 1114: binder_alloc_buf, no vma [ 1114.150097] binder: 1114:1127 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:07 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xd5c4]}, 0x10) [ 1114.223217] binder: BINDER_SET_CONTEXT_MGR already set [ 1114.234999] binder: 1114:1116 ioctl 40046207 0 returned -16 [ 1114.261238] binder: 1114:1127 ioctl c0306201 20007000 returned -14 [ 1114.343359] binder: undelivered TRANSACTION_ERROR: 29189 [ 1114.349801] binder: release 1114:1116 transaction 1087 out, still active [ 1114.356805] binder: undelivered TRANSACTION_COMPLETE [ 1114.372892] IPVS: ftp: loaded support on port[0] = 21 [ 1114.382085] binder: send failed reply for transaction 1087, target dead 2018/06/03 08:32:07 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xd065]}, 0x10) 2018/06/03 08:32:07 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdd3f000000000000]}, 0x10) 2018/06/03 08:32:07 executing program 4: bpf$MAP_CREATE(0x64010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x8, 0x0) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) accept$netrom(r2, &(0x7f0000000140)=@full, &(0x7f00000001c0)=0x48) getsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000002c0)={0x80000001, 0x0, 0x0, 0x40}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000300)={r4, 0xfff}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="6f46bc95efa8a20c"], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:07 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x45]}, 0x10) 2018/06/03 08:32:07 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bfs\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:07 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:07 executing program 4: bpf$MAP_CREATE(0x2802, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1114.845800] binder: 1174:1175 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x65d0000000000000]}, 0x10) 2018/06/03 08:32:07 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x6517000000000000]}, 0x10) [ 1114.918867] binder_alloc: binder_alloc_mmap_handler: 1174 20001000-20004000 already mapped failed -16 [ 1114.919848] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:07 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xffffffff00000000]}, 0x10) 2018/06/03 08:32:07 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1114.973799] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:07 executing program 4: bpf$MAP_CREATE(0x6e02, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1115.006822] binder: 1174:1193 ioctl 40046207 0 returned -16 [ 1115.042722] binder_alloc: 1174: binder_alloc_buf, no vma [ 1115.048430] binder: 1174:1199 transaction failed 29189/-3, size 0-0 line 2971 [ 1115.089767] binder_alloc: 1174: binder_alloc_buf, no vma [ 1115.095407] binder: 1174:1212 transaction failed 29189/-3, size 0-0 line 2971 [ 1115.167216] binder: 1174:1199 ioctl c0306201 20007000 returned -14 [ 1115.240316] binder: undelivered TRANSACTION_ERROR: 29189 [ 1115.246765] binder: release 1174:1175 transaction 1090 out, still active [ 1115.265698] binder: send failed reply for transaction 1090, target dead [ 1115.268303] IPVS: ftp: loaded support on port[0] = 21 [ 1115.272553] binder: undelivered transaction 1091, process died. 2018/06/03 08:32:08 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3f00000000000000]}, 0x10) 2018/06/03 08:32:08 executing program 4: bpf$MAP_CREATE(0x340, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:08 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xa545]}, 0x10) 2018/06/03 08:32:08 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1100]}, 0x10) 2018/06/03 08:32:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x7, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:08 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x1ffffff9) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) [ 1115.749291] binder: 1237:1244 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:08 executing program 4: bpf$MAP_CREATE(0x8a01000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:08 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80840, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000040)={{{@in6, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) 2018/06/03 08:32:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x700000000000000]}, 0x10) [ 1115.800846] binder_alloc: binder_alloc_mmap_handler: 1237 20001000-20004000 already mapped failed -16 2018/06/03 08:32:08 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:08 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdbf5]}, 0x10) 2018/06/03 08:32:08 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xe1bd]}, 0x10) [ 1115.889431] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:08 executing program 4: bpf$MAP_CREATE(0x3002000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1115.913861] binder: BINDER_SET_CONTEXT_MGR already set [ 1115.944694] binder: 1237:1254 ioctl 40046207 0 returned -16 2018/06/03 08:32:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x700]}, 0x10) 2018/06/03 08:32:08 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1115.988291] binder_alloc: 1237: binder_alloc_buf, no vma [ 1115.993893] binder: 1237:1254 transaction failed 29189/-3, size 0-0 line 2971 [ 1115.994085] binder_alloc: 1237: binder_alloc_buf, no vma [ 1116.006797] binder: 1237:1244 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:08 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x6e1d]}, 0x10) [ 1116.125811] IPVS: ftp: loaded support on port[0] = 21 [ 1116.145689] binder: 1237:1244 ioctl c0306201 20007000 returned -14 [ 1116.256112] binder: undelivered TRANSACTION_ERROR: 29189 [ 1116.262110] binder: release 1237:1244 transaction 1095 out, still active [ 1116.283115] binder: send failed reply for transaction 1095, target dead [ 1116.290106] binder: undelivered transaction 1096, process died. 2018/06/03 08:32:09 executing program 4: bpf$MAP_CREATE(0x56000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:09 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:09 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x34000]}, 0x10) 2018/06/03 08:32:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x11]}, 0x10) 2018/06/03 08:32:09 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = getpid() fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x7, 0x10000, 0xdc, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000000)=0x68) ioctl(r2, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="443b4e608c5546699e17975a47413442c2d3893000da681bd785dda110279c00df40670abd4ebdcd79802b90e1487a2000c92e3951d0f852649092c56ac3526a1e4849f2cb379ed66625dae300000000"], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x32, 0x0, &(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES64=r4], @ANYRES16=r4, @ANYBLOB="e1dc1dedbb5257934a61664f9d297a0fe01af02385576337c261ded2fbf142e45e6bbb5ad184a980fb0bd89da97b6188c2036dd514898a93163e15db2fe477580eeca8abd48b317bf7c5783c9f233c667d817fabb7b0ffaff52cd56079d0dba42d9aea100dfa632b0185753d5b9a07a6c621cfb1e9e0134e546fc676e7cc0a07b2294bcd8e1885d4037e1cabc0", @ANYRES16], 0x0, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:09 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xfd56]}, 0x10) 2018/06/03 08:32:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91ffffff], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:09 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x14, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@local, @in6=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000280)={0x0, @loopback, @broadcast}, &(0x7f0000000300)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in=@remote, @in=@multicast2}}}, &(0x7f0000000380)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bcsh0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@dev={0xfe, 0x80, [], 0x13}, 0xfffffffffffffffd, r4}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) [ 1116.659765] binder: 1307:1308 transaction failed 29201/-22, size 43953048755471831--3621651951505686305 line 2971 2018/06/03 08:32:09 executing program 4: bpf$MAP_CREATE(0x4c01, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:09 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1116.707689] IPVS: ftp: loaded support on port[0] = 21 [ 1116.724787] binder: 1307:1308 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xdbf5]}, 0x10) [ 1116.765943] binder_alloc: binder_alloc_mmap_handler: 1307 20001000-20004000 already mapped failed -16 2018/06/03 08:32:09 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x65d0000000000000]}, 0x10) 2018/06/03 08:32:09 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x2dd6]}, 0x10) 2018/06/03 08:32:09 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:09 executing program 4: bpf$MAP_CREATE(0x293, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1116.832902] binder: BINDER_SET_CONTEXT_MGR already set [ 1116.865769] binder: 1307:1308 ioctl 40046207 0 returned -16 2018/06/03 08:32:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3fdd]}, 0x10) 2018/06/03 08:32:09 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x9, 0x4) [ 1116.987889] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/03 08:32:09 executing program 4: bpf$MAP_CREATE(0x276, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1117.029511] IPVS: ftp: loaded support on port[0] = 21 [ 1117.054156] binder: 1357:1360 ioctl c0306201 20007000 returned -14 [ 1117.096168] binder_alloc: binder_alloc_mmap_handler: 1357 20001000-20004000 already mapped failed -16 [ 1117.131645] binder_alloc: 1357: binder_alloc_buf, no vma [ 1117.137222] binder: 1357:1369 transaction failed 29189/-3, size 0-0 line 2971 [ 1117.138482] binder: BINDER_SET_CONTEXT_MGR already set [ 1117.207936] binder: 1357:1369 ioctl c0306201 20007000 returned -14 [ 1117.222319] binder: 1357:1360 ioctl 40046207 0 returned -16 [ 1117.222343] binder_alloc: 1357: binder_alloc_buf, no vma [ 1117.233660] binder: 1357:1378 transaction failed 29189/-3, size 0-0 line 2971 [ 1117.282734] binder: undelivered TRANSACTION_ERROR: 29189 [ 1117.288723] binder: release 1357:1360 transaction 1102 out, still active [ 1117.302858] binder: send failed reply for transaction 1102, target dead [ 1117.309789] binder: undelivered transaction 1103, process died. 2018/06/03 08:32:10 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xbd28]}, 0x10) 2018/06/03 08:32:10 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:10 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2dd60000]}, 0x10) 2018/06/03 08:32:10 executing program 4: bpf$MAP_CREATE(0xbe03000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:10 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) accept$packet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x14) r1 = socket$kcm(0x29, 0x5, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3, 0x10, 0x6, 0x100000000}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r2, 0x0, 0x1, [0x7]}, 0xa) dup2(r1, r0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) 2018/06/03 08:32:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xb5ad000000000000]}, 0x10) 2018/06/03 08:32:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x4080) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000080)={0x3, 0x1, 0xbe3, 0x2, 0x8000}) [ 1117.595740] binder: 1390:1392 ioctl c0306201 20007000 returned -14 [ 1117.623386] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:10 executing program 4: bpf$MAP_CREATE(0x4002, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:10 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xd5c40000]}, 0x10) 2018/06/03 08:32:10 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xc55c]}, 0x10) [ 1117.644129] binder_alloc: binder_alloc_mmap_handler: 1390 20001000-20004000 already mapped failed -16 [ 1117.672677] binder: BINDER_SET_CONTEXT_MGR already set [ 1117.697415] binder: 1390:1392 ioctl 40046207 0 returned -16 2018/06/03 08:32:10 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd060000]}, 0x10) 2018/06/03 08:32:10 executing program 4: bpf$MAP_CREATE(0x3000000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1117.799323] binder_alloc: 1390: binder_alloc_buf, no vma [ 1117.804913] binder: 1390:1420 transaction failed 29189/-3, size 0-0 line 2971 [ 1117.826454] binder_alloc: 1390: binder_alloc_buf, no vma [ 1117.832074] binder: 1390:1392 transaction failed 29189/-3, size 0-0 line 2971 [ 1117.884433] binder: 1390:1420 ioctl c0306201 20007000 returned -14 [ 1118.014417] binder: undelivered TRANSACTION_ERROR: 29189 [ 1118.020808] binder: release 1390:1392 transaction 1107 out, still active [ 1118.027891] binder: send failed reply for transaction 1107, target dead [ 1118.034745] binder: undelivered transaction 1108, process died. 2018/06/03 08:32:11 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:11 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xffffff80]}, 0x10) 2018/06/03 08:32:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x9dca]}, 0x10) 2018/06/03 08:32:11 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x1}, 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0xf, r4}) 2018/06/03 08:32:11 executing program 4: bpf$MAP_CREATE(0xfc030000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:11 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x15f30000]}, 0x10) 2018/06/03 08:32:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:11 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)={0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x10810, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x88, 0x0, &(0x7f0000000380)=[@increfs_done={0x40106308, r3, 0x3}, @increfs_done={0x40106308, r4, 0x3}, @transaction={0x40406300, {0x2, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x20, 0x40, &(0x7f0000000080)=[@fda={0x66646185, 0x5, 0x1, 0x2e}], &(0x7f0000000100)=[0x28, 0x78, 0x78, 0x68, 0x48, 0x48, 0x0, 0x18]}}, @acquire_done={0x40106309, r5}, @decrefs={0x40046307, 0x4}], 0x0, 0x0, &(0x7f0000000180)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:11 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:11 executing program 4: bpf$MAP_CREATE(0x93020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1118.501339] binder: 1448:1449 BC_INCREFS_DONE u0000000000000000 no match [ 1118.508321] binder: 1448:1449 BC_INCREFS_DONE u0000000000000000 no match [ 1118.515241] binder: 1448:1449 got transaction to invalid handle [ 1118.521348] binder: 1448:1449 transaction failed 29201/-22, size 32-64 line 2856 [ 1118.535540] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:11 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x1765]}, 0x10) 2018/06/03 08:32:11 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x7db30000]}, 0x10) 2018/06/03 08:32:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x58b0000]}, 0x10) 2018/06/03 08:32:11 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:11 executing program 4: bpf$MAP_CREATE(0x6202, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1118.691910] binder: 1448:1449 ioctl c0306201 20007000 returned -14 [ 1118.740245] binder_alloc: binder_alloc_mmap_handler: 1448 20001000-20004000 already mapped failed -16 2018/06/03 08:32:11 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:11 executing program 4: bpf$MAP_CREATE(0x46, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:11 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xed4d]}, 0x10) [ 1118.785421] binder: BINDER_SET_CONTEXT_MGR already set [ 1118.791673] IPVS: ftp: loaded support on port[0] = 21 [ 1118.825361] binder: 1448:1480 ioctl 40046207 0 returned -16 2018/06/03 08:32:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xd50b]}, 0x10) [ 1118.858268] binder: 1448:1480 BC_INCREFS_DONE u0000000000000000 no match [ 1118.865285] binder: 1448:1480 BC_INCREFS_DONE u0000000000000000 no match [ 1118.872188] binder: 1448:1480 got transaction to invalid handle [ 1118.878291] binder: 1448:1480 transaction failed 29201/-22, size 32-64 line 2856 [ 1119.026573] binder_alloc: 1448: binder_alloc_buf, no vma [ 1119.032235] binder: 1448:1449 transaction failed 29189/-3, size 0-0 line 2971 [ 1119.044269] binder: 1448:1449 ioctl c0306201 20007000 returned -14 [ 1119.094656] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:12 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe1bd]}, 0x10) 2018/06/03 08:32:12 executing program 4: bpf$MAP_CREATE(0x154, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x9dca000000000000]}, 0x10) 2018/06/03 08:32:12 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x80ffffff00000000]}, 0x10) 2018/06/03 08:32:12 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000)=0x7fff, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x100000082, 0x0, &(0x7f0000000200)=[@clear_death={0x400c630f, 0x2}], 0x1, 0x0, &(0x7f0000000280)='c'}) 2018/06/03 08:32:12 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:12 executing program 4: bpf$MAP_CREATE(0x242, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1119.448182] IPVS: ftp: loaded support on port[0] = 21 [ 1119.451082] binder: 1533:1534 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:12 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:12 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xd50b0000]}, 0x10) 2018/06/03 08:32:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x8000000000000000]}, 0x10) [ 1119.502980] binder: 1533:1534 BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 1119.509942] binder: 1533:1534 unknown command 0 [ 1119.583424] binder: 1533:1534 ioctl c0306201 20000340 returned -22 [ 1119.619210] binder_alloc: binder_alloc_mmap_handler: 1533 20001000-20004000 already mapped failed -16 [ 1119.647293] binder: BINDER_SET_CONTEXT_MGR already set [ 1119.674360] binder: 1533:1534 ioctl 40046207 0 returned -16 [ 1119.693907] binder_alloc: 1533: binder_alloc_buf, no vma [ 1119.699511] binder: 1533:1566 transaction failed 29189/-3, size 0-0 line 2971 [ 1119.729016] IPVS: ftp: loaded support on port[0] = 21 [ 1119.750407] binder: 1533:1566 ioctl c0306201 20007000 returned -14 [ 1119.812499] binder: undelivered TRANSACTION_ERROR: 29189 [ 1119.818464] binder: release 1533:1534 transaction 1116 out, still active [ 1119.825424] binder: undelivered TRANSACTION_COMPLETE [ 1119.835588] binder: send failed reply for transaction 1116, target dead 2018/06/03 08:32:13 executing program 4: bpf$MAP_CREATE(0xea03000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:13 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:13 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xa7ed]}, 0x10) 2018/06/03 08:32:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xb5ad]}, 0x10) 2018/06/03 08:32:13 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x6517]}, 0x10) 2018/06/03 08:32:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:13 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:13 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1120.328823] binder: 1576:1577 transaction failed 29189/-22, size 0-0 line 2856 [ 1120.362837] IPVS: ftp: loaded support on port[0] = 21 [ 1120.372453] binder: 1576:1577 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:13 executing program 4: bpf$MAP_CREATE(0x7c02, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x11000000]}, 0x10) 2018/06/03 08:32:13 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x757f]}, 0x10) [ 1120.424298] binder_alloc: binder_alloc_mmap_handler: 1576 20001000-20004000 already mapped failed -16 [ 1120.467611] binder: 1576:1597 transaction failed 29189/-22, size 0-0 line 2856 2018/06/03 08:32:13 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:13 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xad79000000000000]}, 0x10) 2018/06/03 08:32:13 executing program 4: bpf$MAP_CREATE(0x5c010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1120.523173] binder: BINDER_SET_CONTEXT_MGR already set [ 1120.559379] binder: 1576:1577 ioctl 40046207 0 returned -16 2018/06/03 08:32:13 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x1d6e000000000000]}, 0x10) [ 1120.592179] binder: 1576:1597 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x9d11]}, 0x10) 2018/06/03 08:32:13 executing program 4: bpf$MAP_CREATE(0x3a020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1120.658873] IPVS: ftp: loaded support on port[0] = 21 [ 1120.716960] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:13 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:13 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9d110000]}, 0x10) 2018/06/03 08:32:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x808912, &(0x7f0000000480)="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") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000100)=0x1, 0x4) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a996d0e927f10ead97fb7eb55d1fe85832996afa547ea8ed", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="000000000035e5d1"], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:13 executing program 4: bpf$MAP_CREATE(0x6e010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xffffffc0]}, 0x10) 2018/06/03 08:32:13 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x757f0000]}, 0x10) 2018/06/03 08:32:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:13 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x18d000) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000400)="38fdd3318a408a6b24c850f129854f453b0ac52a83d7f945fa6d3d412d1b50520bd23b3e6787bd6d1a02e0db808a04000000000000000000ef06f164bfc4ee4fbaedab3cdba026f65a1605000000000000cb7d01e63a514ac5412c47d078e5d9a0ba5911dcde85dac32702324c42e33e9e7988e2530f41245adfa048944a4db587fb46430dc268772c54e54d5a069cf44983c6e6aa694dc73c0e49ef896ef0b989b98df71de8578e9af613b1f15937c3a64b4f536f3463af30a151097f7bb3dd1c8979d9ad3fdbc8b415efd1252cac1d076b1ec2d68c0cd493d385990cd36d7d5e5f79") unshare(0x60000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) r5 = socket(0x1e, 0x1, 0x0) getsockopt(r5, 0x10f, 0x7f, &(0x7f0000000040)=""/4, &(0x7f0000000080)=0x4) ioctl$VT_DISALLOCATE(r0, 0x5608) 2018/06/03 08:32:14 executing program 4: bpf$MAP_CREATE(0x4602, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:14 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1121.248529] binder: 1648:1649 unknown command -372205911 [ 1121.268142] IPVS: ftp: loaded support on port[0] = 21 [ 1121.286584] binder: 1648:1649 ioctl c0306201 20007000 returned -22 [ 1121.316772] binder: 1648:1649 transaction failed 29201/-28, size 0-0 line 2971 2018/06/03 08:32:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x28bd]}, 0x10) 2018/06/03 08:32:14 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xbde1000000000000]}, 0x10) 2018/06/03 08:32:14 executing program 4: bpf$MAP_CREATE(0x160, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1121.357828] binder_alloc: binder_alloc_mmap_handler: 1648 20001000-20004000 already mapped failed -16 [ 1121.387138] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:14 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x852e0000]}, 0x10) 2018/06/03 08:32:14 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1121.422429] binder: 1648:1649 ioctl 40046207 0 returned -16 2018/06/03 08:32:14 executing program 4: bpf$MAP_CREATE(0xd, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1121.467900] binder: 1648:1684 unknown command -372205911 2018/06/03 08:32:14 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1121.534348] binder: 1648:1684 ioctl c0306201 20007000 returned -22 [ 1121.554168] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x45b9]}, 0x10) 2018/06/03 08:32:14 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x65d0000000000000]}, 0x10) 2018/06/03 08:32:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000080)={0x0, 0x3, 0x100000000, 0x2}, 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="da5e6fcb", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000200)={0x10001, 0x1, 0x1}, 0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840000000e8464f71ce3b000000f70200000000e834f00988d57aa500000000000000000000ff0000000000000000000000000000e18e68410b06e6ecd4b0006885b935aa696601eedeaf8c88c4662f478479967f5f9173e29273e7b74d1014a26be6b108bed5ef6f1ed4886d3bf6190af54e0b5b976a", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:14 executing program 4: bpf$MAP_CREATE(0x4402000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:14 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:14 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5d9c0000]}, 0x10) 2018/06/03 08:32:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:14 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = dup3(r0, r0, 0x80000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e24, @multicast1=0xe0000001}, @in6={0xa, 0x4e24, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x8}, @in6={0xa, 0x4fd, 0x6, @remote={0xfe, 0x80, [], 0xbb}, 0x7}, @in6={0xa, 0x4e24, 0xffff, @mcast2={0xff, 0x2, [], 0x1}, 0x10001}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0xfffffffffffffffe, @empty, 0x9}, @in6={0xa, 0x4e22, 0x2e40a856, @dev={0xfe, 0x80, [], 0x1b}, 0x4}, @in={0x2, 0x4e21, @rand_addr=0x7}, @in={0x2, 0x4e24, @multicast1=0xe0000001}], 0xcc) unshare(0x60000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) [ 1122.136008] IPVS: ftp: loaded support on port[0] = 21 [ 1122.145548] binder: 1721:1725 unknown command -881893670 2018/06/03 08:32:15 executing program 4: bpf$MAP_CREATE(0x4e00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1122.185143] binder: 1721:1725 ioctl c0306201 20007000 returned -22 2018/06/03 08:32:15 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6517]}, 0x10) 2018/06/03 08:32:15 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:15 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x35510000]}, 0x10) [ 1122.225961] binder: 1721:1725 got transaction to invalid handle [ 1122.232182] binder: 1721:1725 transaction failed 29201/-22, size 1095216660480-0 line 2856 2018/06/03 08:32:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x6855]}, 0x10) [ 1122.303907] binder_alloc: binder_alloc_mmap_handler: 1721 20001000-20004000 already mapped failed -16 [ 1122.328214] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:15 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:15 executing program 4: bpf$MAP_CREATE(0x6a02, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1122.367501] binder: 1721:1738 unknown command -881893670 [ 1122.402223] binder: 1721:1725 ioctl 40046207 0 returned -16 [ 1122.412217] binder: 1721:1738 ioctl c0306201 20007000 returned -22 2018/06/03 08:32:15 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:15 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x22f5]}, 0x10) 2018/06/03 08:32:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x60d]}, 0x10) [ 1122.458403] IPVS: ftp: loaded support on port[0] = 21 [ 1122.463924] binder: 1721:1747 got transaction to invalid handle [ 1122.470111] binder: 1721:1747 transaction failed 29201/-22, size 1095216660480-0 line 2856 2018/06/03 08:32:16 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x15f3000000000000]}, 0x10) 2018/06/03 08:32:16 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:16 executing program 4: bpf$MAP_CREATE(0x3000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xa545000000000000]}, 0x10) 2018/06/03 08:32:16 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xfd560000]}, 0x10) 2018/06/03 08:32:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="fa622c44bfcb771ca5af65d3802a08653f454d7a2e5a80", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:16 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x99) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000040)={0xfffffffffffffffc, 0x9, 0x1}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x29, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) 2018/06/03 08:32:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:16 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1123.461405] binder: 1784:1785 unknown command 1143759610 [ 1123.492853] binder: 1784:1785 ioctl c0306201 20007000 returned -22 [ 1123.503894] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:16 executing program 4: bpf$MAP_CREATE(0x7600, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x9dca0000]}, 0x10) 2018/06/03 08:32:16 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x8000000000000000]}, 0x10) [ 1123.526295] binder_alloc: binder_alloc_mmap_handler: 1784 20001000-20004000 already mapped failed -16 2018/06/03 08:32:16 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x6d4b0000]}, 0x10) 2018/06/03 08:32:16 executing program 4: bpf$MAP_CREATE(0x24e, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:16 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1123.624960] binder: BINDER_SET_CONTEXT_MGR already set [ 1123.662192] binder: 1784:1805 ioctl 40046207 0 returned -16 2018/06/03 08:32:16 executing program 4: bpf$MAP_CREATE(0x4200000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1123.693952] binder_alloc: 1784: binder_alloc_buf, no vma [ 1123.694141] binder: 1784:1828 unknown command 1143759610 [ 1123.699559] binder: 1784:1829 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x2000000]}, 0x10) 2018/06/03 08:32:16 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:16 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xffffffc0]}, 0x10) 2018/06/03 08:32:16 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd50b0000]}, 0x10) 2018/06/03 08:32:16 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1123.871706] IPVS: ftp: loaded support on port[0] = 21 [ 1123.917399] binder: 1784:1828 ioctl c0306201 20007000 returned -22 2018/06/03 08:32:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x3}], 0x8c, 0x0, &(0x7f0000000100)="13212171f4ac0ef8386bc66637215240fc5d037fa801c5dac52d2b42e99ccf806d7a36aa6393d2ed7478a4db80b64dcd5b16115814c70220627d933d926185c502f9ba374068e9db9bd2738fecc36ec16316d2e1b66829ab7894d65666fb83017311c1de6470c0e098fb7090cb4676146e001182a6397332c6f0bb2ce15f365337b3d15281ecfa798d622194"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0000000000e07240b637de1d7111b03902e4f2d0000000"], 0x1, 0x0, &(0x7f0000000280)="9c"}) [ 1124.002466] binder: undelivered transaction 1127, process died. [ 1124.058094] binder: 1871:1872 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 1124.096599] binder: 1871:1872 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xad790000]}, 0x10) [ 1124.114984] binder: 1871:1872 transaction failed 29201/-28, size 0-0 line 2971 [ 1124.148593] binder_alloc: binder_alloc_mmap_handler: 1871 20001000-20004000 already mapped failed -16 [ 1124.174371] binder: 1871:1872 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 1124.182236] binder: BINDER_SET_CONTEXT_MGR already set [ 1124.187997] binder: 1871:1874 ioctl 40046207 0 returned -16 [ 1124.201296] binder_alloc: 1871: binder_alloc_buf, no vma [ 1124.206872] binder: 1871:1872 transaction failed 29189/-3, size 0-0 line 2971 [ 1124.224084] binder_alloc: 1871: binder_alloc_buf, no vma [ 1124.229689] binder: 1871:1874 transaction failed 29189/-3, size 0-0 line 2971 [ 1124.247839] binder: 1871:1872 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:17 executing program 4: bpf$MAP_CREATE(0x5e02000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:17 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x85e7000000000000]}, 0x10) 2018/06/03 08:32:17 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:17 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x65170000]}, 0x10) 2018/06/03 08:32:17 executing program 5: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f00000000c0), 0x1) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:32:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3551000000000000]}, 0x10) 2018/06/03 08:32:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x8000802) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) [ 1124.277760] binder: undelivered TRANSACTION_ERROR: 29189 [ 1124.283713] binder: release 1871:1872 transaction 1130 out, still active [ 1124.307334] binder: send failed reply for transaction 1130, target dead [ 1124.362948] binder: 1887:1888 transaction failed 29189/-22, size 0-0 line 2856 [ 1124.390570] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:17 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:17 executing program 4: bpf$MAP_CREATE(0xf803000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1124.412827] binder: 1887:1888 ioctl c0306201 20007000 returned -14 [ 1124.443734] binder_alloc: binder_alloc_mmap_handler: 1887 20001000-20004000 already mapped failed -16 2018/06/03 08:32:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe573]}, 0x10) [ 1124.472612] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:17 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0xbd28000000000000]}, 0x10) 2018/06/03 08:32:17 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9dca0000]}, 0x10) [ 1124.498232] binder: 1887:1907 transaction failed 29189/-22, size 0-0 line 2856 2018/06/03 08:32:17 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:17 executing program 4: bpf$MAP_CREATE(0x7a01000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1124.574379] binder: 1887:1907 ioctl c0306201 20007000 returned -14 [ 1124.609454] binder: 1887:1888 ioctl 40046207 0 returned -16 2018/06/03 08:32:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x5d9c0000]}, 0x10) [ 1124.706762] binder: undelivered TRANSACTION_ERROR: 29189 [ 1124.742915] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x81, 0x1) sendmsg$key(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000600)={0x2, 0x6, 0xcd42, 0x3, 0x203, 0x0, 0x70bd26, 0x25dfdbfc, [@sadb_x_sec_ctx={0x201, 0x18, 0x1ff, 0x7, 0x1000, "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"}]}, 0x1018}, 0x1}, 0x4004000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000580)='/dev/rtc0\x00', 0x40000, 0x0) r3 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x2, 0x100) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x40}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) fcntl$setflags(r3, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="000000000000000dddb568990100"], 0x1, 0x0, &(0x7f0000000280)="9c"}) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000300)=0x0) ptrace$cont(0x38, r5, 0x1f, 0xfffffffffffffffb) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000440)={{0x176, 0x0, 0xfffffffffffffffd, 0x9, "60d3999a5c3177c8c4cd6d747d04fc583a9b5d6c7012d665c0dc09a791ec5dbeac471be11ef3a2c116bd7656", 0x5}, 0x0, 0x0, 0xfffffffffffffeff, r5, 0x101, 0xffffffffffff0000, "328ed1abe9668e75b26f857332126a89503b99b83ed2c845404fae0eccec6047373ea7b1300ebf2f81cdab6e32b775728b124ba0e44bc7358dc6205b7cc4adf9", &(0x7f0000000400)='/dev/binder#\x00', 0xd, [], [0x40, 0x100, 0xfffffffffffffff8, 0x3]}) r6 = creat(&(0x7f0000000000)='./file0\x00', 0xa0) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f0000000100)="4bbedcbff556fb18aaca6eff6af0e4a7b4c7afd1646aea2e3d665feda214670d88d94697eed6ad69cf764112c1abff203bea6fe127b04271ac988cbcd8b2a742cf734cd244a876211ec654062894dccf0646226f1b020a8d1125ca98f96e0b526a88731b00b50b16255eaa35f266455ff0032499ec65de2a872540e0661e63b1cde4f5d759f5d0a183460b6c3f475b17fe0f63a07a8c135459fc38e7452227e7b33ad83b22a4e3f36410724f709cb256ae1c64ecd636976f9054a32421b93102e4ca5deec38585a1c28a34d4f88e642fc94cff004c7ace235a3982eb9b1473eecdc214525ffd25a39ec49d421e40") ioctl$SG_GET_COMMAND_Q(r6, 0x2270, &(0x7f0000000080)) 2018/06/03 08:32:18 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:18 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x11]}, 0x10) 2018/06/03 08:32:18 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x700000000000000]}, 0x10) 2018/06/03 08:32:18 executing program 4: bpf$MAP_CREATE(0x8e010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe]}, 0x10) 2018/06/03 08:32:18 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_triestat\x00') ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/96) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) getrusage(0xffffffffffffffff, &(0x7f00000000c0)) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:18 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:18 executing program 4: bpf$MAP_CREATE(0x9000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1125.273965] binder: 1954:1959 ioctl c0306201 20007000 returned -14 [ 1125.296277] binder: 1954:1959 transaction failed 29201/-28, size 0-0 line 2971 [ 1125.312659] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe573000000000000]}, 0x10) 2018/06/03 08:32:18 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xddf8]}, 0x10) [ 1125.367254] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:18 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xa225]}, 0x10) 2018/06/03 08:32:18 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1125.403441] binder: 1954:1970 ioctl 40046207 0 returned -16 [ 1125.433079] binder_alloc: 1954: binder_alloc_buf, no vma [ 1125.438676] binder: 1954:1959 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:18 executing program 4: bpf$MAP_CREATE(0x3fc, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:18 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1125.517524] binder: 1954:1959 ioctl c0306201 20007000 returned -14 [ 1125.552810] binder_alloc: 1954: binder_alloc_buf, no vma [ 1125.558533] binder: 1954:1970 transaction failed 29189/-3, size 0-0 line 2971 [ 1125.671734] binder: undelivered TRANSACTION_ERROR: 29189 [ 1125.677830] binder: release 1954:1959 transaction 1138 out, still active [ 1125.689784] IPVS: ftp: loaded support on port[0] = 21 [ 1125.708116] binder: send failed reply for transaction 1138, target dead 2018/06/03 08:32:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x6d4b0000]}, 0x10) 2018/06/03 08:32:18 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbde1]}, 0x10) 2018/06/03 08:32:18 executing program 4: bpf$MAP_CREATE(0x260, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:18 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc0ffffff00000000]}, 0x10) 2018/06/03 08:32:18 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xbb}, 0x0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x3, 0x2, 0x8000, 0x7fff, 0x3f, 0x8153, 0x8, 0x20, 0x0}, &(0x7f0000000280)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e20, 0x99f, @remote={0xfe, 0x80, [], 0xbb}, 0x4}}, 0x3, 0x1, 0x8, 0xa78}, 0x98) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000400)=0x8, 0x4) getsockopt$nfc_llcp(r2, 0x118, 0x1, &(0x7f0000000080)=""/245, 0xf5) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r1}) 2018/06/03 08:32:18 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:19 executing program 4: bpf$MAP_CREATE(0x230, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1126.203005] binder: 2024:2027 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:19 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:19 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbf0d]}, 0x10) 2018/06/03 08:32:19 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:19 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x11000000]}, 0x10) 2018/06/03 08:32:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x85e70000]}, 0x10) [ 1126.253675] binder_alloc: binder_alloc_mmap_handler: 2024 20001000-20004000 already mapped failed -16 [ 1126.291275] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:19 executing program 4: bpf$MAP_CREATE(0x2002000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1126.332263] binder: 2024:2027 ioctl 40046207 0 returned -16 2018/06/03 08:32:19 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1126.422320] IPVS: ftp: loaded support on port[0] = 21 [ 1126.457883] binder: send failed reply for transaction 1143 to 2024:2027 [ 1126.464762] binder: undelivered transaction 1144, process died. [ 1126.515218] binder: undelivered TRANSACTION_ERROR: 29189 [ 1126.611379] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:19 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x2001e, r2, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x210500) timerfd_gettime(r3, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11633a40f4a9f4345c4057c15b69189b1386c90dbe5648129737172862f9164821e791223a4e907cf779d22ae136bcbb984ba97187aba3cbab84f4fede743bbc2cc02822fa0ede0e388d4800000000000000000000000000000000", @ANYRES64=0x0, @ANYBLOB], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:19 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf315]}, 0x10) 2018/06/03 08:32:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xc55c]}, 0x10) 2018/06/03 08:32:19 executing program 4: bpf$MAP_CREATE(0xce020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:19 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:19 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdd3f0000]}, 0x10) 2018/06/03 08:32:19 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={"676f653000e45ea897c4cc66b30e00", 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r2}) r3 = gettid() r4 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r3, r4, 0x3c, &(0x7f0000000000)={0x7, 0x4000000000, 0xf70, 0x80000001}) r5 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x2, 0x7e) ioctl$GIO_SCRNMAP(r5, 0x4b40, &(0x7f0000000040)=""/130) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r2}) 2018/06/03 08:32:19 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1127.057222] binder: 2089:2094 unknown command 1077568273 [ 1127.069404] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:19 executing program 4: bpf$MAP_CREATE(0x248, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1127.143851] binder: 2089:2094 ioctl c0306201 20007000 returned -22 2018/06/03 08:32:19 executing program 4: bpf$MAP_CREATE(0x5800000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:20 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:20 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbd28000000000000]}, 0x10) 2018/06/03 08:32:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xa7ed]}, 0x10) [ 1127.187816] binder_alloc: 2089: binder_alloc_buf, no vma [ 1127.193561] binder: 2089:2094 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:20 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x757f0000]}, 0x10) [ 1127.280828] binder: 2089:2112 unknown command 1077568273 [ 1127.303515] IPVS: ftp: loaded support on port[0] = 21 [ 1127.304329] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:20 executing program 4: bpf$MAP_CREATE(0x3c000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1127.342558] binder: 2089:2112 ioctl c0306201 20007000 returned -22 [ 1127.358763] binder: 2089:2094 ioctl 40046207 0 returned -16 2018/06/03 08:32:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:20 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x8, 0x1) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x40, 0x0, 0x5, 0x20, 0x10, "c232061f84eb61b4a15730dbe097ef6b39cd85f6f59839742583cb6354a63e1da6fb2f61556855a7fab397862524cc0ea461451f73e8ad50e8562cec1a53ae65", "0990a65d4ef9b2de7d86d6e9a7b9df6496be74923958b4941108268ab528e5ed1e6e26e3917bd1025301402d546c827b6537119d09ba5b234e6d14b3dbc45c97", "1170aafc8c66088cad8e1764c41c33b8ecd85ecb5bc678c322bdab788ccb155b", [0x9, 0x3]}) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "3d7e192a5fd20eb9ec329401549a2b4889ef82e553ee65966ea67940960b3b2cd173dbf4e1d4a9a1c531a71446"}, 0x31) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x10000) 2018/06/03 08:32:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x80ffffff00000000]}, 0x10) 2018/06/03 08:32:20 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x153a0000]}, 0x10) 2018/06/03 08:32:20 executing program 4: bpf$MAP_CREATE(0x66020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:20 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf5db0000]}, 0x10) 2018/06/03 08:32:20 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x1) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000400)="5ae2cb629d800c66bb2360e5a5cf9f000551292d5f1949403c9b61a1169f19a2d6681958111b6798f7ae1737660fbba4f5edaf88e88e11078fd085d3ebb87d717453af28f5ab06a8f4a0", 0x4a) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x1ff, @empty, 0x800}}, 0x1, 0x1f, 0x6, 0x3ff, 0x6d}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x2}, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) 2018/06/03 08:32:20 executing program 4: bpf$MAP_CREATE(0x7802000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1127.985508] binder: 2144:2147 ioctl c0306201 20007000 returned -14 [ 1127.988838] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:20 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x8d62]}, 0x10) [ 1128.065832] binder_alloc: binder_alloc_mmap_handler: 2144 20001000-20004000 already mapped failed -16 [ 1128.092186] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:20 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4d34]}, 0x10) 2018/06/03 08:32:20 executing program 4: bpf$MAP_CREATE(0x5800, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1128.122592] binder: 2144:2164 ioctl 40046207 0 returned -16 [ 1128.151735] binder_alloc: 2144: binder_alloc_buf, no vma [ 1128.157335] binder: 2144:2176 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:21 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2dd6]}, 0x10) 2018/06/03 08:32:21 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1128.181228] binder_alloc: 2144: binder_alloc_buf, no vma [ 1128.186868] binder: 2144:2147 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xed4d]}, 0x10) [ 1128.248393] IPVS: ftp: loaded support on port[0] = 21 [ 1128.314608] binder: 2144:2176 ioctl c0306201 20007000 returned -14 [ 1128.401740] binder: undelivered TRANSACTION_ERROR: 29189 [ 1128.407912] binder: release 2144:2147 transaction 1148 out, still active [ 1128.426789] binder: send failed reply for transaction 1148, target dead [ 1128.433676] binder: undelivered transaction 1149, process died. 2018/06/03 08:32:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="040024917fd36f1f77f5ac00000000000034b3fe4d66d1d7c18de7e32998083046fa3171f5d8f1a00844940a70ac1cba0742a22ba3fd19f2f65dcd228e5c836f1f39ab709bc0fc70febedf244b3f93f71951703877872b7ee2f5b063bb4576bedf13c2572f2e3d5256387434008dbbf26eb58cd8558007fd73e3f68df8b88bda5a4346b64c57b606addcb718ffa4e29e2ac77a73daace4f800f1767944ab4d59a87b8446487bf3c11452a5d659e9bf264015c1acb932575bbfcc28c355099728"], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:21 executing program 4: bpf$MAP_CREATE(0x8e01, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:21 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4b6d]}, 0x10) 2018/06/03 08:32:21 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x2d, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:21 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1765]}, 0x10) 2018/06/03 08:32:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x8d62000000000000]}, 0x10) 2018/06/03 08:32:21 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:21 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1128.894287] binder: 2224:2225 transaction failed 29201/-22, size 3461183619318910401--6849455009576125882 line 2971 [ 1128.914724] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:21 executing program 4: bpf$MAP_CREATE(0x2000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x15f3]}, 0x10) 2018/06/03 08:32:21 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xfd56]}, 0x10) [ 1128.953304] binder: 2224:2225 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:21 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdbf0000]}, 0x10) [ 1129.004393] binder_alloc: binder_alloc_mmap_handler: 2224 20001000-20004000 already mapped failed -16 2018/06/03 08:32:21 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:21 executing program 4: bpf$MAP_CREATE(0x32, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1129.073273] binder: BINDER_SET_CONTEXT_MGR already set [ 1129.100570] binder: 2224:2225 ioctl 40046207 0 returned -16 2018/06/03 08:32:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x7db3]}, 0x10) [ 1129.245601] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x81f, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="116383e3", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="070000003399fc03fc3f54ea607726f63bb95b54ce6e964e27f7401000000000f6b2ab517bfc2d0200000000000000f7048d6e72ce0129e9d946380922de5df3039012c34bf866c10bcf5f896aa1ab6718a64d678aaf3a8aec0df1d71f5425322cb15e26a79a5d8b745c01dc3d0d81544cdd52c24da097a7bb895a4610e961f1fc36b062689e99f7e02c1a895b367db738b8c8922b0862d91e934883a3d9113b2462af289ca032eff5aee461b27eec0877957ef3888a500a7f3a41244b9fb0aefffccae76a333ed62ba80abcf756b48f3031bca468d27ace5c04f29774f16ab26091937223ab66cc6a53c068ca1f"], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:22 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf5220000]}, 0x10) 2018/06/03 08:32:22 executing program 4: bpf$MAP_CREATE(0x51, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:22 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd5c40000]}, 0x10) 2018/06/03 08:32:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x25a20000]}, 0x10) 2018/06/03 08:32:22 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={"677265300000008000", 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:22 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1129.812903] IPVS: ftp: loaded support on port[0] = 21 [ 1129.824155] binder: 2291:2292 unknown command -477928687 2018/06/03 08:32:22 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:22 executing program 4: bpf$MAP_CREATE(0x7e01000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1129.853924] binder: 2291:2292 ioctl c0306201 20007000 returned -22 2018/06/03 08:32:22 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x60d]}, 0x10) 2018/06/03 08:32:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x2d1d]}, 0x10) 2018/06/03 08:32:22 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe5730000]}, 0x10) [ 1129.916810] binder_alloc: 2291: binder_alloc_buf, no vma [ 1129.922408] binder: 2291:2292 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:22 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1130.024192] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:22 executing program 4: bpf$MAP_CREATE(0x3a02000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xfd56]}, 0x10) [ 1130.082726] binder: BINDER_SET_CONTEXT_MGR already set [ 1130.083862] binder: 2291:2323 unknown command -477928687 [ 1130.115619] binder: 2291:2322 ioctl 40046207 0 returned -16 [ 1130.160143] binder: 2291:2323 ioctl c0306201 20007000 returned -22 2018/06/03 08:32:24 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffff, 0x200) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000040)={0x2, 0x1ff, 0x3, 0x8001}) 2018/06/03 08:32:24 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdbf]}, 0x10) 2018/06/03 08:32:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x5568000000000000]}, 0x10) 2018/06/03 08:32:24 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4]}, 0x10) 2018/06/03 08:32:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91ffffff00000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:24 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:24 executing program 4: bpf$MAP_CREATE(0x4801, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000180)={'filter\x00'}, &(0x7f00000002c0)=0x44) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000000140)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1163484000000000000000000000000000000000000000001100000000000000000000000000db82eb63c3057667000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="0080000000000000"], 0x1, 0x0, &(0x7f0000000280)="9c"}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x8001, 0x10001, 0x0, 0x7}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r4, 0x200}, 0x8) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000300)={0x81, 0x1, 0x7, 0x100000000, 0x10000000000000}, 0xc) 2018/06/03 08:32:24 executing program 4: bpf$MAP_CREATE(0x1c00, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:24 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x852e]}, 0x10) [ 1131.402079] binder: 2353:2355 transaction failed 29201/-28, size 415285453812072448-26486 line 2971 [ 1131.431777] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:24 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x153a000000000000]}, 0x10) 2018/06/03 08:32:24 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:24 executing program 4: bpf$MAP_CREATE(0x3002, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1131.523784] binder_alloc: binder_alloc_mmap_handler: 2353 20001000-20004000 already mapped failed -16 [ 1131.562346] binder_alloc: 2353: binder_alloc_buf, no vma [ 1131.568113] binder: 2353:2373 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:24 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x8d62]}, 0x10) [ 1131.604607] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x1765]}, 0x10) [ 1131.684843] binder: 2353:2355 ioctl 40046207 0 returned -16 [ 1131.766474] IPVS: ftp: loaded support on port[0] = 21 [ 1131.797413] binder: send failed reply for transaction 1157 to 2353:2355 [ 1131.815262] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:24 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:24 executing program 4: bpf$MAP_CREATE(0x2e00, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:24 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xffffffff00000000]}, 0x10) 2018/06/03 08:32:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:24 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xfd56]}, 0x10) 2018/06/03 08:32:25 executing program 5: r0 = socket$kcm(0x29, 0x8000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x8005, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@empty, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000000)=0x2) 2018/06/03 08:32:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x119d]}, 0x10) [ 1132.255699] binder: 2413:2414 transaction failed 29189/-22, size 0-0 line 2856 [ 1132.265921] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:25 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:25 executing program 4: bpf$MAP_CREATE(0x58, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:25 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9695]}, 0x10) [ 1132.298342] binder: 2413:2414 ioctl c0306201 20007000 returned -14 [ 1132.333440] binder_alloc: binder_alloc_mmap_handler: 2413 20001000-20004000 already mapped failed -16 2018/06/03 08:32:25 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1d6e0000]}, 0x10) 2018/06/03 08:32:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xd50b000000000000]}, 0x10) [ 1132.362160] binder: 2413:2428 transaction failed 29189/-22, size 0-0 line 2856 [ 1132.426206] binder: 2413:2428 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:25 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:25 executing program 4: bpf$MAP_CREATE(0x4800000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1132.488805] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:25 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xad79]}, 0x10) [ 1132.555190] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:26 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x101000) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000040)={0x2}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x37, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000001c0)={0x1}) nanosleep(&(0x7f0000000240)={0x0, 0x989680}, &(0x7f0000000280)) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r5 = request_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)='\x00', 0xfffffffffffffffa) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000400)="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", 0x1000, r5) 2018/06/03 08:32:26 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000006, 0x1) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="7213af34534b831b2f0dec3c3ee1baa1b3d5a24e", 0x14}, {&(0x7f0000000100)="c91ececf9cc15fdac89b928069c73d5e1a167732402109b1efca098bc8510ad34eb0010e00bd36f313d3dc0cfb32a0841cfad8a88c135d90cf6659c9da3dc232b7c2d48077699e65f9e5413e4da143409823acef4238b47802057439c6761cec6320449e5c3a480011f8959473385ba7acbcdfdf2d1a60ecc5dcd86b", 0x7c}, {&(0x7f0000000380)="48abf9d88bc53a3e4d93d8b2fda8ea9834852afb82bf59c88c2339eb08a636ed92ace02dbb259072a9e21f7bb6de1db7a36c46cd1ed78dcb7521c3dabe14739d0bf53f7701090d0fe1a394a083e5d3120b9fad8b0f15bf9490fb6f03d8ebc0f0d5a530d9e4b7bcc3c1dd440abbad4914e12c632297878d560740ac4ae66b0065928fba3d3a50bf93c8a6ba0a4c50220ad80cb7530bdbc073e115e5482f4849fcf245c1c6b8c0102483bc2fdcd381204744925d9ebb804842e28193c482db09c5190bb85bd1035196d055e784f68afb96e12b05329131856a0112566497a2d0e01466ecfef0174303", 0xe8}], 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x2dd6]}, 0x10) 2018/06/03 08:32:26 executing program 4: bpf$MAP_CREATE(0x7e020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:26 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x853d]}, 0x10) 2018/06/03 08:32:26 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xca9d]}, 0x10) 2018/06/03 08:32:26 executing program 4: bpf$MAP_CREATE(0x18020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:26 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xdd3f0000]}, 0x10) [ 1133.769698] IPVS: ftp: loaded support on port[0] = 21 [ 1133.784626] binder: 2469:2470 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:26 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x34000]}, 0x10) 2018/06/03 08:32:26 executing program 4: bpf$MAP_CREATE(0x182, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1133.843696] binder_alloc: binder_alloc_mmap_handler: 2469 20001000-20004000 already mapped failed -16 2018/06/03 08:32:26 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1133.918671] binder: BINDER_SET_CONTEXT_MGR already set [ 1133.938337] binder: 2469:2499 ioctl 40046207 0 returned -16 2018/06/03 08:32:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x90cd]}, 0x10) 2018/06/03 08:32:26 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x40030000000000]}, 0x10) [ 1133.967690] binder_alloc: 2469: binder_alloc_buf, no vma [ 1133.973271] binder: 2469:2470 transaction failed 29189/-3, size 0-0 line 2971 [ 1134.038257] binder_alloc: 2469: binder_alloc_buf, no vma [ 1134.043838] binder: 2469:2499 transaction failed 29189/-3, size 0-0 line 2971 [ 1134.106546] binder: 2469:2470 ioctl c0306201 20007000 returned -14 [ 1134.122728] IPVS: ftp: loaded support on port[0] = 21 [ 1134.178430] binder: undelivered TRANSACTION_ERROR: 29189 [ 1134.184670] binder: release 2469:2470 transaction 1165 out, still active [ 1134.210226] binder: send failed reply for transaction 1165, target dead [ 1134.217111] binder: undelivered transaction 1166, process died. 2018/06/03 08:32:27 executing program 5: r0 = socket$kcm(0x29, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) r4 = fcntl$getown(r2, 0x9) ptrace$getregs(0xe, r4, 0x800, &(0x7f0000000000)=""/131) 2018/06/03 08:32:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:27 executing program 4: bpf$MAP_CREATE(0x266, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:27 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:27 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x79ad]}, 0x10) 2018/06/03 08:32:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xeda7000000000000]}, 0x10) 2018/06/03 08:32:27 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x85e70000]}, 0x10) 2018/06/03 08:32:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x10000) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000080)=[@decrefs={0x40046307, 0x3}], 0xe3, 0x0, &(0x7f0000000100)="8f4e64e3052ca2e3298596d89a6fb53f6e38f13adf78b6e83a4ba3872a56c9f8fe0a080b7db765ea11824f56af27d5afaa73456984d7a77e40ee3414755d69f3957b3879b3fb16d677faf536cb0b17e71f78cd724e921e5ef9ddd76d35f7ea86a4eb62d55e157e364b50f43a6363330e1af3c8cd8242f6fd5411651a890736a3d2677254326b21a3360b817c5037113ff1d4a26ff3facb44c9144af9305a830e5011860443ac45cf98abef919606d731105c119d26e768bd3f90778af69a5999d85813aa49d3012df3e444c9ade9e401690d3e2e7d643130384db49048a130a73a2aa7"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:27 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:27 executing program 4: bpf$MAP_CREATE(0x170, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1134.589474] binder: 2546:2549 transaction failed 29189/-22, size 0-0 line 2856 [ 1134.596679] IPVS: ftp: loaded support on port[0] = 21 [ 1134.625226] binder: 2546:2549 transaction failed 29189/-22, size 0-0 line 2856 2018/06/03 08:32:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xbd28000000000000]}, 0x10) [ 1134.675131] binder: 2546:2549 transaction failed 29189/-22, size 0-0 line 2856 2018/06/03 08:32:27 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x7db30000]}, 0x10) 2018/06/03 08:32:27 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x8d620000]}, 0x10) 2018/06/03 08:32:27 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1134.717243] binder: 2546:2561 transaction failed 29189/-22, size 0-0 line 2856 2018/06/03 08:32:27 executing program 4: bpf$MAP_CREATE(0x34020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) [ 1134.910716] binder: 2586:2587 ioctl c0306201 20007000 returned -14 [ 1134.935189] IPVS: ftp: loaded support on port[0] = 21 [ 1134.963821] binder_alloc: binder_alloc_mmap_handler: 2586 20001000-20004000 already mapped failed -16 [ 1134.992984] binder: BINDER_SET_CONTEXT_MGR already set [ 1135.009148] binder: 2586:2587 ioctl 40046207 0 returned -16 [ 1135.020138] binder_alloc: 2586: binder_alloc_buf, no vma [ 1135.025731] binder: 2586:2592 transaction failed 29189/-3, size 0-0 line 2971 [ 1135.047254] binder: 2586:2592 ioctl c0306201 20007000 returned -14 [ 1135.078124] binder: undelivered TRANSACTION_ERROR: 29189 [ 1135.084528] binder: release 2586:2587 transaction 1174 out, still active [ 1135.101504] binder: send failed reply for transaction 1174, target dead [ 1135.108365] binder: undelivered transaction 1175, process died. 2018/06/03 08:32:28 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)=0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000140)={0x2, 0x80000000, 0x0, 0x5}, 0x8) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x2b, &(0x7f0000000380), &(0x7f0000000580)=0x4) capset(&(0x7f00000000c0)={0x20071026, r5}, &(0x7f0000000100)={0x6f5, 0xf3, 0x36328000000, 0xfffffffffffffff8, 0x2, 0x4}) ioctl$KVM_PPC_GET_SMMU_INFO(r4, 0x8250aea6, &(0x7f0000000000)=""/112) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:28 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4ded0000]}, 0x10) 2018/06/03 08:32:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:28 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x1d6e000000000000]}, 0x10) 2018/06/03 08:32:28 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45b90000]}, 0x10) 2018/06/03 08:32:28 executing program 4: bpf$MAP_CREATE(0xff030000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:28 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1135.505333] IPVS: ftp: loaded support on port[0] = 21 [ 1135.512812] binder: 2610:2611 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:28 executing program 4: bpf$MAP_CREATE(0xba000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xa000000]}, 0x10) 2018/06/03 08:32:28 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdc05]}, 0x10) 2018/06/03 08:32:28 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbd280000]}, 0x10) 2018/06/03 08:32:28 executing program 4: bpf$MAP_CREATE(0xf2030000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:28 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xd50b0000]}, 0x10) [ 1135.802648] IPVS: ftp: loaded support on port[0] = 21 [ 1136.296725] binder_alloc: binder_alloc_mmap_handler: 2610 20001000-20004000 already mapped failed -16 [ 1136.309714] binder: BINDER_SET_CONTEXT_MGR already set [ 1136.315065] binder: 2610:2660 ioctl 40046207 0 returned -16 [ 1136.315883] binder_alloc: 2610: binder_alloc_buf, no vma [ 1136.326325] binder: 2610:2661 transaction failed 29189/-3, size 0-0 line 2971 [ 1136.334166] binder: 2610:2661 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:29 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xcd90]}, 0x10) 2018/06/03 08:32:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xc4b, 0x6, 0x200, 0x7, 0x81}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r1, 0x8}, &(0x7f0000000140)=0x8) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:29 executing program 4: bpf$MAP_CREATE(0x3c6, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:29 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x95960000]}, 0x10) 2018/06/03 08:32:29 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xca9d]}, 0x10) 2018/06/03 08:32:29 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000001c0)={@loopback, @remote, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000280)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x77, r2}) setsockopt$inet6_dccp_buf(r1, 0x21, 0x80, &(0x7f0000000180), 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xa000, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000040)={0xb2, {{0x2, 0x4e24, @rand_addr=0xff}}}, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={'ip_vti0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) [ 1136.361143] binder: undelivered TRANSACTION_ERROR: 29189 [ 1136.368118] binder: send failed reply for transaction 1178 to 2610:2611 [ 1136.376726] binder: undelivered TRANSACTION_COMPLETE [ 1136.381981] binder: undelivered TRANSACTION_ERROR: 29189 [ 1136.424404] binder: 2665:2666 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:29 executing program 4: bpf$MAP_CREATE(0x2600000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:29 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1136.468319] binder_alloc: binder_alloc_mmap_handler: 2665 20001000-20004000 already mapped failed -16 [ 1136.469725] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x7f75]}, 0x10) [ 1136.536375] binder: BINDER_SET_CONTEXT_MGR already set [ 1136.542226] binder_alloc: 2665: binder_alloc_buf, no vma [ 1136.547770] binder: 2665:2682 transaction failed 29189/-3, size 0-0 line 2971 [ 1136.587401] binder: 2665:2666 ioctl 40046207 0 returned -16 [ 1136.628133] binder: 2665:2682 ioctl c0306201 20007000 returned -14 [ 1136.709640] IPVS: ftp: loaded support on port[0] = 21 [ 1136.712095] binder: undelivered TRANSACTION_ERROR: 29189 [ 1136.726290] binder: release 2665:2666 transaction 1181 out, still active [ 1136.741100] binder: send failed reply for transaction 1181, target dead [ 1136.747960] binder: undelivered transaction 1182, process died. 2018/06/03 08:32:30 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf5db]}, 0x10) 2018/06/03 08:32:30 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x628d]}, 0x10) 2018/06/03 08:32:30 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:30 executing program 4: bpf$MAP_CREATE(0x2402000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x79ad]}, 0x10) 2018/06/03 08:32:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="00800000"], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:30 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0xc}, 0x0, r3}) [ 1137.311390] binder: 2708:2709 ioctl 4c07 0 returned -22 [ 1137.347930] binder: 2708:2709 got transaction to context manager from process owning it 2018/06/03 08:32:30 executing program 4: bpf$MAP_CREATE(0x4e02000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:30 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1137.356173] binder: 2708:2709 transaction failed 29201/-22, size 0-0 line 2847 [ 1137.377202] IPVS: ftp: loaded support on port[0] = 21 [ 1137.391967] binder: 2708:2709 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x5135]}, 0x10) 2018/06/03 08:32:30 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2]}, 0x10) 2018/06/03 08:32:30 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf315]}, 0x10) [ 1137.457100] binder: 2708:2732 ioctl 4c07 0 returned -22 [ 1137.504257] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:30 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:30 executing program 4: bpf$MAP_CREATE(0x900, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1137.547815] binder_alloc: binder_alloc_mmap_handler: 2708 20001000-20004000 already mapped failed -16 2018/06/03 08:32:30 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5568000000000000]}, 0x10) [ 1137.596162] binder_alloc: 2708: binder_alloc_buf, no vma [ 1137.601733] binder: 2708:2709 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:30 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1000000]}, 0x10) 2018/06/03 08:32:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x58b000000000000]}, 0x10) 2018/06/03 08:32:30 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1137.651914] binder: 2708:2733 ioctl 40046207 0 returned -16 [ 1137.678409] binder: 2708:2709 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:30 executing program 4: bpf$MAP_CREATE(0x70020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1137.713065] binder_alloc: 2708: binder_alloc_buf, no vma [ 1137.718655] binder: 2708:2756 transaction failed 29189/-3, size 0-0 line 2971 [ 1137.737889] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:30 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1137.880885] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) r3 = accept4(r0, &(0x7f0000000100)=@generic, &(0x7f0000000000)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x48000000000, 0x6, 0x80000000, 0x36e8, 0x27}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000380)={r4, 0xf2, "ec7b477c99397cfbf7c95fe8bc5b943fbbf7c94f45814b7813606d1e8668edf8674a2f8d12f06022abe3a5e4c3dd7bb412dc4d21a85f6c63873a976a51fd1a44155695a3f0ad068f1819e4f535dcb89ed7132086c6ec042757f1f2f9732aea4db3e3d4114654d5600867fe8f521720dfead1221af28f6ddeec028cf2414a2a5725008285ee57ba1bf618f9da2dfdd2fc97104249fd39c7656735ab66dff82785ee71adb885079dffa6107f231ad94fff0f8b8ccb5f706e0fd15f8b39b622c039cbe6bde3150597371ef8e5cd22514961231c2301a0cb46fac179ee569fb6393ff02a7363758300b1c2324226e96da499126c"}, &(0x7f00000001c0)=0xfa) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000100), 0x206, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:31 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9dca000000000000]}, 0x10) 2018/06/03 08:32:31 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:31 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8915, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) r4 = request_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)='-\aeth1^\'#+)\x00', 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, r4, r5) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xdbf000000000000]}, 0x10) 2018/06/03 08:32:31 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x7db3]}, 0x10) 2018/06/03 08:32:31 executing program 4: bpf$MAP_CREATE(0x6800, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1138.282747] IPVS: ftp: loaded support on port[0] = 21 [ 1138.285740] binder: 2792:2803 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:31 executing program 4: bpf$MAP_CREATE(0x3200, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:31 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1138.368420] binder: 2792:2803 unknown command 0 2018/06/03 08:32:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xb5ad0000]}, 0x10) 2018/06/03 08:32:31 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x8d62]}, 0x10) 2018/06/03 08:32:31 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd50b000000000000]}, 0x10) [ 1138.401561] binder: 2792:2803 ioctl c0306201 20000340 returned -22 2018/06/03 08:32:31 executing program 4: bpf$MAP_CREATE(0x8801, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:31 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1138.472781] binder_alloc: binder_alloc_mmap_handler: 2792 20001000-20004000 already mapped failed -16 2018/06/03 08:32:31 executing program 4: bpf$MAP_CREATE(0x4601000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1138.573187] binder: BINDER_SET_CONTEXT_MGR already set [ 1138.595555] binder: 2792:2817 ioctl 40046207 0 returned -16 [ 1138.657202] binder_alloc: 2792: binder_alloc_buf, no vma [ 1138.662844] binder: 2792:2818 transaction failed 29189/-3, size 0-0 line 2971 [ 1138.690589] IPVS: ftp: loaded support on port[0] = 21 [ 1138.732314] binder: 2792:2818 ioctl c0306201 20007000 returned -14 [ 1138.771227] binder: 2792:2817 unknown command 0 [ 1138.787049] binder: 2792:2817 ioctl c0306201 20000340 returned -22 [ 1138.829161] binder: undelivered TRANSACTION_ERROR: 29189 [ 1138.835228] binder: release 2792:2803 transaction 1189 out, still active [ 1138.842158] binder: undelivered TRANSACTION_COMPLETE [ 1138.879234] binder: send failed reply for transaction 1189, target dead 2018/06/03 08:32:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x8) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x82400, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0)) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(r0, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) read$eventfd(r4, &(0x7f0000000140), 0x8) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0xfffffffffffff23e, 0x100000001}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000400)={r5, @in6={{0xa, 0x4e24, 0x3, @empty, 0x401}}, [0x0, 0x8, 0x4, 0x7f, 0x8, 0x3ff, 0x6d, 0x6, 0x2, 0x100000000, 0x0, 0x400, 0x80000001, 0x5d6, 0x1]}, &(0x7f0000000500)=0x100) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11634840cb5af91dfc206c494a0713621181e7391b7d12c650afe11ccc6ec9876f8d8e0745cd3059df51f3bbb1dc6833edb4b8abfd35c2f2cebac74752c8abaa1b48283e6914754628aaa938f0140900fa1d33f69b6d71fe674aa872d96915d9b8ff30add4133a31d17e7bcebf1a744d119d5d798c4c8651cdf1d666b7fdf85c1fa6afe5e6f46eacdad01d15064f25d5e2135bf6aff6102eab1aecb2124095b2b467b5f25cd56cc1eeb0decc26d49c", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) readahead(r2, 0x1, 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0xffffffffffffff8e, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffffffffffffff], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:31 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote={0xfe, 0x80, [], 0xbb}, 0x6d, r3}) 2018/06/03 08:32:31 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5cc5]}, 0x10) 2018/06/03 08:32:31 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xf5db000000000000]}, 0x10) 2018/06/03 08:32:31 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x85e7000000000000]}, 0x10) 2018/06/03 08:32:31 executing program 4: bpf$MAP_CREATE(0xf0030000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1139.137077] binder: 2848:2850 got transaction to invalid handle [ 1139.143254] binder: 2848:2850 transaction failed 29201/-22, size -4903485549560410811--6072905166646354767 line 2856 [ 1139.148478] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:31 executing program 4: bpf$MAP_CREATE(0x24000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:32 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1139.185217] binder: 2848:2850 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x15f3000000000000]}, 0x10) 2018/06/03 08:32:32 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdd3f000000000000]}, 0x10) 2018/06/03 08:32:32 executing program 4: bpf$MAP_CREATE(0x30020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1139.267408] binder_alloc: binder_alloc_mmap_handler: 2848 20001000-20004000 already mapped failed -16 2018/06/03 08:32:32 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:32 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x55680000]}, 0x10) [ 1139.322200] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x65170000]}, 0x10) [ 1139.375239] binder: 2848:2882 ioctl 40046207 0 returned -16 [ 1139.399632] binder: 2848:2850 got transaction to invalid handle [ 1139.405863] binder: 2848:2850 transaction failed 29201/-22, size -4903485549560410811--6072905166646354767 line 2856 [ 1139.456184] binder: 2848:2850 ioctl c0306201 20007000 returned -14 [ 1139.526772] IPVS: ftp: loaded support on port[0] = 21 [ 1139.538591] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/03 08:32:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x80, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000140)={{0x2, 0x3}, 0xa}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100000, 0x80) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x87b8) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="0000005becdab0faf7b9cf6cade10000000000"], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xdc05]}, 0x10) 2018/06/03 08:32:32 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xcd90]}, 0x10) 2018/06/03 08:32:32 executing program 4: bpf$MAP_CREATE(0x1e02000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:32 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ppoll(&(0x7f0000000000)=[{r1, 0xa2}, {r1, 0x4}, {r1, 0x2000}, {r2, 0x2000}], 0x4, &(0x7f0000000040), &(0x7f0000000080)={0x10000}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:32 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:32 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2d1d0000]}, 0x10) [ 1140.046595] binder: 2919:2921 transaction failed 29201/-28, size 0-0 line 2971 2018/06/03 08:32:32 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:32 executing program 4: bpf$MAP_CREATE(0x8602000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:32 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3551000000000000]}, 0x10) 2018/06/03 08:32:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xf401]}, 0x10) [ 1140.091461] IPVS: ftp: loaded support on port[0] = 21 [ 1140.106010] binder: 2919:2921 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:32 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdd3f]}, 0x10) [ 1140.168747] binder_alloc: binder_alloc_mmap_handler: 2919 20001000-20004000 already mapped failed -16 [ 1140.240131] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:33 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:33 executing program 4: bpf$MAP_CREATE(0x4a02000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe00000000000000]}, 0x10) [ 1140.264281] binder: 2919:2921 ioctl 40046207 0 returned -16 [ 1140.293134] binder_alloc: 2919: binder_alloc_buf, no vma [ 1140.298779] binder: 2919:2934 transaction failed 29189/-3, size 0-0 line 2971 [ 1140.360093] binder: 2919:2934 ioctl c0306201 20007000 returned -14 [ 1140.414768] IPVS: ftp: loaded support on port[0] = 21 [ 1140.475156] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x208041, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000100)={{0x0, 0x2, 0x1, 0x1, 0x81}, 0x5c, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="116348617176d2bf400000000002d48ab06c51f8945384068b0defb67f74f0c1abebccae24c734b1ad61bd", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x55680000]}, 0x10) 2018/06/03 08:32:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:33 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair(0x8, 0x80005, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000040)={0x80000001, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:32:33 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5900000000000000]}, 0x10) 2018/06/03 08:32:33 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:33 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x757f]}, 0x10) 2018/06/03 08:32:33 executing program 4: bpf$MAP_CREATE(0xc00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:33 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1140.959154] binder: 2978:2979 unknown command 1632133905 [ 1140.991389] binder: 2978:2979 ioctl c0306201 20007000 returned -22 [ 1140.999631] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:33 executing program 4: bpf$MAP_CREATE(0xbe03, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1141.038495] binder: 2978:2979 transaction failed 29189/-22, size 0-0 line 2856 2018/06/03 08:32:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x4500]}, 0x10) 2018/06/03 08:32:33 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:33 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x100000000000000]}, 0x10) [ 1141.098180] binder_alloc: binder_alloc_mmap_handler: 2978 20001000-20004000 already mapped failed -16 [ 1141.125699] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:33 executing program 4: bpf$MAP_CREATE(0x5001, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:33 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6d4b000000000000]}, 0x10) [ 1141.167215] binder: 2978:2979 ioctl 40046207 0 returned -16 2018/06/03 08:32:34 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1141.286580] binder: 2978:3002 unknown command 1632133905 [ 1141.316118] binder: 2978:3002 ioctl c0306201 20007000 returned -22 [ 1141.334942] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:34 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$update(0x2, r1, &(0x7f0000000400)="66b8a8596e90dccf8c91a5ce930ff6f8478f59429e47dfff07910218cbe7402c5b48d909aaded3e8a087e7bb30121313f9c5c3e9188db1b1a113582dc9534fddeab5cecd6d19b59dd7c28f2283d43fd7b5201b8c056aafc6ece1f612ebe6122eaf2417cdebf4467e2810320a1882d570c3f3889a2fa3ab1c2cef7d4365ca320f973dbb0dfb0425e5927cfdb1f04830c36c97e4dd93f95a2306e085ad19553e77a179bbf16d9f1f12d99a024b8da63c", 0xaf) ioctl(r0, 0x8912, &(0x7f0000000080)="0047682906f8a0698bb9adf717edf92e010407d82c99240300000000000000d02d4b104d8f957411fd8f52a17cccf741d8007f924c6ba01674588d1e080d862272f14e51780908a2b9546d3c7c87afce") unshare(0x60000000) r2 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x9f23, 0x141841) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e24, 0x9, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x5}, {0xa, 0x4e20, 0x5, @loopback={0x0, 0x1}, 0xa202}, 0x9, [0x6, 0x3, 0x1, 0x100000001, 0x8, 0x81, 0x1be5, 0x1]}, 0x5c) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000040)=0x1e) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001c80)={'team0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001cc0)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000001dc0)=0xe8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r6}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r6}) 2018/06/03 08:32:34 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc55c000000000000]}, 0x10) 2018/06/03 08:32:34 executing program 4: bpf$MAP_CREATE(0x2e020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x56fd]}, 0x10) 2018/06/03 08:32:34 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:34 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbde10000]}, 0x10) 2018/06/03 08:32:34 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1141.883930] binder: 3041:3042 ioctl c0306201 20007000 returned -14 [ 1141.912381] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:34 executing program 4: bpf$MAP_CREATE(0xc003, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1141.944450] binder_alloc: binder_alloc_mmap_handler: 3041 20001000-20004000 already mapped failed -16 2018/06/03 08:32:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xad79000000000000]}, 0x10) [ 1141.990620] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:34 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdc050000]}, 0x10) 2018/06/03 08:32:34 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1d6e]}, 0x10) 2018/06/03 08:32:34 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1142.013578] binder: 3041:3042 ioctl 40046207 0 returned -16 [ 1142.028492] binder_alloc: 3041: binder_alloc_buf, no vma [ 1142.035459] binder: 3041:3056 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:34 executing program 4: bpf$MAP_CREATE(0x7602, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:34 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1142.153713] IPVS: ftp: loaded support on port[0] = 21 [ 1142.228066] binder: 3041:3056 ioctl c0306201 20007000 returned -14 [ 1142.229517] binder_alloc: 3041: binder_alloc_buf, no vma [ 1142.240088] binder: 3041:3085 transaction failed 29189/-3, size 0-0 line 2971 [ 1142.360120] binder: undelivered TRANSACTION_ERROR: 29189 [ 1142.367595] binder: send failed reply for transaction 1200 to 3041:3042 [ 1142.374444] binder: undelivered transaction 1201, process died. [ 1142.391181] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="5b00000014a1c170b4023cfc1eb5667e2453817f2f85cce808000000ca4dbf4e69bbadf7fd12f59159a86f3654820f9e47eb860058594a04fea44d44a9d3fb0ee44a6aca3302f3f443f912d8d4bb0f287da5b45164921f396f815ec33dc47c163e2ba2b694d0e08b65ec59660c4fda7dd0a2847cf7057c82d6e476c2a8f2500718c4ec9f315e9be6339cd5c90a3754ec90a60d5d8425be00000000"], &(0x7f0000000000)=0x63) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x20, 0x204, 0xc8b1, 0x3, r1}, 0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x40, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000440)={r5, 0x6}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xffb4, 0x0, &(0x7f0000002000)}) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0xffffffffffffff9c, 0x6, 0x1, 0x800, &(0x7f0000000100)=[0x0, 0x0], 0x2}, 0x20) ioctl$TUNSETLINK(r6, 0x400454cd, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x80, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0xff94, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB], 0xfffffd66, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:35 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x8d620000]}, 0x10) 2018/06/03 08:32:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3a15]}, 0x10) 2018/06/03 08:32:35 executing program 4: bpf$MAP_CREATE(0x30, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:35 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9596]}, 0x10) 2018/06/03 08:32:35 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:35 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, r3}) [ 1142.833086] binder: 3107:3108 ioctl c0306201 20007000 returned -14 [ 1142.843742] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:35 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:35 executing program 4: bpf$MAP_CREATE(0x6600000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x6e1d]}, 0x10) [ 1142.878925] binder: 3107:3108 unknown command 0 [ 1142.897083] binder: 3107:3108 ioctl c0306201 20000180 returned -22 2018/06/03 08:32:35 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x757f]}, 0x10) 2018/06/03 08:32:35 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xcd900000]}, 0x10) 2018/06/03 08:32:35 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:35 executing program 4: bpf$MAP_CREATE(0x38020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1143.005476] binder_alloc: binder_alloc_mmap_handler: 3107 20001000-20004000 already mapped failed -16 [ 1143.011798] binder: BINDER_SET_CONTEXT_MGR already set [ 1143.043576] binder: 3107:3130 ioctl 40046207 0 returned -16 [ 1143.080710] binder_alloc: 3107: binder_alloc_buf, no vma [ 1143.086313] binder: 3107:3108 transaction failed 29189/-3, size 0-0 line 2971 [ 1143.110709] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x5c8]}, 0x10) [ 1143.130162] binder: 3107:3108 ioctl c0306201 20007000 returned -14 [ 1143.215092] binder: undelivered TRANSACTION_ERROR: 29189 [ 1143.231756] binder: send failed reply for transaction 1205 to 3107:3108 [ 1143.238644] binder: undelivered transaction 1206, process died. [ 1143.280130] binder: undelivered TRANSACTION_COMPLETE [ 1143.285774] binder: undelivered TRANSACTION_COMPLETE [ 1143.290933] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:37 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}}) 2018/06/03 08:32:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x35510000]}, 0x10) 2018/06/03 08:32:37 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x22f5]}, 0x10) 2018/06/03 08:32:37 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xb5ad000000000000]}, 0x10) 2018/06/03 08:32:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140b8997], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:37 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:37 executing program 4: bpf$MAP_CREATE(0xb6000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000080)={@dev, @loopback, 0x0}, &(0x7f0000000180)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={@empty, 0x11, r2}) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:37 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:37 executing program 4: bpf$MAP_CREATE(0x2c02, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1144.438786] IPVS: ftp: loaded support on port[0] = 21 [ 1144.448516] binder: 3168:3170 ioctl c0306201 20007000 returned -14 [ 1144.472376] binder: 3168:3170 transaction failed 29201/-28, size 4352-0 line 2971 2018/06/03 08:32:37 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6d4b]}, 0x10) 2018/06/03 08:32:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x34000]}, 0x10) [ 1144.541990] binder_alloc: binder_alloc_mmap_handler: 3168 20001000-20004000 already mapped failed -16 [ 1144.593119] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:37 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:37 executing program 4: bpf$MAP_CREATE(0x4a02, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1144.615545] binder_alloc: 3168: binder_alloc_buf, no vma [ 1144.621138] binder: 3168:3185 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:37 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbf0d]}, 0x10) 2018/06/03 08:32:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xdbf0000]}, 0x10) [ 1144.669555] binder: 3168:3181 ioctl 40046207 0 returned -16 [ 1144.695681] binder: 3168:3185 ioctl c0306201 20007000 returned -14 [ 1144.778303] IPVS: ftp: loaded support on port[0] = 21 [ 1144.824299] binder: undelivered TRANSACTION_ERROR: 29189 [ 1144.830595] binder: send failed reply for transaction 1209 to 3168:3170 [ 1144.848292] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:38 executing program 4: bpf$MAP_CREATE(0x7801, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:38 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9dca000000000000]}, 0x10) 2018/06/03 08:32:38 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xdbf]}, 0x10) 2018/06/03 08:32:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$ax25(0x3, 0x3, 0xc3, &(0x7f0000000080)) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000000)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) write(r2, &(0x7f0000000440)="28f94decd45d34ce2643eafcc858f1bb96096430dd557aef07c37052855556d5be301becdca997819a25ed7f8ebf516ee3a8850ecb0f1a91db04039724121fd8ba913be284bcb50ca4755b1c4051ec861f45d86fac67a42877005d19c7336e782b3f2c26c0b5eb92f779e55215fec11b28334cf919afde3e4ae29ded1dee813b7c4d7873b61b603bd2b3342ced3c43179e45fbe47f679f5a0e89a5f071f8c37c688ba0f2b89acea6ff94af", 0xab) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000380)={{0x9, 0x401}, 'port1\x00', 0x20, 0x20050, 0x2, 0x80, 0x5, 0xaaa, 0x8, 0x0, 0x0, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:38 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1d2d]}, 0x10) 2018/06/03 08:32:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff91], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:38 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x40020000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:38 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1145.356663] IPVS: ftp: loaded support on port[0] = 21 [ 1145.357869] binder: 3234:3236 ioctl 2289 20000000 returned -22 [ 1145.391323] binder: 3234:3236 ioctl c0306201 20007000 returned -14 [ 1145.420124] binder: 3234:3249 ioctl 2289 20000000 returned -22 [ 1145.451178] binder_alloc: 3234: binder_alloc_buf, no vma [ 1145.457760] binder: 3234:3252 transaction failed 29189/-3, size 0-0 line 2971 [ 1145.495205] binder: BINDER_SET_CONTEXT_MGR already set [ 1145.504124] binder: 3234:3249 ioctl 40046207 0 returned -16 [ 1145.520866] binder: 3234:3252 ioctl c0306201 20007000 returned -14 [ 1145.544499] binder_alloc: 3234: binder_alloc_buf, no vma [ 1145.550084] binder: 3234:3249 transaction failed 29189/-3, size 0-0 line 2971 [ 1145.567720] IPVS: ftp: loaded support on port[0] = 21 [ 1145.600447] binder: undelivered TRANSACTION_ERROR: 29189 [ 1145.606881] binder: release 3234:3236 transaction 1213 out, still active [ 1145.614466] binder: send failed reply for transaction 1213, target dead [ 1145.621284] binder: undelivered transaction 1214, process died. 2018/06/03 08:32:38 executing program 4: bpf$MAP_CREATE(0x3f4, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:38 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xa]}, 0x10) 2018/06/03 08:32:38 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:38 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xad79000000000000]}, 0x10) 2018/06/03 08:32:38 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1100000000000000]}, 0x10) 2018/06/03 08:32:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000100)=""/84, &(0x7f0000000000)=0x54) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:38 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) r4 = shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x5000) shmdt(r4) 2018/06/03 08:32:39 executing program 4: bpf$MAP_CREATE(0x152, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1146.243341] IPVS: ftp: loaded support on port[0] = 21 [ 1146.245338] binder: 3270:3271 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:39 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:39 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x8000000000000000]}, 0x10) 2018/06/03 08:32:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x85e7000000000000]}, 0x10) 2018/06/03 08:32:39 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe573000000000000]}, 0x10) 2018/06/03 08:32:39 executing program 4: bpf$MAP_CREATE(0xf, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1146.335321] binder_alloc: binder_alloc_mmap_handler: 3270 20001000-20004000 already mapped failed -16 2018/06/03 08:32:39 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1146.441254] binder_alloc: 3270: binder_alloc_buf, no vma [ 1146.441540] binder: BINDER_SET_CONTEXT_MGR already set [ 1146.446826] binder: 3270:3287 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x25a2000000000000]}, 0x10) 2018/06/03 08:32:39 executing program 4: bpf$MAP_CREATE(0x4000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:39 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbd280000]}, 0x10) [ 1146.520332] IPVS: ftp: loaded support on port[0] = 21 [ 1146.539964] binder: 3270:3271 ioctl 40046207 0 returned -16 2018/06/03 08:32:39 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:39 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xfd56000000000000]}, 0x10) 2018/06/03 08:32:39 executing program 4: bpf$MAP_CREATE(0x4e00, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1146.572423] binder: 3270:3287 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x4400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000500)={0x80, 0x2, 0x10000000000002f8}) lgetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=@known='security.capability\x00', &(0x7f0000000380)=""/89, 0x59) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) r4 = dup2(r0, r3) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r4, 0xc0305302, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x7, 0x2, 0x512}) [ 1146.715145] binder: undelivered TRANSACTION_ERROR: 29189 [ 1146.726102] binder: release 3270:3271 transaction 1218 out, still active [ 1146.775051] binder: send failed reply for transaction 1218, target dead [ 1146.781927] binder: undelivered transaction 1219, process died. [ 1146.818881] binder: 3336:3337 ioctl c0306201 20007000 returned -14 [ 1146.859715] binder: BINDER_SET_CONTEXT_MGR already set [ 1146.865249] binder: send failed reply for transaction 1222 to 3336:3337 [ 1146.872181] binder: undelivered transaction 1223, process died. [ 1146.879308] binder: 3336:3342 ioctl 40046207 0 returned -16 [ 1146.888276] binder: 3336:3337 transaction failed 29189/-22, size 0-0 line 2856 [ 1146.900663] binder: 3336:3337 ioctl c0306201 20007000 returned -14 [ 1146.924064] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:39 executing program 5: r0 = socket$kcm(0x29, 0x4, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2000, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x8001, 0x8}) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c9924097042e5a827b592ee7087092eebb01c2ae51b26f41b57eb40038300003aaf79eadc7f5987fc8f9cd62b630a46d76b79f939678d7bd5b3212714acb5764f4da9138e2a37d2648986433f300c72b63c490a51863d9e8e004ac6f663fd01038f5ebda2fa93ae3830fcb532f03f85cf02a690") r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:32:39 executing program 4: bpf$MAP_CREATE(0x7e02, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1802000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="5fc155afe00897060a3762db626e8e20d6650fdb0bae7a6b89685c9b09deaac6d7e37fbbbd5f8a88ad9864a28a5714882942d1469419e10a5b09d3c63317b956c1e98d6e21e268d608d668414401208b127f71c24537ca790da6826f55e54513796a19cbd3472b2806244ca3e5db0508324598b441d6a68ea62c94e826fcde111c596a32"], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:39 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x757f0000]}, 0x10) 2018/06/03 08:32:39 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:39 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xc0ffffff]}, 0x10) 2018/06/03 08:32:39 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc55c000000000000]}, 0x10) 2018/06/03 08:32:39 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1147.135956] binder: 3356:3357 ioctl c0306201 20007000 returned -14 [ 1147.198659] binder: 3356:3357 transaction failed 29201/-28, size 0-0 line 2971 [ 1147.242639] binder_alloc: binder_alloc_mmap_handler: 3356 20001000-20004000 already mapped failed -16 [ 1147.311434] binder_alloc: 3356: binder_alloc_buf, no vma [ 1147.316836] binder: BINDER_SET_CONTEXT_MGR already set [ 1147.317066] binder: 3356:3372 transaction failed 29189/-3, size 0-0 line 2971 [ 1147.336624] binder: 3356:3372 ioctl c0306201 20007000 returned -14 [ 1147.340042] binder: 3356:3357 ioctl 40046207 0 returned -16 [ 1147.370162] binder: undelivered TRANSACTION_ERROR: 29189 [ 1147.376233] binder: release 3356:3357 transaction 1226 out, still active [ 1147.383327] binder: send failed reply for transaction 1226, target dead 2018/06/03 08:32:40 executing program 4: bpf$MAP_CREATE(0x10, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:40 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x852e]}, 0x10) 2018/06/03 08:32:40 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x640, 0x0) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x6001}, @void, @arp=@ether_ipv4={0x1, 0x800, 0x6, 0x4, 0xace941c4fe190776, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xf}, @multicast2=0xe0000002, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=0xffffffff}}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20101, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x2c9d, @local={0xfe, 0x80, [], 0xaa}, 0x1}, @in={0x2, 0x4e20, @multicast2=0xe0000002}, @in6={0xa, 0x4e20, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @rand_addr=0xfff}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e22, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x686ee18c}], 0x94) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) 2018/06/03 08:32:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x65d00000]}, 0x10) 2018/06/03 08:32:40 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xadb5]}, 0x10) 2018/06/03 08:32:40 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840f6f0f841fd000000000055c7c15544459f01ed637fafc60000000000000000001100000000000000000000000000000000000044b253f6be", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:40 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1148.069115] binder: 3381:3382 ioctl c0306201 20007000 returned -14 [ 1148.078816] IPVS: ftp: loaded support on port[0] = 21 [ 1148.098966] binder: 3381:3382 got transaction to invalid handle [ 1148.105147] binder: 3381:3382 transaction failed 29201/-22, size 17-0 line 2856 2018/06/03 08:32:40 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x85e7]}, 0x10) 2018/06/03 08:32:40 executing program 4: bpf$MAP_CREATE(0x40000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:40 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd62d]}, 0x10) [ 1148.239822] binder_alloc: binder_alloc_mmap_handler: 3381 20001000-20004000 already mapped failed -16 [ 1148.268325] binder: BINDER_SET_CONTEXT_MGR already set [ 1148.300941] binder_alloc: 3381: binder_alloc_buf, no vma [ 1148.306549] binder: 3381:3412 transaction failed 29189/-3, size 0-0 line 2971 [ 1148.329428] IPVS: ftp: loaded support on port[0] = 21 [ 1148.330796] binder: 3381:3382 ioctl 40046207 0 returned -16 [ 1148.350612] binder: 3381:3412 ioctl c0306201 20007000 returned -14 [ 1148.382348] binder: undelivered TRANSACTION_ERROR: 29189 [ 1148.391975] binder: release 3381:3382 transaction 1230 out, still active [ 1148.414797] binder: send failed reply for transaction 1230, target dead 2018/06/03 08:32:41 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:41 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xed4d]}, 0x10) 2018/06/03 08:32:41 executing program 4: bpf$MAP_CREATE(0xff03, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x2e85]}, 0x10) 2018/06/03 08:32:41 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5c8]}, 0x10) 2018/06/03 08:32:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0xa, 0x20012, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="2ef9d7db8c0fce32509883c0fcd960e6ad342876744d4941491e07ffb404ed9b9409e40df5d44a21d5a8d747edf6bf31739880fb1f732eec52bdc33a1f05d1e73cfb9645947de3136b"], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:41 executing program 5: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r2}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r2}) 2018/06/03 08:32:41 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:41 executing program 4: bpf$MAP_CREATE(0xce02, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1148.962754] binder_alloc: 3432: binder_alloc_buf, no vma [ 1148.968337] binder: 3432:3434 transaction failed 29189/-3, size -7211102252931015095-2398963900493334932 line 2971 [ 1148.983687] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:41 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x15f3000000000000]}, 0x10) 2018/06/03 08:32:41 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x59]}, 0x10) 2018/06/03 08:32:41 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1149.058367] binder: 3432:3434 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:41 executing program 4: bpf$MAP_CREATE(0x6602, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:41 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4ded000000000000]}, 0x10) [ 1149.123250] binder: BINDER_SET_CONTEXT_MGR already set [ 1149.154371] binder_alloc: 3432: binder_alloc_buf, no vma [ 1149.159962] binder: 3432:3460 transaction failed 29189/-3, size -7211102252931015095-2398963900493334932 line 2971 2018/06/03 08:32:42 executing program 4: bpf$MAP_CREATE(0xc203000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1149.236310] binder_alloc: 3432: binder_alloc_buf, no vma [ 1149.241912] binder: 3432:3434 transaction failed 29189/-3, size 0-0 line 2971 [ 1149.305564] binder: 3432:3459 ioctl 40046207 0 returned -16 [ 1149.334446] binder: 3432:3460 ioctl c0306201 20007000 returned -14 [ 1149.383384] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:42 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:42 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc8050000]}, 0x10) 2018/06/03 08:32:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x5900000000000000]}, 0x10) 2018/06/03 08:32:42 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x101003, 0x0) r5 = openat(r4, &(0x7f0000000000)='./file0\x00', 0x20000, 0x60) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000040)={[0x0, 0xa94, 0x8, 0x8, 0x0, 0x2, 0xfffffffffffff800, 0x40, 0x200, 0x9, 0x8000000000000000, 0x8, 0x9, 0x7, 0xc, 0x7], 0xf000, 0x2}) 2018/06/03 08:32:42 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x8b05]}, 0x10) 2018/06/03 08:32:42 executing program 4: bpf$MAP_CREATE(0xc603000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x81, 0xdbb, 0x5}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x7, 0x8, 0x6, 0x400, r3}, &(0x7f0000000300)=0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x9e, 0x0, &(0x7f0000000140)="d6fec667509b907d38a475e18c64170e07b8efc1c454dbc7f6137ecd5e9347b5bdc30520fcb014ddc383d37de31aa4c3eb5020919a15090e9488cf1cc92bf630fe4e96c1f28198efe56445d22cc5f8080afde7c54fb4e64f76afdf6f4a95025c09cab233a0760985a9d65bc50b18458653be0e7a156d23945cf4293fd784b8c2a3202a2d9a9cf5ab5815bf57d33f473b7d80e75086baa5589cc53f5bab85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:42 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1149.894203] IPVS: ftp: loaded support on port[0] = 21 [ 1149.902200] binder_alloc: binder_alloc_mmap_handler: 3499 20001000-20004000 already mapped failed -16 2018/06/03 08:32:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x7db3000000000000]}, 0x10) 2018/06/03 08:32:42 executing program 4: bpf$MAP_CREATE(0x68010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:42 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9dca0000]}, 0x10) [ 1149.936994] binder: BINDER_SET_CONTEXT_MGR already set [ 1149.957103] binder: 3499:3500 ioctl 40046207 0 returned -16 2018/06/03 08:32:42 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc4d5]}, 0x10) 2018/06/03 08:32:42 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:42 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x248402) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaa0affffffffffff8100410086dd61db5892033a0001ff010000000000000000000000000001fe8000000000000000000000000000aa6e06038000000000ff010000000000000000000000000001fe8000000000000000000000000000aaff010000000000000000000000000001ff08040409ffff03ff020000000000000000000000000001fe80000000000000000000000000000bfe8000000000000000000000000000bbfe8000000000000000000000000000aa000e02800000000000000000000000000000ffff00000000ff010000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000bbfe8000000000000000000000000000aafe8000000000000000000000000000bbff0200000000000000000000000000011d0b0000000000000728000000080806e8beff7f000000000000db0000000000000004000000000000005200000000000000c9100000000000000000000000000000000107200000000906f727004306000000000000ff00000000000000010000000100000000000420880b00b7000396930000794642ad82386c164e95d1a6969e047567733929195e3aa8aa6d105149380b12925d31c455b8d6b12733b06df7e8fd70bb683dd9ef85bcc242df5cd3a9890374751196b15faa4b42b721f4676b27e492c2fa57fe4ffaa28feda8ffb946dfbff5ba7f536ba1b86ae5fa986a6f20d24a7f8e249ec17f2c59141df41994ab37908aac1a731b43a84c93e609cf75096438f223bf9c888c96961bbdf85e0828131e4888af67ec37f54642d8a316ee969a13f7d4a2cc6b42663e04000800754bd57178c6b32ee3626b9ad6448b09d241127faf07d9ab050086dd0009c0a326ce3782da299a03bd0d2c09b34629d0fc683931e31284872585d165ae56075fcc3549bfeb12dff468aaab3c9faddf8d9b78d4edf5e906a16a112e6f0aaf2f26b2d1565fdb54d6cfa148fa8b2006f51c387c3f0f3eb44f11b99b0c82fc46bbce2d1cb9b5f1ee1ecc248d8001e9ff29c089bfa383fa7ed90d866128c426569e887d10fc2cc3457ef725c278a7af2156080088be00000000102d41080100000000000100080022eb00000001219fbf3f020000000000049b0009000b080065580000000155e0b8b70d896e4b48542c84d311ca3714031e99d14f308a9c25ad905c390c882d63b3fe7eedac5e80d254e86984a52e"], 0x374) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xb1, 0x0, &(0x7f0000000700)="4bc7111898f385f60800565f2f3830dd313d66f5967ee0e48910cd40e0f715211950fb9ce2a3515824230f09952984045661658ded9c37874ec1710b1f0200000002227e6431baa95ed9d2d31bf29752c3c914973cc443358ce3d00327f87d75baab1f791aa0b400cf1edda14cecbd0e5a252406a2818d74a054eca6cb76e6b7c12f60504d9a1ab1cd059434813b93b5ced9883cd47bc95f93d793d1efbf0e6e329bb80c0607218002db000000009928c3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) 2018/06/03 08:32:42 executing program 4: bpf$MAP_CREATE(0x4e01, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1150.090177] binder: undelivered transaction 1238, process died. 2018/06/03 08:32:42 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xdd3f000000000000]}, 0x10) 2018/06/03 08:32:43 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1150.159187] binder_alloc: binder_alloc_mmap_handler: 3531 20001000-20004000 already mapped failed -16 2018/06/03 08:32:43 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x8b05]}, 0x10) [ 1150.246216] binder_alloc: 3531: binder_alloc_buf, no vma [ 1150.251791] binder: 3531:3542 transaction failed 29189/-3, size 0-0 line 2971 [ 1150.323890] IPVS: ftp: loaded support on port[0] = 21 [ 1150.365304] binder: send failed reply for transaction 1240 to 3531:3532 [ 1150.372279] binder: undelivered transaction 1241, process died. [ 1150.399101] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:43 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xddf8000000000000]}, 0x10) 2018/06/03 08:32:43 executing program 4: bpf$MAP_CREATE(0x274, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:43 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xc55c0000]}, 0x10) 2018/06/03 08:32:43 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe573]}, 0x10) 2018/06/03 08:32:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fstatfs(r0, &(0x7f0000000380)=""/72) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x40000, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="aef0219fe6d9a5495980ef35c9702a0996a965a09713f3512c55ccb93ddf3e2fadf9c881913961aeaafc4be001db3004c6bf17e920b21fb9d43f6250294efb4cbbf61c6acc76fefc5681b103b5ccbf9234e244003806a4c1b5f943f056bac29426e453bd87bfbcce2c5c3efcec53b1e4451e3cf59e9fb0e2623a25a37558ceae388d88d9df77cdf128fcb72aa1924e7be7923a373bc2f90f1c4eb4cad21666d974b1e9cfb651da229e1c896ed84f3900e2be2768810e0dd46fe25cd4403fe711631097a4713337a2e9a696c38dcd06c11a0e23f0b2688a52f90928b3d3aa") ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000300)=0x7) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xffffffffffffff52, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="02000200fc2a4a60"], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:43 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:43 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xa2000, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) unshare(0x60000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:32:43 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1150.728773] binder: 3574:3575 transaction failed 29201/-28, size 0-0 line 2971 [ 1150.746420] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:43 executing program 4: bpf$MAP_CREATE(0x23c, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:43 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3d85]}, 0x10) 2018/06/03 08:32:43 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x400300]}, 0x10) [ 1150.819542] binder: BINDER_SET_CONTEXT_MGR already set [ 1150.832275] binder: 3574:3575 ioctl 40046207 0 returned -16 2018/06/03 08:32:43 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1151.002451] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:44 executing program 4: bpf$MAP_CREATE(0x54, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x20, 0x0, &(0x7f0000000000)=[@dead_binder_done={0x40086310, 0x1}, @enter_looper={0x630c}, @dead_binder_done={0x40086310, 0x1}, @exit_looper={0x630d}], 0x1c, 0x0, &(0x7f0000000080)="05c75c74d8339c255b1640d87d48046261da3b5bbe77635fadaa1596"}) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:44 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd06]}, 0x10) 2018/06/03 08:32:44 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5d9c0000]}, 0x10) 2018/06/03 08:32:44 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xbde10000]}, 0x10) 2018/06/03 08:32:44 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:44 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x0) bind$netrom(r4, &(0x7f0000000040)=@full={{0x3, {"6b6ae858e2166f"}, 0x3f}, [{"44857b71feefc1"}, {"007010178633a6"}, {"c103f47b2ec385"}, {"ce4bf137bb5855"}, {"011a7bc88d01ad"}, {"ab57002add69e7"}, {"2ea4a8a68b883b"}, {"9fd9c61841c794"}]}, 0x48) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:44 executing program 4: bpf$MAP_CREATE(0x7402000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:44 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1151.658508] binder: 3617:3628 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 1151.665836] binder: 3617:3628 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 1151.673118] binder: 3628 RLIMIT_NICE not set [ 1151.696782] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xd5c4]}, 0x10) 2018/06/03 08:32:44 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x400000000000000]}, 0x10) [ 1151.764685] binder: 3617:3628 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:44 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbd28]}, 0x10) 2018/06/03 08:32:44 executing program 4: bpf$MAP_CREATE(0x1c020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:44 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1151.819315] binder: 3617:3644 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 1151.826641] binder: 3617:3644 BC_DEAD_BINDER_DONE 0000000000000001 not found [ 1151.833896] binder: 3644 RLIMIT_NICE not set [ 1151.852133] binder_alloc: binder_alloc_mmap_handler: 3617 20001000-20004000 already mapped failed -16 2018/06/03 08:32:44 executing program 4: bpf$MAP_CREATE(0x5602, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1151.895245] binder: BINDER_SET_CONTEXT_MGR already set [ 1151.900649] binder_alloc: 3617: binder_alloc_buf, no vma [ 1151.906504] binder: 3617:3628 transaction failed 29189/-3, size 0-0 line 2971 2018/06/03 08:32:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xcd90000000000000]}, 0x10) [ 1151.954596] binder: 3617:3649 ioctl 40046207 0 returned -16 [ 1151.981540] binder_alloc: 3617: binder_alloc_buf, no vma [ 1151.987183] binder: 3617:3644 transaction failed 29189/-3, size 0-0 line 2971 [ 1152.012561] IPVS: ftp: loaded support on port[0] = 21 [ 1152.046317] binder: 3617:3628 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000006, 0x1) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) shutdown(r0, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:44 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd50b0000]}, 0x10) 2018/06/03 08:32:44 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xeda70000]}, 0x10) 2018/06/03 08:32:44 executing program 4: bpf$MAP_CREATE(0x4e, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1152.101046] binder: undelivered TRANSACTION_ERROR: 29189 [ 1152.107209] binder: release 3617:3628 transaction 1247 out, still active [ 1152.177148] binder: send failed reply for transaction 1247, target dead [ 1152.184058] binder: undelivered transaction 1248, process died. [ 1152.245567] binder: 3686:3687 ioctl c0306201 20007000 returned -14 [ 1152.312364] binder_alloc: binder_alloc_mmap_handler: 3686 20001000-20004000 already mapped failed -16 [ 1152.337335] binder: BINDER_SET_CONTEXT_MGR already set [ 1152.347240] binder_alloc: 3686: binder_alloc_buf, no vma [ 1152.352775] binder: 3686:3699 transaction failed 29189/-3, size 0-0 line 2971 [ 1152.383984] binder: 3686:3687 ioctl 40046207 0 returned -16 [ 1152.398047] binder: 3686:3699 ioctl c0306201 20007000 returned -14 [ 1152.398113] binder_alloc: 3686: binder_alloc_buf, no vma [ 1152.409953] binder: 3686:3701 transaction failed 29189/-3, size 0-0 line 2971 [ 1152.490134] binder: undelivered TRANSACTION_ERROR: 29189 [ 1152.499101] binder: release 3686:3687 transaction 1252 out, still active [ 1152.513112] binder: send failed reply for transaction 1252, target dead [ 1152.519978] binder: undelivered transaction 1253, process died. 2018/06/03 08:32:46 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3a15]}, 0x10) 2018/06/03 08:32:46 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1d6e000000000000]}, 0x10) 2018/06/03 08:32:46 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:46 executing program 4: bpf$MAP_CREATE(0x6c01000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x9, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000480)=r2) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r4, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8480, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0xb8, &(0x7f0000000100)=[@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e21, @rand_addr=0x400}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e22, 0x800, @loopback={0x0, 0x1}, 0x5}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1f}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x17}, 0x6}, @in={0x2, 0x4e23, @multicast2=0xe0000002}, @in={0x2, 0x4e23}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000380)={r6, @in6={{0xa, 0x4e22, 0x7f, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffffb}}, 0xfffffffffffffff8, 0x7}, &(0x7f00000002c0)=0x90) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="00bc8e7095fa3de8f2e01c4f6f7f094ef20803ab9439337a3e4844a2e80441405e051e51b96f9c8fe9bfdd1057cdd340753fe130e91fbec8f45d2fbcc68d98c74cea769119b3b89c2ebeabf945d12cb8a0615af1f74237b923c6e83da7847ba15e69124d7be416d0ae6fed508cbcd0dd9c35ecbc904af0f3231abe6ab210c5427f9ffe0498596e6fd97276bce8095f23735ad1b88f0ea5ee156ce9efec8242bc6da071b69074f773a02d3b7280fd9c7e97dd357d"], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xf522000000000000]}, 0x10) 2018/06/03 08:32:46 executing program 5: r0 = socket$kcm(0x29, 0x30000000007, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c09ee74ed43240970") unshare(0x400) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:46 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) [ 1153.761450] binder: 3714:3715 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:46 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:46 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5d9c]}, 0x10) 2018/06/03 08:32:46 executing program 4: bpf$MAP_CREATE(0x6e02000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:46 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x4ded0000]}, 0x10) [ 1153.814872] binder: 3714:3715 transaction failed 29201/-28, size 0-0 line 2971 [ 1153.900794] binder_alloc: binder_alloc_mmap_handler: 3714 20001000-20004000 already mapped failed -16 [ 1153.957541] binder_alloc: 3714: binder_alloc_buf, no vma [ 1153.963129] binder: 3714:3734 transaction failed 29189/-3, size 0-0 line 2971 [ 1153.968161] binder: BINDER_SET_CONTEXT_MGR already set [ 1154.000903] binder: 3714:3734 ioctl c0306201 20007000 returned -14 [ 1154.034189] binder: 3714:3715 ioctl 40046207 0 returned -16 [ 1154.063694] binder: undelivered TRANSACTION_ERROR: 29189 [ 1154.072149] binder: release 3714:3715 transaction 1257 out, still active [ 1154.081157] binder: send failed reply for transaction 1257, target dead 2018/06/03 08:32:47 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x100000001, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:47 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xddf8]}, 0x10) 2018/06/03 08:32:47 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:47 executing program 4: bpf$MAP_CREATE(0x14000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xf4010000]}, 0x10) 2018/06/03 08:32:47 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xa5450000]}, 0x10) 2018/06/03 08:32:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x9, 0x0) inotify_add_watch(r3, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x12000, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="b74643d8", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:47 executing program 4: bpf$MAP_CREATE(0x3200000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:47 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1154.623970] binder: 3752:3755 unknown command -666679625 [ 1154.657445] IPVS: ftp: loaded support on port[0] = 21 [ 1154.667196] binder: 3752:3755 ioctl c0306201 20007000 returned -22 [ 1154.711144] binder: 3755 RLIMIT_NICE not set 2018/06/03 08:32:47 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x200000000000000]}, 0x10) 2018/06/03 08:32:47 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3e8]}, 0x10) 2018/06/03 08:32:47 executing program 4: bpf$MAP_CREATE(0x7800000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:47 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9dca]}, 0x10) 2018/06/03 08:32:47 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1154.981814] IPVS: ftp: loaded support on port[0] = 21 [ 1155.418282] binder_alloc: binder_alloc_mmap_handler: 3752 20001000-20004000 already mapped failed -16 [ 1155.431383] binder: BINDER_SET_CONTEXT_MGR already set [ 1155.431511] binder: 3752:3806 unknown command -666679625 [ 1155.436796] binder: 3752:3805 ioctl 40046207 0 returned -16 [ 1155.442474] binder: 3752:3806 ioctl c0306201 20007000 returned -22 [ 1155.459473] binder: 3805 RLIMIT_NICE not set 2018/06/03 08:32:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x59000000]}, 0x10) 2018/06/03 08:32:48 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:48 executing program 4: bpf$MAP_CREATE(0x7600000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:48 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd50b000000000000]}, 0x10) 2018/06/03 08:32:48 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x79ad]}, 0x10) 2018/06/03 08:32:48 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x218], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="00ff000000000000"], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:48 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) accept4$packet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'eql\x00', r2}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:48 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:48 executing program 4: bpf$MAP_CREATE(0x64000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1155.554752] binder: 3821:3823 ioctl c0306201 20007000 returned -14 [ 1155.576744] IPVS: ftp: loaded support on port[0] = 21 [ 1155.591749] binder: 3821:3823 transaction failed 29201/-28, size 0-0 line 2971 2018/06/03 08:32:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xa00]}, 0x10) 2018/06/03 08:32:48 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x80ffffff00000000]}, 0x10) 2018/06/03 08:32:48 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x95960000]}, 0x10) [ 1155.642976] binder_alloc: binder_alloc_mmap_handler: 3821 20001000-20004000 already mapped failed -16 2018/06/03 08:32:48 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:48 executing program 4: bpf$MAP_CREATE(0x1802, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1155.711951] binder: BINDER_SET_CONTEXT_MGR already set [ 1155.742562] binder: 3821:3823 ioctl 40046207 0 returned -16 2018/06/03 08:32:48 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xbde1]}, 0x10) 2018/06/03 08:32:48 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:48 executing program 4: bpf$MAP_CREATE(0x8002, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="0001000000000000"], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) [ 1155.894351] binder: send failed reply for transaction 1262 to 3821:3823 [ 1155.909184] binder: undelivered TRANSACTION_ERROR: 29189 [ 1155.940754] IPVS: ftp: loaded support on port[0] = 21 [ 1155.953636] binder: 3866:3867 ioctl c0306201 20007000 returned -14 [ 1155.989794] binder_alloc: binder_alloc_mmap_handler: 3866 20001000-20004000 already mapped failed -16 [ 1156.021969] binder: BINDER_SET_CONTEXT_MGR already set [ 1156.035104] binder: 3866:3867 ioctl 40046207 0 returned -16 [ 1156.048750] binder_alloc: 3866: binder_alloc_buf, no vma [ 1156.054330] binder: 3866:3872 transaction failed 29189/-3, size 0-0 line 2971 [ 1156.077698] binder: 3866:3872 ioctl c0306201 20007000 returned -14 [ 1156.112361] binder: undelivered TRANSACTION_ERROR: 29189 [ 1156.120861] binder: release 3866:3867 transaction 1265 out, still active [ 1156.136144] binder: send failed reply for transaction 1265, target dead [ 1156.143004] binder: undelivered transaction 1266, process died. 2018/06/03 08:32:49 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9d11]}, 0x10) 2018/06/03 08:32:49 executing program 4: bpf$MAP_CREATE(0x14c, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:49 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf5db]}, 0x10) 2018/06/03 08:32:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe00]}, 0x10) 2018/06/03 08:32:49 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:49 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) fchdir(r2) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:49 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) bind(r0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x80) 2018/06/03 08:32:49 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1156.417756] binder: 3886:3887 ioctl c0306201 20007000 returned -14 [ 1156.423764] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:49 executing program 4: bpf$MAP_CREATE(0x86020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:49 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xffffff80]}, 0x10) [ 1156.461649] binder_alloc: binder_alloc_mmap_handler: 3886 20001000-20004000 already mapped failed -16 2018/06/03 08:32:49 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9dca]}, 0x10) 2018/06/03 08:32:49 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3551]}, 0x10) [ 1156.534532] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:49 executing program 4: bpf$MAP_CREATE(0x62000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1156.576204] binder_alloc: 3886: binder_alloc_buf, no vma [ 1156.581816] binder: 3886:3900 transaction failed 29189/-3, size 0-0 line 2971 [ 1156.650487] binder: 3886:3887 ioctl 40046207 0 returned -16 [ 1156.672317] binder: 3886:3900 ioctl c0306201 20007000 returned -14 [ 1156.687605] binder_alloc: 3886: binder_alloc_buf, no vma [ 1156.693310] binder: 3886:3922 transaction failed 29189/-3, size 0-0 line 2971 [ 1156.728328] IPVS: ftp: loaded support on port[0] = 21 [ 1156.799296] binder: undelivered TRANSACTION_ERROR: 29189 [ 1156.805711] binder: release 3886:3887 transaction 1269 out, still active [ 1156.821474] binder: send failed reply for transaction 1269, target dead [ 1156.828319] binder: undelivered transaction 1270, process died. 2018/06/03 08:32:50 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:50 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1100000000000000]}, 0x10) 2018/06/03 08:32:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x2dd6000000000000]}, 0x10) 2018/06/03 08:32:50 executing program 4: bpf$MAP_CREATE(0x3c02, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:50 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x73e5]}, 0x10) 2018/06/03 08:32:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffff80000000, 0x44800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x54, 0x0, &(0x7f0000000180)=[@exit_looper={0x630d}, @dead_binder_done={0x40086310, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x8, &(0x7f0000000100)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x36}], &(0x7f0000000140)=[0x20]}}], 0xfe, 0x0, &(0x7f0000000380)="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"}) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:50 executing program 5: r0 = socket$kcm(0x29, 0x1005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre\a\x00', 0x0}) recvmmsg(r2, &(0x7f0000001700)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/72, 0x48}, {&(0x7f0000000140)=""/236, 0xec}, {&(0x7f0000001400)=""/142, 0x8e}], 0x4, &(0x7f00000014c0)=""/207, 0xcf, 0xfffffffffffffff7}, 0x6fb}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000015c0)=""/133, 0x85}, {&(0x7f0000001680)=""/127, 0x7f}], 0x2, &(0x7f0000000380)=""/17, 0x11, 0x8}, 0x6}], 0x2, 0x21, &(0x7f0000001780)={0x0, 0x989680}) setsockopt$inet_tcp_buf(r4, 0x6, 0x1c, &(0x7f00000017c0)='"', 0x1) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x7c, r3}) set_thread_area(&(0x7f0000000000)={0xf4, 0x20001000, 0x400, 0x6b, 0x1f, 0x0, 0x3304, 0x6, 0x5, 0x64}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:50 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:50 executing program 4: bpf$MAP_CREATE(0x76020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1157.337432] binder: 3935:3944 ioctl c0306201 20007000 returned -14 [ 1157.342583] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x4d34000000000000]}, 0x10) [ 1157.382627] binder_alloc: binder_alloc_mmap_handler: 3935 20001000-20004000 already mapped failed -16 2018/06/03 08:32:50 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc55c0000]}, 0x10) 2018/06/03 08:32:50 executing program 4: bpf$MAP_CREATE(0x26020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:50 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:50 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6e1d]}, 0x10) 2018/06/03 08:32:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) 2018/06/03 08:32:50 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1157.556149] binder: send failed reply for transaction 1274 to 3935:3944 [ 1157.564424] binder: undelivered transaction 1275, process died. 2018/06/03 08:32:50 executing program 4: bpf$MAP_CREATE(0x6001, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1157.620163] binder: undelivered TRANSACTION_ERROR: 29189 [ 1157.666421] binder: 3982:3984 ioctl c0306201 20007000 returned -14 [ 1157.720736] binder_alloc: binder_alloc_mmap_handler: 3982 20001000-20004000 already mapped failed -16 [ 1157.732178] IPVS: ftp: loaded support on port[0] = 21 [ 1157.763348] binder_alloc: 3982: binder_alloc_buf, no vma [ 1157.767158] binder: BINDER_SET_CONTEXT_MGR already set [ 1157.768961] binder: 3982:3994 transaction failed 29189/-3, size 0-0 line 2971 [ 1157.775693] binder: 3982:3994 ioctl c0306201 20007000 returned -14 [ 1157.791295] binder: 3982:3984 ioctl 40046207 0 returned -16 [ 1157.827193] binder: undelivered TRANSACTION_ERROR: 29189 [ 1157.833369] binder: send failed reply for transaction 1277 to 3982:3984 [ 1157.840494] binder: undelivered TRANSACTION_COMPLETE [ 1157.845671] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe803]}, 0x10) 2018/06/03 08:32:50 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf4010000]}, 0x10) 2018/06/03 08:32:50 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:50 executing program 4: bpf$MAP_CREATE(0x270, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:50 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x25a2000000000000]}, 0x10) 2018/06/03 08:32:50 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x20014, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634840000000000000000000000000000000000000000011000000000000000000000000000000000000000000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000140)=ANY=[], @ANYBLOB="000057dc7d9186787b457f25429a23c878df000000000000"], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:50 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80, 0x800) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001940)={{{@in=@broadcast, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001a40)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000001a80)={@loopback, 0x0}, &(0x7f0000001ac0)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001b40)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001bc0)=0x14, 0x800) getsockname$packet(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001c40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001c80)={{{@in6=@mcast1, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000001d80)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001e00)=0x14, 0x80000) accept$packet(0xffffffffffffffff, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001e80)=0x14) accept(r0, &(0x7f0000001f80)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002000)=0x80) accept$packet(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000020c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002100)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002380)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000023c0)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000002440)={@loopback, 0x0}, &(0x7f0000002480)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000006780)={'yam0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000067c0)={@loopback, 0x0}, &(0x7f0000006800)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000006840)={'team0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000068c0)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f00000069c0)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000007340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x104020}, 0xc, &(0x7f0000007300)={&(0x7f0000006a00)={0x8d8, r2, 0x0, 0x70bd28, 0x25dfdbfb, {0x3}, [{{0x8, 0x1, r3}, {0x1b4, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x9}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xfffffffffffffffb}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r6}, {0xe8, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xa8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xf2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0x17c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xffff}}, {0x8, 0x7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x54, 0x4, [{0x3, 0x1f, 0xfa8, 0x2}, {0x7, 0x3f, 0x800, 0x20}, {0x8, 0x0, 0x0, 0xb9c2}, {0xe0d6, 0x8, 0xffff, 0x2}, {0x2, 0x0, 0x0, 0x7c}, {0x24, 0x1000, 0x5, 0x8}, {0x7, 0x5, 0x100000001, 0x5}, {0x0, 0x7, 0x0, 0x7}, {0x9, 0x9e, 0x7fc0000000000000, 0x12000000000000}, {0x9, 0x7, 0x40, 0x8}]}}}]}}, {{0x8, 0x1, r9}, {0x50, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r10}, {0x138, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r11}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x54, 0x4, [{0xfffffffffffff000, 0x7f, 0x1, 0x7}, {0x7, 0x1, 0x0, 0xfffffffffffff2c3}, {0x7, 0x7, 0x2, 0xe476}, {0x8, 0x1, 0x7f, 0x1f5}, {0xc99, 0x429, 0xd66, 0x280000000000}, {0x400, 0x0, 0x7fffffff, 0x7949}, {0x7fffffff, 0x6, 0x0, 0xffffffff9cfacea1}, {0x7fffffff, 0x2, 0x10001, 0x101}, {0x8, 0x3, 0x7ff, 0x2}, {0x2, 0x4, 0x8, 0x8}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r12}, {0x1a4, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xfe7c}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xcb75}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0xcc, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x7}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r19}, {0x74, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x20}}}]}}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r21 = socket$inet6_udp(0xa, 0x2, 0x0) r22 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r21, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r22, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r23}) ioctl$sock_inet6_SIOCSIFADDR(r22, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r23}) [ 1158.218930] binder: 4008:4009 got transaction to context manager from process owning it [ 1158.227196] binder: 4008:4009 transaction failed 29201/-22, size 0-0 line 2847 2018/06/03 08:32:51 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1158.261854] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:51 executing program 4: bpf$MAP_CREATE(0xf603000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:51 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4d340000]}, 0x10) [ 1158.297508] binder: 4008:4009 got transaction to context manager from process owning it [ 1158.305958] binder: 4008:4009 transaction failed 29201/-22, size 0-0 line 2847 2018/06/03 08:32:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3]}, 0x10) 2018/06/03 08:32:51 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1d6e000000000000]}, 0x10) [ 1158.402186] binder: BINDER_SET_CONTEXT_MGR already set [ 1158.408780] binder_alloc: 4008: binder_alloc_buf, no vma [ 1158.414368] binder: 4008:4036 transaction failed 29189/-3, size 0-0 line 2971 [ 1158.442180] binder: 4008:4034 ioctl 40046207 0 returned -16 2018/06/03 08:32:51 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:51 executing program 4: bpf$MAP_CREATE(0x400000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:51 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbde1000000000000]}, 0x10) 2018/06/03 08:32:51 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x9d110000]}, 0x10) 2018/06/03 08:32:51 executing program 1: r0 = socket$inet6(0xa, 0xffffffffffff, 0x7) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffa) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:51 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe785]}, 0x10) 2018/06/03 08:32:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:51 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7ff, 0x10000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x40000, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) 2018/06/03 08:32:52 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1159.188445] binder_alloc: binder_alloc_mmap_handler: 4065 20001000-20004000 already mapped failed -16 [ 1159.206512] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:52 executing program 4: bpf$MAP_CREATE(0x4a01000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xdc050000]}, 0x10) [ 1159.246711] binder: BINDER_SET_CONTEXT_MGR already set 2018/06/03 08:32:52 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2dd6]}, 0x10) 2018/06/03 08:32:52 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf8dd]}, 0x10) [ 1159.285171] binder: 4065:4067 ioctl 40046207 0 returned -16 2018/06/03 08:32:52 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:52 executing program 1: 2018/06/03 08:32:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x6d4b]}, 0x10) 2018/06/03 08:32:52 executing program 4: bpf$MAP_CREATE(0x7602000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:52 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1159.508361] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:52 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xddf8000000000000]}, 0x10) 2018/06/03 08:32:52 executing program 4: bpf$MAP_CREATE(0x5c00, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:52 executing program 1: 2018/06/03 08:32:52 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x153a000000000000]}, 0x10) 2018/06/03 08:32:52 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x1d6e]}, 0x10) 2018/06/03 08:32:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:52 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:52 executing program 5: r0 = socket$kcm(0x29, 0xfffffffffffffffe, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:52 executing program 1: [ 1160.096276] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:52 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:52 executing program 4: bpf$MAP_CREATE(0x6, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xddf8000000000000]}, 0x10) 2018/06/03 08:32:53 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x757f000000000000]}, 0x10) 2018/06/03 08:32:53 executing program 1: [ 1160.353835] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:53 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:53 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4d34]}, 0x10) 2018/06/03 08:32:53 executing program 1: 2018/06/03 08:32:53 executing program 4: bpf$MAP_CREATE(0xfc, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x300000000000000]}, 0x10) 2018/06/03 08:32:53 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xeda7]}, 0x10) 2018/06/03 08:32:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:53 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000000)=r0) unshare(0x60000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) [ 1161.027817] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:53 executing program 1: 2018/06/03 08:32:53 executing program 4: bpf$MAP_CREATE(0x5e, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:53 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe573000000000000]}, 0x10) 2018/06/03 08:32:53 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:53 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9c5d]}, 0x10) 2018/06/03 08:32:53 executing program 1: 2018/06/03 08:32:53 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xc8050000]}, 0x10) 2018/06/03 08:32:54 executing program 4: bpf$MAP_CREATE(0x1c02000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1161.342578] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:54 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:54 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x9}, 0x2c) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) 2018/06/03 08:32:54 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x90cd]}, 0x10) 2018/06/03 08:32:54 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xa00000000000000]}, 0x10) 2018/06/03 08:32:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x853d]}, 0x10) 2018/06/03 08:32:54 executing program 4: bpf$MAP_CREATE(0x700, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:54 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:54 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") unshare(0x100) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000080)={0x0, 0x8, 0x8000, &(0x7f0000000040)=0xfffffffffffffffe}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:54 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@mcast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000000)=0xe8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', r3}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffff9c, 0x2, 0x1, 0xc81f}, 0x20) r6 = fcntl$getown(r2, 0x9) getresuid(&(0x7f0000000300), &(0x7f0000000380), &(0x7f00000005c0)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f0000000800)=0xe8) fstat(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r5, &(0x7f00000009c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000100)="adc824c0dd5efa94105abdd7c68131127a1c4e0743cdb646736890e3344577006f2b3054e22c4da61f37efe36511ab114b7c4b369976a06dabf0d212c58514d8f0e74063e9d5a027bf1184d4ffee598c0b59fb1d1ff426cd419106bdcbcd9bff830582e114193b06052e6ee03ba513c37e2a1262cd8fcb80d7405550aabde50949cfcafda8a972e706980a3847adf9d533dcb1f844f707796531c2e19b4203be13781d53568324d19d3ae0b4d5549d5edcbba8a4207160674d897ddb8c21016e283bd5866cfb407f244f401b98a576c9cd4f405a5271c2d7b004295103ea43c58fef00a7cf67c6a0a62c9b893894142f80375790", 0xf4}, {&(0x7f0000000400)="915b193c639219f3ed67258499834c37d2ffeece958ffad1eff750c29820396c19b9b3189a27f742d1354fb292cfa709b6dbcf65bc21547b2853c8a91b87ac1a2bc220b9f09217f8a5839df26e4113fea34567c59f63ae81ea20eb0cf5da9f2294093b1e81e4c704ac9ac2571f8f940237237a9c3fb11f0124266b692b9c4a3e236747d6f9a8e4492efbb5232981db449afced09d772af4c2e330ea34511dc9c250febe8fe138d1f8a946d2f24a8d544dda843", 0xb3}, {&(0x7f0000000200)="8c97e496a38045f28a774e98e04ec8de97a346c1a18c4ac023a48a", 0x1b}, {&(0x7f00000004c0)="ab9f0cd9e44d9293b0df0b2a15d7a488a14065d8a3fa27d92186b96d97a4665c5ce99e86867815f8cce132f8df9ab97684cef789d271e6f56b837b43dfac55fbd0f21e3373891f68c4e50a257937edad94ba1027495e9375efd15c5d6cd3bd33b1dcadf6dd20aeeccb8bd4367bcf3ad3af450ac2a29487ffa09eb668c845e3dfc49815f8e83cee0191e7471958c683d45d95c45906047698e810ccd33999b7a463f8f54865f91626b7115e635c4a49ab8c0b7f74f7960193529bbd0ec897e4439e36b95fba8f5b7a77005ac3f77cb146edbf1c9cf7c4251e1a4e072fe67cc4e4216fbdfd02e6ab96ed694c439dfb121e3a49e5e659", 0xf5}], 0x4, &(0x7f00000008c0)=[@rights={0x20, 0x1, 0x1, [r1, r1, r0, r1]}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x30, 0x1, 0x1, [r2, r1, r1, r0, r0, r1, r1]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x30, 0x1, 0x1, [r0, r2, r0, r0, r2, r0, r0, r2]}], 0xd8, 0x4040}, 0x4000000) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:32:54 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:54 executing program 1: bpf$MAP_CREATE(0x6e02000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:54 executing program 4: bpf$MAP_CREATE(0x1100, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:54 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x73e5]}, 0x10) 2018/06/03 08:32:54 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x200000000000000]}, 0x10) 2018/06/03 08:32:54 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4d34000000000000]}, 0x10) [ 1162.102560] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:54 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1162.312083] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:55 executing program 4: bpf$MAP_CREATE(0x5602000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000006, 0x1) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) shutdown(r0, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x1d2d]}, 0x10) 2018/06/03 08:32:55 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xa00]}, 0x10) 2018/06/03 08:32:55 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:55 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xad79]}, 0x10) 2018/06/03 08:32:55 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000080)="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", 0xfc}, {&(0x7f0000000400)="d55d1a0ace68771f8a68f3d6eab00cd31e9c1287b10d4661a4e0b3ff9a33456e1fafd0e629cf947bcd21f7e46340081feaf8f8eaba7d18d5387f4c6f552c907fab983beef39be911acea40e36709280bb9d32e67201dbee529bfbdb9170483935ab8e5a96a6429e317b486d7723514ddb91a511dc2ec77a61ea5d71e1850556182aad99004960179d5b99569185f2db2f377c9a939dc1ddfdefbbaffea3c325d6cbf3248be7b4fc26b24036498090e706304ca0e3217734f4f1b667d026271001924210f2a3e5f1e8a9a54983f16a9af695a32c4b31185005e42b44ff14f1c14dabfbce4b013b1", 0xe7}], 0x2, &(0x7f00000001c0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r2]}], 0x20, 0x40000}, 0x20000804) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:55 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) [ 1162.844837] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:55 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:55 executing program 4: bpf$MAP_CREATE(0x1a020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xbd280000]}, 0x10) [ 1162.920154] binder: 4294:4296 ioctl c0306201 20007000 returned -14 2018/06/03 08:32:55 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdbf5]}, 0x10) 2018/06/03 08:32:55 executing program 4: bpf$MAP_CREATE(0x12000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:55 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45b9]}, 0x10) 2018/06/03 08:32:55 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:55 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1163.061855] binder: send failed reply for transaction 1285 to 4294:4296 [ 1163.068757] binder: undelivered transaction 1286, process died. 2018/06/03 08:32:55 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:55 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xad79]}, 0x10) [ 1163.120162] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:55 executing program 4: bpf$MAP_CREATE(0x22020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1163.188729] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:56 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xed4d]}, 0x10) 2018/06/03 08:32:56 executing program 1: r0 = socket$kcm(0x29, 0x4, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2000, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x8001, 0x8}) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c9924097042e5a827b592ee7087092eebb01c2ae51b26f41b57eb40038300003aaf79eadc7f5987fc8f9cd62b630a46d76b79f939678d7bd5b3212714acb5764f4da9138e2a37d2648986433f300c72b63c490a51863d9e8e004ac6f663fd01038f5ebda2fa93ae3830fcb532f03f85cf02a690") r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:32:56 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:56 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x65d0]}, 0x10) 2018/06/03 08:32:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3000000]}, 0x10) 2018/06/03 08:32:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:56 executing program 4: bpf$MAP_CREATE(0x6401, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:56 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_mreqsrc(r4, 0x0, 0x2f, &(0x7f0000000040)={@rand_addr, @loopback=0x7f000001}, 0xc) 2018/06/03 08:32:56 executing program 4: bpf$MAP_CREATE(0x24a, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:56 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1163.781355] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000006, 0x1) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f00000013c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f0000000000)="7213af34534b831b2f0dec3c3ee1baa1b3d5a24e", 0x14}, {&(0x7f0000000100)="c91ececf9cc15fdac89b928069c73d5e1a167732402109b1efca098bc8510ad34eb0010e00bd36f313d3dc0cfb32a0841cfad8a88c135d90cf6659c9da3dc232b7c2d48077699e65f9e5413e4da143409823acef4238b47802057439c6761cec6320449e5c3a480011f8959473385ba7acbcdfdf2d1a60ecc5dcd86b", 0x7c}, {&(0x7f0000000380)="48abf9d88bc53a3e4d93d8b2fda8ea9834852afb82bf59c88c2339eb08a636ed92ace02dbb259072a9e21f7bb6de1db7a36c46cd1ed78dcb7521c3dabe14739d0bf53f7701090d0fe1a394a083e5d3120b9fad8b0f15bf9490fb6f03d8ebc0f0d5a530d9e4b7bcc3c1dd440abbad4914e12c632297878d560740ac4ae66b0065928fba3d3a50bf93c8a6ba0a4c50220ad80cb7530bdbc073e115e5482f4849fcf245c1c6b8c0102483bc2fdcd381204744925d9ebb804842e28193c482db09c5190bb85bd1035196d055e784f68afb96e12b05329131856a0112566497a2d0e01466ecfef0174303", 0xe8}], 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0xfffffffffffffe47, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)}}}], 0x1, 0x0, &(0x7f0000000280)="9c"}) 2018/06/03 08:32:56 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3f00]}, 0x10) 2018/06/03 08:32:56 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4500000000000000]}, 0x10) [ 1163.994060] binder: 4393:4394 ioctl c0306201 20007000 returned -14 [ 1164.059239] binder: send failed reply for transaction 1288 to 4393:4394 [ 1164.067068] binder: undelivered transaction 1289, process died. [ 1164.078167] IPVS: ftp: loaded support on port[0] = 21 [ 1164.083529] binder: undelivered TRANSACTION_ERROR: 29189 2018/06/03 08:32:57 executing program 4: bpf$MAP_CREATE(0xf203000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:57 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xb37d]}, 0x10) 2018/06/03 08:32:57 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4b6d]}, 0x10) 2018/06/03 08:32:57 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe803]}, 0x10) 2018/06/03 08:32:57 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd50b0000]}, 0x10) 2018/06/03 08:32:57 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:57 executing program 5: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffff9c}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xc800, 0x0) splice(r0, &(0x7f0000000040)=0x5b, r1, &(0x7f00000000c0), 0xa381, 0xa) r2 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sched_getattr(r3, &(0x7f0000000180), 0x30, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) fchdir(r2) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r6}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r6}) 2018/06/03 08:32:57 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1164.699787] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:57 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x852e]}, 0x10) 2018/06/03 08:32:57 executing program 4: bpf$MAP_CREATE(0x7c01000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:57 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xffffff80]}, 0x10) 2018/06/03 08:32:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xffffffff00000000]}, 0x10) 2018/06/03 08:32:57 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:57 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9d11000000000000]}, 0x10) 2018/06/03 08:32:57 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:57 executing program 4: bpf$MAP_CREATE(0x5c000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd060000]}, 0x10) 2018/06/03 08:32:57 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x1100000000000000]}, 0x10) 2018/06/03 08:32:58 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9d11000000000000]}, 0x10) 2018/06/03 08:32:58 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x400891a, &(0x7f0000000100)="0047fc2f07d82c9924aa09") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000080)={0x9, 0x7ff, 0x80, {r5, r6+10000000}, 0x1ff, 0x1a}) ioctl$TIOCNOTTY(r4, 0x5422) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:58 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:58 executing program 4: bpf$MAP_CREATE(0x5601, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:58 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xa5450000]}, 0x10) 2018/06/03 08:32:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xc0ffffff00000000]}, 0x10) 2018/06/03 08:32:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:58 executing program 1: bpf$MAP_CREATE(0x7801000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:58 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1165.624874] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:58 executing program 4: bpf$MAP_CREATE(0x5400, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:58 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x15f3]}, 0x10) 2018/06/03 08:32:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x2d1d000000000000]}, 0x10) 2018/06/03 08:32:58 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff], 0xaa}, 0x0, r3}) [ 1165.844417] IPVS: ftp: loaded support on port[0] = 21 [ 1165.876805] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:59 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:59 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x56fd]}, 0x10) 2018/06/03 08:32:59 executing program 4: bpf$MAP_CREATE(0x11, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x100000000000000]}, 0x10) 2018/06/03 08:32:59 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf522]}, 0x10) 2018/06/03 08:32:59 executing program 1: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$alg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='v', 0x1}], 0x1, &(0x7f00000002c0)}, 0x8010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr}, @in6={0xa, 0x4e20, 0x8000, @dev={0xfe, 0x80, [], 0x1e}, 0x8}, @in6={0xa, 0x4e24, 0x3f, @mcast2={0xff, 0x2, [], 0x1}, 0xffffffffffffffff}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x17}, 0x3f}], 0x74) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000080), 0x4) 2018/06/03 08:32:59 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x100000000108912, &(0x7f0000000200)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r4, 0xc05c5340, &(0x7f0000000040)={0x9, 0xffff, 0x6, {}, 0x7f, 0xffffffffc9f9c1d7}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$EVIOCGVERSION(r2, 0x80044501, &(0x7f00000000c0)=""/205) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:32:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140b8997], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:32:59 executing program 4: bpf$MAP_CREATE(0xba00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:32:59 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:59 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x4002, 0x0) readv(r0, &(0x7f0000001700), 0x8) 2018/06/03 08:32:59 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x1d6e0000]}, 0x10) [ 1166.950562] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:32:59 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd5c4000000000000]}, 0x10) 2018/06/03 08:32:59 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xa]}, 0x10) 2018/06/03 08:32:59 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x0, @multicast2=0xe0000002, 0x0, 0x0, 'wrr\x00', 0x0, 0x3, 0x7a}, 0x2c) 2018/06/03 08:32:59 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:32:59 executing program 4: bpf$MAP_CREATE(0x1000000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1167.324591] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xf522]}, 0x10) 2018/06/03 08:33:00 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:00 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xfd56000000000000]}, 0x10) 2018/06/03 08:33:00 executing program 1: r0 = socket$kcm(0x29, 0x8, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f00000015c0)=""/228) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) 2018/06/03 08:33:00 executing program 4: bpf$MAP_CREATE(0xc203, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:00 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2dd6000000000000]}, 0x10) 2018/06/03 08:33:00 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x82002, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000040)) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:33:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe0], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) [ 1167.793738] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:00 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:00 executing program 4: bpf$MAP_CREATE(0xfc03, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xd06000000000000]}, 0x10) 2018/06/03 08:33:00 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8982, &(0x7f0000000380)={'team0\x00'}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) r2 = getgid() syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xe000, r1, r2, 0x1, 0x10000) 2018/06/03 08:33:00 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:00 executing program 4: bpf$MAP_CREATE(0x3a02, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:00 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6d4b000000000000]}, 0x10) 2018/06/03 08:33:00 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3d850000]}, 0x10) [ 1168.087825] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3e8]}, 0x10) 2018/06/03 08:33:01 executing program 4: bpf$MAP_CREATE(0x180, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:01 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc805000000000000]}, 0x10) 2018/06/03 08:33:01 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:01 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xddf80000]}, 0x10) 2018/06/03 08:33:01 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff00000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:01 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2080, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x5, 0x1) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:33:01 executing program 1: r0 = inotify_init1(0x80000) readahead(r0, 0x87, 0x40000000000000ba) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) sendmmsg(r1, &(0x7f0000007600)=[{{&(0x7f0000000080)=@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="144e9914d2fa00d5e62cbacc63702df81bf7e9f21f48391c8a27c61b16925decf4fe7b44dae69159442c6dd5d37de962edbb2a24b9d92d7b5bf8de7f1fa2b2b78fcbdbc07536b09d5258d9978aa2077d9daad68c88076fa1aeffd548a22a170578a29adcfa35600ab3c0e155119cf7b79efbc8aed77e4c5a0eb29d0df19c33c3c6d705d62cb1567b07b617c58e6399378299aa39e8fdc4a5e6962dc342ff708f8010ab46231f2d5e3842cce08b12c20168251c19c5b3f0ad4dcafba46a1a96ac", 0xc0}, {&(0x7f00000001c0)="545630d48fa57fd37560abfeec7af0880ac573fd51ed8d98c8fb2597ae2f1a3b95618b653bee151428d5c5a723a9d41f09f27f50e24eb34efaa3ab52d269a0ed9e2721ea79ddcfc608b2852ff3ff3dc41e8a20bf96795758d78110858a69c4c0cb8be1621d5e0c6070db9d0e923009a7ac73b020d2b94c987feafcdc06934edb3520ddffb9e5fd6f3e06fad3c7cc686506f851c1cb7da00644c7a95ec7ef5c7fd47304f83929685249a492587b9ade0001f680e9f1b2aeab3d02c1eef403", 0xbe}, {&(0x7f00000002c0)="6ef6aa124f30e7f8fa20ba22cb670234cf308de6a2edff30ff6f407e95e25ead64928b96c6a50e9dc9b292daf30e91bf4806abd61768098ead2995ad6be5d65fb2c7d81363e00b08acd99c13fb1f3a88a99a3b4835811d820afd7d51fa0ea9e4f1e2487dbf1fa17041e9fad8008e72efa453651c73000e736c3a3879e718003862ae4970c5249b2833a55d1565766185cd3bf110f4f045bdc623a1ba25f0f8c1dbc006dca5828405110d621b15971d4af859a5cb438c6847ff850c2ce063fb3fe4cb0810d40a270cf6a9208be876d83fb263f6555427f2944d2b473b93db1a027ad8f25196b1a95bd3a738", 0xeb}], 0x3, &(0x7f0000007780)=ANY=[@ANYBLOB="70000000000000000f0100000800000036f04470995944dbdd2f4236df1b80117faa50e2bf360f28cf3e84f545d9c78a1147fc338d3539ec9afa3774a5e3e56bdcaae06cb02c9b423b0be0cb28eae4bfc58d6509e19f0e8a45256d7293a91500a8000000000000000501000001000080c43d373448996116897ca7531dd9df0c22a6b5ce3383e96a68819e1e36c772927aab43db53f74dfa7b4f3d1c5127623a1e12ef97cc9ec0f4c23d35b5dcfe1081b574c3bb1e72228e35157802874ebd57c9321b4d0036a5104a2fd3b3ac83bee1ba58a0901cc52c30d5b5830432631beb5f875921afa1fbf2f588647666d34e6f3324eefa47d35a3b3bd0a0388c9a9888cb00000000000000c800000000000000100100007f000000d05356d89d2124c10a0b6ec8214e1846ccf5fcb0cc8fce5f057ded863d9fbef456ec2789bc8c1b68cc72ee8a3942c13ad6450631bb25fb8aa071e8d93758b261a83ee5d424a0c6ef8878c35844bf6cb1231c2cadbe8f7665eca5adba9171f54f95b89d9456556a8dc9d0c04238d9f6c56fecbcee7ec36d37a48818f6f9e8290be6a870a6b231437e80c65edd78f940e724e19e8afa833af104e9a5b8df52aef0e32a3bc61a291a9b7069b1bc13fcc5de4f17460000000000300000000000000011010000000000009cdefa69e5cfcc7d776aa25c37fa0fa69ebd1e770611a032e1c8cc0c00000000e80000000000000000000000ff000000e010faaf8cc60db66168560e31b15719fbd75de1b51ee88d7f2b33927bf992763e0b50f31b8e3fff425b5e659b0c761e99640568e84616374e2c1c8dfc11d505d0baf39bc4082609d5fc15de71574c427cb1af20689314ad816554443b13c8979de26580cf31d9483fbc1e9e2455637dfb9875cf354ebe6808c8dd19b18d002f6f639dabf7766c50fe9d50a70477658f2b407f1ae2a88c3d9a9d6bb6ea0bd52a41e3c49d35c1b5d0142a861d63f780a3a81a581429e93f492926dc2a60ed7f55226e1fb0ca760ac2c0f1bc7b294fa838add20000000020000000000000000600000014810000823a073e6719b24c994332000000000038000000000000000e010000000200006577273ddb543e78a31ade24a41f04184fba6386f33f0e15b5f3f300917c2a870100000080000000ec6a3deda04681b0dd24b78b837beaacb0d9e111c07071177493d4b9be4860c5c56363de94f7626a465372bf78f6678d3d420eb6ab24dd8de7c0114a4925878159d54d54d1"], 0x350, 0x20000050}, 0x2}, {{&(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @loopback=0x7f000001}, 0x3, 0x1, 0x2}}, 0x80, &(0x7f0000001900)=[{&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="1d6ae73a5f800f3d2921a2a89b96d867c5d67f620d3671b505cbb1980787ec8c59f632ec54786c18360f181e0aeca7dfa612af493f4349a828b0b567b59f8b7d73143a271241382221a855fd065486421783c05a891c4a1182e5296572eba5810d10b544cfd5a92fdb80ed6d08aa8517901c3a4083ef6117fb38657c5703d58d5fb7284515e5dcf51d1e06f3e155ce4511ea0c904428d5", 0x97}, {&(0x7f0000001880)="defcb66a6b9e8e69cb039bdc8fc231deee7f174e744635faccee3fac03db13e094b7f86cfa8fec34e5e42df22c39a91534c5b2ba5ce5a9c42003dbf46eae3ac0d0aabd11a4757796abe41ebac5aa5efa61d0f1dbc61e95588f67", 0x5a}], 0x3, &(0x7f0000001940)=[{0x40, 0x112, 0xbe99, "b2cb2b58fefd7961381ad9780b6888aef283bd2455f59a9124e4c9a7ce00ad60748b1a7a5172c64a058ac6"}, {0x18, 0x3b, 0x80, "bf71787af73d"}, {0x20, 0x84, 0x4, "70119702a3bba64a200248e9d4"}, {0xf0, 0x12f, 0x4, "9fd00dd47600d5c1c311deffac462a39e9ca14515f1868a75642c5d9614e400bfbcedb0807edde1aa743dcd1fbd4e9c577e84171c2da09a59c70e99e137fc535c35e28ae8f2a79c356c550ee66c3e2f0b18a6aa7e6c7bc3d82c9ec35bcb40c2253567759ddec624c86afe35993b63afdb9fd4f8386e2fea533d8fc03022e775da21c5fa0bdaedfa535deba1b0850c218dc737b343bde21e79305e4bf0f456dec7ab7de722c6f9516cdf4786b62f019127f3731792a7353f07e7a149af65f0c91f7565217e125023e08c301d19ee8f0ac41fc962bb1d998542abaf35a571c4314"}, {0x70, 0x104, 0x3, "56b0706bec4c4d7949eb60d0ee5c15862e200da2e1a9a0128513f65f607e051c325e8cbebe5e5c5155d6d9850e075cad506ad431989aa2a50101246a7e22554e35e8d888ab8d8354a3f78cbe6ea27ea624b6f00b22e62bfd9a0ae9"}, {0x70, 0x10a, 0x1, "6d09e180d5e10ed8f59d6569d7d360a3ab92b89ae066eb9553cf67c39a5a086ffd37fb846a52b0be59446622130e9a82d8cc1fdaae1a6e8979c3537378e9e60f9373a03243763e9c74184b43c348851fa42c51da0e5269b3522c962ec9ff"}, {0x38, 0x116, 0xffffffff, "dc8fa6b9295d4f8fe2454b284d653fdd2db0d5283f349dd2537a3f311622c29f36a7b37f59"}, {0xa8, 0x11f, 0xfffffffffffffff7, "7cee751861980bb7f9da792edb223718a44b77c34c98ebc7d521eeb7ce00259ecef60720a51a432925d31ddfbe0049d8d8adc31b20de10d4c1e4618026439be238a585ef0b28703d93cdc82c2695d152bfd9fe513a9a2e803a8049e05d3a2b252f14d256c2cd3503adf5e21de5bd854da8b28ea9570fadb6617647d680a7cde57c83ae32c603fdfa25aa8873bb56af0932ca"}], 0x328}, 0x1}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000001c80)="6f6b9e43081b1fdc49", 0x9}, {&(0x7f0000001cc0)="5fc45d16fd66d5c936ff5bf2066915386e1194b1ae490294dddc45b5383170", 0x1f}, {&(0x7f0000001d00)="5f1affbc65ba7145c73ee7755f8c72623f8913bc138a8d9c429babd4483d836188d22b4263152ff6969ed2d4d0a2446b856e9b62fd78d67e29d2d332d61d8a4864577f22c82f350c34cce745d02e2284ed53e490cc3b4997dc7cf1edc0ecdc46503589ae2d0cb79624481f01ca1d8132e8d4ef7ea7f1f619d444efcdfa7664ff7bd8bbd74286b0c0f08ae51e26d25f99ea7e389812e11ecb08c55e2128f6440669a057823ee4cc37b427c9b6234b3b", 0xaf}, {&(0x7f0000001dc0)="546edba41be19ffd88672f66160a64b1e01b081942708a7d84d39c442553485a9360fb66e4335dd6c1ed31c73f1a1a1060eff02c55969cdd1205e69c2bef4b3f4dca756a6fb64a0ce069cbfc067ba146e5f5555adcba2ebe42304b8c00d85349b9236eba9db6f6b019efa6cfa4f395754d249595e0a9674a5d0a344e0b91f7d972b83bd5d6b5623a0ddd6e49e9ee882fcdf3bb0629cab18c7b3c878402b3b91264082d71baa0fd9bcd3f116aacbdc83e17b03420ae8195bf2ae230cbee9cb26e8f6a27808187f6c83b6ae2a101c435b14282a53c4aa74eb9cb3beb70afd5d6", 0xdf}, {&(0x7f0000001ec0)="5a7c20d4039e3509eb7e29ddcb391218595bd02b866a42cb11f70df0cb65f5216e57a8dcb2c23fd5cce4f94d710e3dbf136f257df48f6319a9453f3bd7eec531075fa4fc7a16106d8ffb0d82b9211187b9f5ccb9a30d5c27fc8760487a9a63f0bd2a1b5285ab6f34d5d31ca0d8e52d5c3288fab81769d8b5387879b368f1e81d659c233f583dddf0083348872682", 0x8e}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="b80290e02e26e56aae9b0fe35b5481518262cb6e2da8c152f659a2d8a92b7f40168b33e1cf9e3105374db0b5f1f091e373d37a2daf68833973a0f629c129fb54f9c0d5055a8aea5cff1fadf8619f043a235111f86b4f8c9a9dcc08dccd5bb470429a26b559533a3dc86953090c96120319c7ee1cbdfe99b7e218ac757889d0834996edf2bbe4c8f85c99202ccf46e4e00af4fe3b79f54b9b0b028a94", 0x9c}, {&(0x7f0000003040)="b817a6157cba1393572f0ee75e29eeff27eafc2f20b0e5e9a64b2898d4636546cb76a13004d1a915a3640fc5d03bd214715a17b129aa59bd1075e70f722d32d3422545680fba68572cb01fe1ef6f0531cbbc575b488a1c2d087b745c3037327c0541b5c145c44de00f17f0e56841793b4b00819f29582df7968a95ab6489f821fc3a4f60df7f342c5a9f", 0x8a}, {&(0x7f0000003100)="97f43753a43ee2b3a8d50ea9ffd9c2a01e94e65938af5affb482e3ba6788e53c02c2de21bb4824c81c41cd2e74c1c7f9d7c990fe329f3ec74945bcb78d65d089f4f26b0ea4b05a3344302b45f3998c7d29567209beb6521aee99b50e0b2c913698f63d69a78a25d3fcd2b2683518050be9", 0x71}, {&(0x7f0000003180)="4dbbe31034efb0dc20ced47031f58962e518f99bbedbd2876025d5454435ff09326dda4e18a70df86d489d90e22163f7446c8422687657d7a5ff66cf3b9c0c9a6fc01d8a9d57490103e28e4b6418273e002da448924d18b8c3fe8799719bef6e603f8ed75dd28454a1bb1a5986d195da237907a18329d528b7", 0x79}], 0xa, &(0x7f00000032c0)=[{0xd0, 0x10c, 0x8000, "8f791dcf996d9117decb8b3e175c680adcb5a5f54afb3f371f187ee1c18edd7d73bf2a718bc689a7f8f43c369d7d810336c8519517194e328c055abd744bb4a84b67b299225dd6dd321d114fb5010a3677ee7e0983be73619d1eea4fba3b8e1413cf5d4a2ae73c331a4703ed3189cd489d0138487ecc8860592039bea14afad8565c9cc53538b3034a797e88de34222c5b0069bb6ba1780dc2e516565b93c2743525c19dee3f984e42951c3586a13d34650c92242ab63c5799ed"}, {0x70, 0x111, 0x1f, "00f0686c527f4fcb1288d8d13f4c9eed90d6f898b1f618d4bac54c60ab0ff30d6ff79a89ee964b3bbdf80eb76efaede4b32eea36dca59a1b38a554d2eacb1c095c4b538fbada750da79690134d8a92b6a8dfbe49b10eb084806b23"}, {0xf8, 0x109, 0x9, "3a391cd7679aa0c7a5e6e7f6c0d975fa7dec5fc2465116d76886fc828fabc8515a3e13750dd542fd3d2ecec160d554194c9f16e0896aa3491df6f5566898f1c229316ee46423bcce360dcb05d11a747fb247313e4f2b5768c12ebbcf4a3e7adb81e269673ba684d05d8d2f0f7c9448ac1ec6a67d67e9138dce8bf4966b79d189c7b18ed8f39f7b185b2a6c68efc04c53d288a190d6e97417beb6614e3395039551ee8816e20d9a71b8a367e9cae2ba0e625fff0138b4f10d210f1e855f5b7dcaefb3939597d3c0d1e53851a5f6a4bc5b709a5465050725b6987ec6d491e17b4829bc84ae"}], 0x238, 0x800}, 0x7}, {{&(0x7f0000003500)=@l2={0x1f, 0x4311, {0x0, 0xb88, 0x6, 0xffffffff, 0x1000, 0x7}, 0x3, 0x3}, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003580)="1f", 0x1}, {&(0x7f00000035c0)="986e08106fe39eb927f8c7be47c825ce0487f31197aabfe59f2c619230a80720bd3e10999319362c758116d283b80feb57234d2e59fc9672fec556aa1d2fc93474177ced7fdb7ced5c5099384fcd9711b2a3581df3ba640d419aa598611fd0dcf556671c118dff563489642144033fa3ecc2fcc54242679f8336c339845c55e92dd722bd968b3ec1", 0x88}, {&(0x7f0000003680)="cfc1369be8616d3fa960a6f0566b34446142ec96812c5d381dad79c3872c484571d425837607cabc955ebf24d09fe88cc1f1e212d788cb129949e14eba1e6d7ea844fe44ccdfe039cc144633dcad65aa6d4d45", 0x53}, {&(0x7f0000003700)="83d01fdfb61da9b41459b8f362b36dbe622e30ec2940d9e72151c9b4e8cb3009a4a6cab62941942d57ef6840960a3ac4c55a8239251acc2ef148e1d23dccee5eb6e2521286c840897e2f513a1216b1142b94f12067aebf05e569c665510ba08f7686f8ebf31440f3574b73bfd4977df210868befe5737c5d0c9925a2f3776342a5e7f4a1954cc17c", 0x88}, {&(0x7f00000037c0)="95b3f13777ff5946999f851306e467ee264b8e53b2e7a3c6a99132d30e4838b9f7b67681b59aa4158540e4eb515b88ff222f51a49f022407f11006eed5ffd3ff7df07f089214e91570c6ec396e5af3a61ace3885b35c69a745d5f0882b8dc05f34df937983a2ad72402958ff429deeb47013fa32875bafec7baa84b7ad1da68f1fb8cfad450cc137c22d01c53c2f146fd782e31646035636ee02d162917edec60d25258320950faccb814ea70768be386ab06a528ee9c1f1d26d6c105fc585df475cca3d76ed3f48f9812b64e302907b7930ed0b2d7e9807ca248a563486e0030756d8", 0xe3}, {&(0x7f00000038c0)="8feb32c255cdf381f97ff24763c1f307068a7e8e9c5ec81135840460e3e9bc9c31472cda0538400ca71cf04428e49a3f98bd985732329e49335ae805f8cf46629e3fc614d7ea2f6a8046fe10a1d4a64bea0fbc9272c0bf673eb8d9985a7f1e3bb1b4c8600f03c152e2416da516529ed96e0a3f7d8dd87938c48e7c0a3b133bc457482ca40b1832f0cb10f6236e63f0ce6dd08594fdc0e33e034541833249951be8c8", 0xa2}, {&(0x7f0000003980)="dc50750e1952eaf061a5662f726af9556fa6c44d69785ae0aba7668c4ece13cb4dc1f63331676a87ff07375aa861214515629d6225d63ce1afafae1f6ecafabee7b39fed0c2b304c94a1d5c5fabe5e27af9ed419f75b486edce35bca8facc8f3f464633e56d7aab7f022086d4736b5e8ec966220d8e8e733de6dfbb7cd610db8b3b62af7027e66d79dafd81b5213993e60cd79c98b", 0x95}, {&(0x7f0000003a40)="2b563f95ae6a2caeb8bee0f1a42e9d204e56046fd6d92438b208ec2b22c2ccbabee53952995b709aac77e63c1d73d8dd7b8cd1e260e098a969f65cc53d17c5d721974dc99e33b5a3df02a0df5ea0b2b5c8988ec523681df1bdd6df267a288507ad9aef198a738255c679e8113f", 0x6d}, {&(0x7f0000003ac0)="6771d4", 0x3}], 0x9, &(0x7f0000003bc0)=[{0x88, 0x10a, 0x9, "e218cfdb6f6a377b1888dac041a8151f400f922819315bc3f6f513e8bbd6ed84f3909b4a1b798bd9081ba14b9d15a53a50d94750dbe1360ace5a45a4439f61bd939b4ae81c42e7e18631808b2875da042e6633cb51f2295e20c69bcac557f6e11d1ce5cfdd73429e7cf3023636939dcbdf1153989d"}, {0x1010, 0xe3b927790704750b, 0xe665, "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"}, {0xa0, 0x100, 0xa07, "33a7a464e7dba44927eda50a7b344878483000334d6af83b325ae8034fd91e5ab7d4c76791c75e9e0a26714ac9a45331e724d2bc5675ffbc5295db3a65ddc4a40ec0dc78ea2b083427a73dc20a6470af549ee6bbc12477492baa3743f76a609096e3e983756cb0c912243eecaf1028caa310a0466025ea33e0e2fc2a804bb2d7aec362f7207e431367bc267789a327"}, {0x20, 0x3a, 0x80000000, "521d8d3a0986453f4d2eb6adb59a42"}], 0x1158, 0x24000000}, 0x8}, {{0x0, 0x0, &(0x7f0000004e40)=[{&(0x7f0000004d40)="7d5ec8d38555c7b8d7dfe5ce7ecc0304d90de77de67f5b846c5c57528a00664647fdb88a4956c18ce19218f3a991d8d17e95f9b34e6d430d6dccdadd5e5fa97a1a6b5d56a216b3f887f6f5867429904d2059fdc4dfe5a940c50e02c979915f86210100c8bde38e6fd4b08a92bd770a75e6cfc890f42708b54096b123f9d7c347b009c3ad901c3a86cada9768fd114a0d5e401771d09c52178927ad1660edafe359f5d17f858631fb21cc4a7457d8203513db9839b77ca57f1613b9f44b77ffdff19fa62bfc2e5e70d35c458249c191afcc6239fa1e066f1ba04a3d311f6521352806", 0xe2}], 0x1, &(0x7f0000004e80)=[{0x18, 0x1ff, 0x80000000, "991b7e5030af"}, {0x1010, 0x29, 0x10000, "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"}, {0x68, 0x101, 0x4, "c76e7f5962034be352351c0bac430663e25e658e07b3fcf7c216457b79fc672d9e404935030551a7009de0931f79e55710da8c301c0712af6e87422d9761d70794b64b0371a74e320058e199b6f0694a93c5e94368"}, {0x78, 0x0, 0x4, "7d4ba39391fe993949fa9273910d38c06d6e61f4ce335047d6a3f339be971cf16f2fd68e878622119d7673b2a6625d88bd89d2e8ec92f1ca487d336c5f7e8e8394bdaba7207940b4a347fa935899cbf47ed58f62d34ed428a94c49150e3fc71712cc"}, {0xf8, 0x104, 0x10001, "00280f593b9a9bc13ea2429fc5fca8430ca47ded5bf02cc92176b30e886fbb4e685af0dcbe3a12e7661577c14aff9ccc2823c12950b15de9f927883e80c1d2ba4843c3243f14500fbc4fd7e248c4f3604af26a7d26852bbe37093c19e94b06cf9971b3f4953a96c744dabe6b126593f2fd506c8380338f34874f8d448867e0bab0a746a751c56031a0a1e998b69b9e4c3e1906edfadb000d0dce6f315870c7a4d80812d1dddfa1210306e500d9355db893e4cbee80283bde1a0b5bab46eb1b3f4e1db14b5986d00c03f2e94d42f5ed932729ca72519d21b0a128edfc2cd4ef8b75c5645d"}, {0x90, 0x11f, 0xffffffffffffffff, "2992b1a52c22ce8114e1ddd8b4d010bd08e81feb9992fdf2103ca87dee6478f376183f8a73cf3c066b11f2074eb261829c7e5028d2dc56cb69abafd7e42ccd48474b1d5e93fb22d804e8e23ba656b261bb01ab722bbf3e724a96d809ca047c5d178614c2f40445b8488302909d8e02d01aa52dc761ac8af0d8e094da5319"}], 0x1290, 0x90}, 0xfffffffffffffffe}, {{&(0x7f0000006140)=@in6={0xa, 0x4e21, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0xf66}, 0x80, &(0x7f0000006400)=[{&(0x7f00000061c0)="b7a9f9811f6acf59418f14c0ca66f36eb6421dd56f406f1d28d62509588d017716f1d80cc922fe5ab46cfb211e0a19ce2d48d6b0f4b8df0fd1d37daa411c4d9bd7874918931406168665195a3bdbb0ccaf9dfcd842b001e2993a0e04fefd4522cc6fd4f45a9672d3d2793b1455cd85ea63c43ec0f143b76b5f3af3215a7e5bd291fbef86af9a0e91698056433bf34baceaf15ebf9b29bd9a28c7f31525e379e3816ca74a4a3f3a12ab3301f5f19495336dd3c339ead04127e66dbf1536924650562be74ecb853073ca09a7bffddc83bd0501a9c2a5a4732f59bf04b5dfa315e915c9077bcd971ba7c2ba2e", 0xeb}, {&(0x7f00000062c0)="ef897e65d7e766afba2d11a84a8cd9f075266fe69d4c0138beb0bfcf010a6c863591de4b029b64ff46f0fa17789851dab4b1fa3e4fb4d1ca057b05e5", 0x3c}, {&(0x7f0000006300)="e3746bf395691341458f4a568d8e3cbb8866a672fa88def01d57467e404172756643f7b7ece815a150058eef06249433888b944c777088a50fa9208fa2049d41f305d732a3db5f539fe2dabfadb2ed8596c09cb8a129b2e2ef0b4aca8777622cdd6f9d744965b925baf8003730420aa8444068c83b385fb7c31dea31f80ff47cf6c9d41fda7fb459cf5b2a4380fd78b12b87a23ac2553b54d71bc7a9f5f7f62bc7fe567ddfe3541df88b74031ed842fc1d", 0xb1}, {&(0x7f00000063c0)="67f68d420814d498acc1e1ba41a0342fcbe8c66b9571267d6effd48f037601594e1d7988afec4e91f5d4685bab48da9ce7522e2510979710c77bc34b5f", 0x3d}], 0x4, &(0x7f0000006440)=[{0x1010, 0x109, 0xae, "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"}, {0xa8, 0x11a, 0x8, "29353157a82dafc0cb903c277891cbe6da2a222cae482e393f33d6ad8f7db0ed5b4c97baf68ef5cf2bcddca3868462159a7943a4093398f38f88dcb556196f6c447e84a48e92bdd4962a6b7c6f578ca7cd1c3bd554b8556a355d807e942c75efe22052c9ac55c078897554537a92bfa7aee0e714716e41973a7dba82f33975edeff5f18e1848806062c9bdb8f29e2a4a4cb2902af76958"}, {0xf0, 0x117, 0x100000001, "1e1869a8f7089a79673051d4a5251bff4c32215cf684875fc0b0532dbb86afce34ec141dc4cb9538362e8feaf41aceff974d815ef1099df14ca5363d90cab51a8ef7ac880ef5305c675f7fe10f66f35cb3e252d4414ac114c81fb965251cdfd4947dde76fd2c4c82e1c81fec2f2f484a0ba9ff40b09ef11d972cbeea37c9e59404112b2b8963aeaadf4fe3e02f6c52fa9353990a57de94784714fa93fa778a2641953539a3685a0fb748ddd7ecc2be4c618b42dfcf570bb606710954c99e6d993f134ba3d1d5f53709125be388686abe107b573638029138a4822d4fc6"}], 0x11a8, 0x4000084}, 0x5}], 0x6, 0x4000000) ioctl(r1, 0x8912, &(0x7f0000000280)="006ffc2f07d82c99240970") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = inotify_init() r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rtc0\x00', 0x4000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={r3, 0x3, 0x1, 0x3, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) r4 = inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x20000000) r5 = creat(&(0x7f00000003c0)='./file0\x00', 0x8) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') openat(r1, &(0x7f00000005c0)='./file0\x00', 0x100, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xc0, r6, 0xd20, 0x70bd2d, 0x25dfdbfb, {0x2}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1d}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x88}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback=0x7f000001}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24000005}, 0x80) inotify_rm_watch(r2, r4) [ 1168.668529] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:01 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:01 executing program 4: bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:01 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x22f5]}, 0x10) 2018/06/03 08:33:01 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x101) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)={0x0, 0x1, 0x0, 0x0, 0x100000040000}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x60a73d67eb9375d9, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000100)=0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000240)=0xe8) connect$can_bcm(r0, &(0x7f0000000280)={0x1d, r1}, 0x10) r2 = dup(0xffffffffffffff9c) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x101000, 0x140) fchdir(r3) ioctl$KDDELIO(r3, 0x4b35, 0x7) 2018/06/03 08:33:01 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x85e7]}, 0x10) 2018/06/03 08:33:01 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x6517000000000000]}, 0x10) 2018/06/03 08:33:01 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:01 executing program 4: bpf$MAP_CREATE(0x1c00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:01 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400801, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000001640)={0x8, &(0x7f0000000100)=""/86, &(0x7f0000001580)=[{0x100000000, 0x55, 0x74, &(0x7f0000000180)=""/85}, {0x9, 0x8a, 0xd0c, &(0x7f0000000200)=""/138}, {0xfc7, 0x1000, 0x3, &(0x7f0000000300)=""/4096}, {0x20, 0x14, 0x8000, &(0x7f0000001300)=""/20}, {0x1f, 0x10, 0x5, &(0x7f0000001340)=""/16}, {0x7fff, 0xa7, 0x4, &(0x7f0000001380)=""/167}, {0x7, 0xf5, 0x3ff, &(0x7f0000001440)=""/245}, {0x2, 0x0, 0xfffffffffffffbff, &(0x7f0000001540)}]}) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000040)={0x1000000000000000, 0x2000, 0xffff, 0xd, 0x1c}) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x10}}], 0x2, 0x0) [ 1168.945754] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:01 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:02 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1f4]}, 0x10) 2018/06/03 08:33:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x80ffffff]}, 0x10) 2018/06/03 08:33:02 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x7, &(0x7f0000287000), &(0x7f0000a25ff0)) r1 = dup(r0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0x3, 0x0, 0x9, {r2, r3+30000000}, 0xbc, 0xffffffff80000000}) 2018/06/03 08:33:02 executing program 4: bpf$MAP_CREATE(0x80020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:02 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:02 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5cc5]}, 0x10) 2018/06/03 08:33:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:02 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0x1b}, 0x0, r3}) 2018/06/03 08:33:02 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:02 executing program 4: bpf$MAP_CREATE(0x4600, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1169.607307] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:02 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x4) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000480)={0x0, 0x2710}, 0x10) recvmmsg(r2, &(0x7f0000fc5fc7)=[{{0x0, 0x0, &(0x7f000062cfe0), 0x0, &(0x7f0000fc1f6e)=""/146, 0x92}}], 0x1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=@polexpire={0xc0, 0x1b, 0x0, 0x0, 0x0, {{{@in=@dev={0xac, 0x14, 0x14}, @in6=@dev={0xfe, 0x80}}}}}, 0xc0}, 0x1}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x400000b0}]}) 2018/06/03 08:33:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3d85]}, 0x10) 2018/06/03 08:33:02 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2d1d]}, 0x10) 2018/06/03 08:33:02 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x100000000000000]}, 0x10) [ 1169.928773] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:03 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:03 executing program 4: bpf$MAP_CREATE(0x4802000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x45]}, 0x10) 2018/06/03 08:33:03 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdd3f]}, 0x10) 2018/06/03 08:33:03 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000400)="c626260600000000000000") r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x4, 0x440) ioctl(r0, 0x100000001, &(0x7f0000000280)="5a2cdf0d8cb1504d95e4d0a9b0b5849df7aceaf8a41aca86e58caae7dc0fad8807ae9606e63ed0a0040372c72b59c204f1b18a5064736226824b1bd1f4393891e3e593251d98dc43f9ec4b075aa862c0bbf0369f8a3658a9f26cf65d053c387e5122cdda9b8faed7a1af65aeadae30f62a2d8bafaf936ed9bd68405bd3b8999283a7bb39f273c864dbd3e002e2f7f2a5d1f69eb84ec230fd6fae3f68cd1ac30edaf35573eb9906b02e99a6f8ed2fec1086232cf899d910fabc082afd923963fa658bdca46572c46648a8c79d31c6861c5ee71c86d8206bcc9d76ea440bcd297bc6679050d04b62f8723a262f72616d24e60391") execve(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000540)=[&(0x7f0000000440)='/dev/adsp#\x00', &(0x7f0000000480)='vboxnet1nodev.\\\x00', &(0x7f00000004c0)='-$\x00', &(0x7f0000000500)='/dev/adsp#\x00'], &(0x7f0000000680)=[&(0x7f0000000580)='/dev/adsp#\x00', &(0x7f00000005c0)='/dev/autofs\x00', &(0x7f0000000600)="5df72d6b657972696e6700", &(0x7f0000000640)='/dev/adsp#\x00']) r3 = openat(r2, &(0x7f0000000080)='./file0\x00', 0x400, 0x100) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xe73000)=nil, 0xe73000, 0x1, 0x3f, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000880)={0xf9, 0x0, [0x100000001, 0x4, 0x40000000000000, 0x7]}) socketpair$ax25(0x3, 0x0, 0xcf, &(0x7f00000006c0)) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000700)={0xb62d, 0x800, 0x9, 0x2, 0xffffffffffffff01, 0x400, 0x6, 0x4, 0x1, 0xcba9, 0x25d4615b, 0x80000001}) setfsuid(r4) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000380)={0x0, 0x9, 0x3, 0x36, &(0x7f0000ffe000/0x1000)=nil}) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000780)="0c94521ef7e5702d04b609622fc5d7eb309df04e6ddc9ca529f2e6fbcde78f8ba77bb4c45c6c36b1300fccbed465e36274a659deb914ca61012a0f3d26ee446f53776c0dd6e510b1a4daf1c0dac5a9") r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f0000e6f000)={0xa, 0x2, 0x1000000000000, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x1c) madvise(&(0x7f0000c2f000/0x1000)=nil, 0x1000, 0xd) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r6, {0x2, 0x1, @multicast2=0xe0000002}, 0x4, 0x0, 0x2}}, 0x2e) sendmsg$nl_crypto(r7, &(0x7f0000000240)={&(0x7f0000041000)={0x10, 0x0, 0x0, 0x2}, 0x7, &(0x7f0000e6c000)={&(0x7f0000e6cff0)=@delrng={0x10, 0x14, 0x200, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8800}, 0x7d) 2018/06/03 08:33:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:03 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x58b0000]}, 0x10) 2018/06/03 08:33:03 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@mcast2={0xff, 0x2, [], 0x1}, @empty, @dev={0xfe, 0x80, [], 0xb}, 0x1, 0xe00, 0x2, 0x0, 0x3f, 0x2000000, r3}) 2018/06/03 08:33:03 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1170.516636] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:03 executing program 4: bpf$MAP_CREATE(0x5100000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:03 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x25a2]}, 0x10) 2018/06/03 08:33:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x9d11000000000000]}, 0x10) 2018/06/03 08:33:03 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x20011, r4, 0x0) ioctl$TIOCCONS(r2, 0x541d) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000100)=0x6) r5 = semget$private(0x0, 0x3, 0x400) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000140)=[0x9, 0xffffffffffff3f3c, 0x8]) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000280)) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2018/06/03 08:33:03 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x852e]}, 0x10) 2018/06/03 08:33:03 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:03 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x7000000]}, 0x10) 2018/06/03 08:33:03 executing program 4: bpf$MAP_CREATE(0x72020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1170.826628] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:04 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1100]}, 0x10) 2018/06/03 08:33:04 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="50000000150025020000000000000000ac1414bb0000000000fffffffffffffffe01000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x50}, 0x1}, 0x0) 2018/06/03 08:33:04 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xeda7]}, 0x10) 2018/06/03 08:33:04 executing program 4: bpf$MAP_CREATE(0x1a000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:04 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x45000000]}, 0x10) 2018/06/03 08:33:04 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000040)={0x200, 0x3, {0x3, 0x0, 0x1000, 0x2, 0x20}}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) [ 1171.355197] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:04 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:04 executing program 4: bpf$MAP_CREATE(0x5e000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:04 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x410000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) accept4$inet6(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000180)=0x1c, 0x80000) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4000, 0x0) 2018/06/03 08:33:04 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x5cc5]}, 0x10) 2018/06/03 08:33:04 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x700]}, 0x10) 2018/06/03 08:33:04 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x344d]}, 0x10) [ 1171.639644] Unknown ioctl -1067429051 [ 1171.682631] IPVS: ftp: loaded support on port[0] = 21 [ 1171.702687] Unknown ioctl -1067429051 2018/06/03 08:33:06 executing program 4: bpf$MAP_CREATE(0x82020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:06 executing program 1: msgrcv(0x0, &(0x7f00007d4000)={0x0, ""/8}, 0x10, 0x0, 0xfffffffffffffffe) r0 = msgget(0x0, 0x8) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/245) 2018/06/03 08:33:06 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xf315]}, 0x10) 2018/06/03 08:33:06 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6517000000000000]}, 0x10) 2018/06/03 08:33:06 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe]}, 0x10) 2018/06/03 08:33:06 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:33:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:06 executing program 1: r0 = socket(0x1, 0x200000002, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='security.capability\x00', &(0x7f0000000240)='cpuset)em1-ppp0posix_acl_access\x00', 0x20, 0x1) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x3, 0xfff}, &(0x7f0000000180)=0x8) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0xb4, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x1ff}]}, 0x10) r3 = dup2(r0, r1) accept$packet(r3, 0x0, &(0x7f0000000080)) 2018/06/03 08:33:06 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3d85000000000000]}, 0x10) 2018/06/03 08:33:06 executing program 4: bpf$MAP_CREATE(0x5e010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1173.428489] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:06 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdd3f0000]}, 0x10) 2018/06/03 08:33:06 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1173.720857] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:06 executing program 4: bpf$MAP_CREATE(0x6c020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:06 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9596000000000000]}, 0x10) 2018/06/03 08:33:06 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x9596000000000000]}, 0x10) 2018/06/03 08:33:06 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x90, "0d9f1713990fda69e111deaf6a52f883426051fde98505d50e8cb1c865706a0209e61f53c43a3af8c43fedae287c9677c2bedf8e30184f350a1e5f63bd032a43755e7500af424e166b8e6f81bcaaf2a79d13701e0d957386583c7db1e88a0daa5a4e742ccbceb0b51b9a5927355c315a14e1498f691c5dcc536dade75fbdcc9d0b32dc6977bcc62dde0b5eb132db4796"}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000100)={r1, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000180)={r2, 0x2}, &(0x7f00000001c0)=0x8) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000200)=""/213, &(0x7f0000000300)=0xd5) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000340)={0x5c, @empty, 0x4e21, 0x0, 'wrr\x00', 0x27, 0x8001, 0x6d}, 0x2c) r3 = accept(r0, 0x0, &(0x7f0000000380)) r4 = accept$unix(r3, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000004c0)={0x1, &(0x7f0000000480)=[{0x9, 0x100000001, 0x0, 0x2}]}, 0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=r1, &(0x7f0000000540)=0x4) r6 = syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0x5, 0x141042) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f00000005c0)=0x4) ioctl$VT_OPENQRY(r6, 0x5600, &(0x7f0000000600)) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000640)) getsockname$netlink(r3, &(0x7f0000000680), &(0x7f00000006c0)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000700)={r2, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000740)={r5, 0x1f}, 0x8) ioctl$KDSETMODE(r6, 0x4b3a, 0x7) getresgid(&(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) open_by_handle_at(r3, &(0x7f0000000840)={0x40, 0x3, "cbf640e1f4fb19f8bf6bebd5e03eb7a9ae63e4c93f7c8e6ca1641f776df56359bfa34dcb3e80ea95fc08cc5c68f563d747a2628f70b395ac"}, 0x50a00) r7 = accept4$packet(r3, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000008c0)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'syz_tun\x00', r8}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000940)=r6, 0x4) ioctl$KVM_DEASSIGN_DEV_IRQ(r6, 0x4040ae75, &(0x7f0000000980)={0x1, 0x100000000, 0x80000000, 0x300}) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f00000009c0)={0x5, 0xffff, 0xa, 0x9}, 0x10) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000a80)={r2, 0x36863ab9, 0x0, 0xed5, 0x7}, &(0x7f0000000ac0)=0x18) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b40)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10102000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x94, r9, 0x820, 0x70bd2a, 0x25dfdbfb, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf7f3}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5}]}]}, 0x94}, 0x1}, 0x4000080) 2018/06/03 08:33:06 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xb5ad]}, 0x10) 2018/06/03 08:33:06 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:06 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:06 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x8000) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x10000, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) [ 1174.237257] IPVS: length: 213 != 24 2018/06/03 08:33:07 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:07 executing program 4: bpf$MAP_CREATE(0x240, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1174.260431] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20001 [ 1174.286384] IPVS: ftp: loaded support on port[0] = 21 [ 1174.304305] IPVS: length: 213 != 24 2018/06/03 08:33:07 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd06]}, 0x10) 2018/06/03 08:33:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x153a000000000000]}, 0x10) [ 1174.331588] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:20001 2018/06/03 08:33:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xffffffff, &(0x7f0000000100)="0047fc2f07d82c99240970") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@nat={'bat\x00', 0x19, 0x5, 0xd4, [0x20000900, 0x0, 0x0, 0x20000b08, 0x20000c58], 0x0, &(0x7f0000000000), &(0x7f0000001c40)=ANY=[@ANYPTR=&(0x7f00000009c0)=ANY=[@ANYRES16=r1, @ANYBLOB, @ANYRES64=r1, @ANYRES32=r1, @ANYRES16=r0, @ANYBLOB="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", @ANYPTR], @ANYRES16=r0, @ANYRES16=r0, @ANYPTR64=&(0x7f0000001a00)=ANY=[@ANYRES64=r1, @ANYBLOB="231e7174acdb9f8da59b6adcf2e970986bf5229f770a06ae89d2410382b76ffad26f1c3dcc2e9d443161a6e99317f0e0864a863db620339b16c22a94f968e22e55fa59055867bd6ebff812d13fbb021d890b121e3b6b4cda244aa7d816e17bac200832dd19fc8e62d2a8ae0f51f64e89cf8133feaaea3f88fe39bf3cd17e1ee334e99b8ecaf75866e33695aa99f6d342834e102c698f6295bac6a4464a41df71b9faaddfcc136e19a00377d4945840c49fe363b21f2094a20e8879328ec280135741", @ANYRES32=r1, @ANYBLOB="6b207455594b7a724bedb333d5057011cf71839286c34d90a81eb0853540c22992e29909b715016dec57a633a3cefe941557ee52eb1db33a250c900b7ed86b9ca0b25617193cae0e69f79898550d70ac903547b2512a041fd33b063f12ec7ee0", @ANYRES32=r0, @ANYBLOB, @ANYBLOB="5b57c5066faf634d7f74c6bd006677ca2393137d652ab216f3d718e610ccb8bd6754e63ae05a6d00c58d14f11c8c01e3b4354327905e2c63ba39df57a7510b26b9065ce106a20c7512e22a036aac286629a7b66b787fcb6abe5dc30ea04b009cf7b1ddf71feaab373ed4a38081aa177ab5b039d3699c191e5bae19869c517f6ad54da14dffb598f11b50bcf37dc7dfdc7f6ddf9a25fe5aba34aa98609621b4bc793e68325ba5b106dbc7663b137efd2c3e4c3a04c50acb6c39b3973b3cf9cddd3bac6a8a365f09ed0edff5cba4668b1902a4febb32ced4d0aab3739b5164d80a592721e214c28cd81375cb3139112843a315caee4ee43a852d67b37f4c"], @ANYBLOB="91ac6d7127a9deb1761e78998db1d3764efb4379eeae91f3723f52c35ad3773d263b4a610130d3d44809aeda0a2e3e2d6a42f473e07bc44af3affdad5d12aea05bbf3cf1b0629f2fe571a8d929166e49f3e7a3a1126848f50829d20b89b533661c49db51823ba960632740f1639ba505f55f6f4cb617fd7d77f9d7c0098dbd35b521fd13f7b343f2353c29c6a7a4845d83d1db0420a764a743129e46c3fefade8669ac67995ebe968cb3c97b957fbc43877197cf15923b5ba0d29ba8be618f29"]}, 0x14c) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000000c0)=0x68) 2018/06/03 08:33:07 executing program 4: bpf$MAP_CREATE(0x66, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:07 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x757f0000]}, 0x10) 2018/06/03 08:33:07 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2d1d000000000000]}, 0x10) 2018/06/03 08:33:07 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x40030000000000]}, 0x10) 2018/06/03 08:33:07 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1174.514972] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 1174.600946] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 1174.669498] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:07 executing program 4: bpf$MAP_CREATE(0x4c, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:07 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:07 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x56fd]}, 0x10) 2018/06/03 08:33:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xca9d]}, 0x10) 2018/06/03 08:33:07 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x65d00000]}, 0x10) 2018/06/03 08:33:07 executing program 1: socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) prctl$seccomp(0x2f, 0x4, &(0x7f00005d295e)={0x0, &(0x7f0000ab9000)}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000000c0)={'bond_slave_0\x00', 0x997}) seccomp(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4, 0xbfc, 0xff, 0xca}, {0xa65, 0x20ce, 0x6}, {0xff, 0x3ff, 0x4, 0x6}, {0x0, 0x5, 0x0, 0x9}, {0x5, 0x7, 0x9, 0xf4b6}]}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200, 0x0) 2018/06/03 08:33:07 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:07 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80400, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f0000000040)=""/166, 0x7}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) [ 1175.194795] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:08 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:08 executing program 4: bpf$MAP_CREATE(0xf101000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xadb5]}, 0x10) 2018/06/03 08:33:08 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc0ffffff]}, 0x10) 2018/06/03 08:33:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @multicast2}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5800000029000e062cbd7000ffdbdf25000000000a1ea8aefc10e2d3b033b8faaf69d68a382f6a872978897af7a0b8937f6f11b6caeb90ae9e495bf6dd73b0c42697a6f2df614edfd263b01485590e9867284b2362c4e333dbc1e2692807bc9240a6e83ea6924491c9714f0a99a6e756187ffc4ac34e4e4f79cb6a6e0b7109394807fbaccd31a6ebf9f01254fc70d4eebde785fcbf240781c54bef2226a05b799fbf2652826e618e575f90c52ca4344126046b9b", @ANYRES32=r2, @ANYBLOB="1000f2ffffff10000f00000008000100636271001400020010000200040205e9080000000600000008000500ff07000008000500ff0200000800050040080000"], 0x58}, 0x1, 0x0, 0x0, 0x91}, 0x80) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x4020009, 0x4001a, 0x0, 0xffffffffffffffff}) r4 = dup3(r0, r3, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000280)={0x100000300, 0xa}) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000440)={0x0, 0x8, 0xfffffffffffffff8, 0x0, 0xd7, 0x7fffffff, 0xb1, 0xffffffffffff7fff, {0x0, @in6={{0xa, 0x4e22, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}, 0x1, 0xfd9b, 0x1000, 0x57b, 0x10001}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000500)={r5, @in6={{0xa, 0x4e22, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0xfffffffffffffffc}}, 0xffffffff, 0x9, 0xffffffff00000000, 0x8}, 0x98) 2018/06/03 08:33:08 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xad790000]}, 0x10) 2018/06/03 08:33:08 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:08 executing program 4: bpf$MAP_CREATE(0x32020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1175.450062] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x22f5]}, 0x10) 2018/06/03 08:33:08 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:08 executing program 4: bpf$MAP_CREATE(0x4201, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:08 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2e85]}, 0x10) 2018/06/03 08:33:08 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xeda70000]}, 0x10) 2018/06/03 08:33:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:08 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x0, 0x3, 0x80000000, 0x3, 0xffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:33:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000040)=0x3f, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4800) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000080)) 2018/06/03 08:33:08 executing program 4: bpf$MAP_CREATE(0xec03, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:08 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1176.128581] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:08 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getpeername$netrom(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4) 2018/06/03 08:33:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x8b05]}, 0x10) 2018/06/03 08:33:09 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5d9c]}, 0x10) 2018/06/03 08:33:09 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:09 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd06000000000000]}, 0x10) 2018/06/03 08:33:09 executing program 4: bpf$MAP_CREATE(0x28, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1176.482120] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x82) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0x881806) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000240)=""/252) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) sync() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in=@multicast2, @in6}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000180)=0xe8) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x101ff, 0x3, 0x1, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000480)={{0x4, 0x4, 0x2, 0x8, "eadf15f3dc1ad6770a02a0af26887b67bb86daaf51f2e338f9661ae03bc46c3709f70d7f6ae3808f3c1398a5", 0x24fd}, 0xffff, [0x74e6, 0xfffffffffffffffc, 0x6, 0x7fffffff, 0x400, 0x4, 0x7, 0x1, 0x3, 0x0, 0x18b6fb1b, 0x8000, 0x3, 0x2, 0x1, 0x3, 0x45c11193, 0x800, 0x80000001, 0x6, 0x80000001, 0x70, 0x0, 0x5, 0x6, 0x5, 0x1, 0x401, 0x1, 0x6f0, 0x800, 0x80008000000000, 0x7ff, 0x1ff, 0x7, 0x1, 0x100, 0x1, 0x53, 0x20, 0x5d3, 0x80000000, 0x6e563e4f, 0x6, 0x0, 0x3f, 0x1, 0x5, 0x7, 0x1, 0xec, 0x0, 0x9b04, 0x3, 0x80000001, 0xca, 0x3, 0xfffffffffffffffe, 0x3a56, 0x9, 0xcc1, 0x400, 0x2, 0xfff, 0x7fff, 0x0, 0x5, 0x80000001, 0x3, 0x2, 0x100, 0x4d6, 0x8001, 0x2, 0x2, 0x800, 0x4, 0x100000000, 0xffffffff80000001, 0x80000000, 0x101, 0x7, 0x7, 0x800, 0x3, 0x0, 0x11f, 0x5, 0x4, 0x13, 0x2, 0x2, 0x4, 0xfffffffffffffff8, 0x6, 0x3, 0x9, 0x9, 0x8b, 0x3, 0x9, 0x2, 0xffffffffffffff00, 0x71bd, 0x9, 0x6, 0xffff, 0x0, 0x8, 0x4, 0x7, 0x1, 0x7f, 0x7b2, 0x6, 0x3, 0x47, 0x2, 0x8, 0x2f, 0x7, 0x2, 0x5, 0x7, 0x40, 0xfff, 0x2, 0xfffffffe00], {0x77359400}}) 2018/06/03 08:33:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xc805000000000000]}, 0x10) 2018/06/03 08:33:09 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:09 executing program 4: bpf$MAP_CREATE(0x228, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:09 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x8d62000000000000]}, 0x10) 2018/06/03 08:33:09 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9695]}, 0x10) 2018/06/03 08:33:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x40, 0x0) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="033c030078540500"], &(0x7f0000000140), 0x1400) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x2, [0x0, 0x0]}, &(0x7f0000000200)=0xc) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000180)=[{0x7, 0x10001}, {0x8, 0xffffffff}], 0x2) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @rand_addr}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond_slave_0\x00', r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:33:09 executing program 4: bpf$MAP_CREATE(0x4400000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:09 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1177.083097] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:09 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x853d]}, 0x10) 2018/06/03 08:33:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x852e0000]}, 0x10) 2018/06/03 08:33:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) pipe2(&(0x7f0000000140), 0x80000) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000000)={0x6}) r1 = gettid() timer_create(0x0, &(0x7f0000066000), &(0x7f00009b1ffc)) shmget(0x2, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) r2 = syz_open_procfs(r1, &(0x7f0000000040)='smaps_rollup\x00') ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000100)={0x2, 0x3ff}) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000000080)) tkill(0x0, 0x0) 2018/06/03 08:33:10 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:10 executing program 4: bpf$MAP_CREATE(0x7803000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:10 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4d340000]}, 0x10) 2018/06/03 08:33:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3d850000]}, 0x10) 2018/06/03 08:33:10 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:10 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xf, "75699c00cd8fdb656bec9c9900cd08"}, &(0x7f00000001c0)=0x17) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r1, 0x4, 0x2, 0x9}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1}, 0x0) 2018/06/03 08:33:10 executing program 4: bpf$MAP_CREATE(0x5801000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1177.463815] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:10 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf401]}, 0x10) 2018/06/03 08:33:10 executing program 4: bpf$MAP_CREATE(0xa00000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:10 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:10 executing program 1: r0 = socket$inet6(0xa, 0x2000000000001, 0x6) r1 = socket(0x11, 0x80f, 0x7ff) connect$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x1, 0x1, 0x7, 0xfff, 0x401, "922a0c166c698ac01d8b6f5d4d487eb3e6fe05cf54a46a279667c0739fd3f15688966e7a9af076abccb3595aab60ad353ec34664be951272824ab54e30606e", 0x15}, 0x60) r2 = msgget(0x2, 0x4) msgctl$IPC_RMID(r2, 0x0) connect$inet6(r0, &(0x7f000000d000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x10040000000000b}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@dest_unreach={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, 'p+l', 0x0, 0x6, 0x0, @mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80}, [], "33cc6533eb08a2e9"}}}}}}}, 0x0) 2018/06/03 08:33:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x300]}, 0x10) 2018/06/03 08:33:10 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2d1d]}, 0x10) 2018/06/03 08:33:10 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = getpgid(0xffffffffffffffff) ptrace$getenv(0x4201, r1, 0x8, &(0x7f0000000000)) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7, 0xa4400) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0xff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r3, 0xff}, &(0x7f0000000140)=0x8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000180)=0x2) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r6}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r6}) 2018/06/03 08:33:10 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1177.929276] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xcd90]}, 0x10) 2018/06/03 08:33:10 executing program 4: bpf$MAP_CREATE(0x4000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:10 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:10 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6e1d]}, 0x10) 2018/06/03 08:33:10 executing program 4: bpf$MAP_CREATE(0x3c020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:10 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:10 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xf5db0000]}, 0x10) [ 1178.239962] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:11 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd50b]}, 0x10) 2018/06/03 08:33:11 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6855]}, 0x10) 2018/06/03 08:33:11 executing program 4: bpf$MAP_CREATE(0x146, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:11 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xf5db]}, 0x10) 2018/06/03 08:33:11 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0x22, &(0x7f0000000000), &(0x7f0000000040)=0xb) 2018/06/03 08:33:11 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x549040, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x300, 0x70bd27, 0x25dfdbfe, {0x2}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8090}, 0x4800) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) 2018/06/03 08:33:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:11 executing program 4: bpf$MAP_CREATE(0x156, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:11 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1178.965358] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:11 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xbde1000000000000]}, 0x10) 2018/06/03 08:33:11 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x58b000000000000]}, 0x10) 2018/06/03 08:33:11 executing program 1: r0 = socket(0x11, 0x100000805, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="110000000000000000004500001c000000000089907800000000e00001"], 0xfdef) 2018/06/03 08:33:11 executing program 4: bpf$MAP_CREATE(0x3ea, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:11 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:11 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45]}, 0x10) 2018/06/03 08:33:12 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x8d620000]}, 0x10) 2018/06/03 08:33:12 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6517000000000000]}, 0x10) 2018/06/03 08:33:12 executing program 4: bpf$MAP_CREATE(0x2202000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:12 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:12 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000001980)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001a00)=0x80) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001a40)={{{@in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @in, 0x4e21, 0x8, 0x4e21, 0x349, 0xa, 0xa0, 0xa0, 0x32, r4, r5}, {0xad4, 0x2, 0x100000001, 0x10000, 0x4a50, 0x100, 0x7, 0x2}, {0x3, 0x3, 0x6, 0x25af}, 0x200, 0x0, 0x1, 0x1, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d5, 0x3c}, 0xa, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x34ff, 0x3, 0x1, 0x0, 0x0, 0x3, 0x7ff}}, 0xe8) 2018/06/03 08:33:13 executing program 4: bpf$MAP_CREATE(0x86010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:13 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe000000]}, 0x10) 2018/06/03 08:33:13 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd06000000000000]}, 0x10) 2018/06/03 08:33:13 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4ded0000]}, 0x10) 2018/06/03 08:33:13 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:13 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000001980)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001a00)=0x80) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001a40)={{{@in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @in, 0x4e21, 0x8, 0x4e21, 0x349, 0xa, 0xa0, 0xa0, 0x32, r4, r5}, {0xad4, 0x2, 0x100000001, 0x10000, 0x4a50, 0x100, 0x7, 0x2}, {0x3, 0x3, 0x6, 0x25af}, 0x200, 0x0, 0x1, 0x1, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d5, 0x3c}, 0xa, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x34ff, 0x3, 0x1, 0x0, 0x0, 0x3, 0x7ff}}, 0xe8) 2018/06/03 08:33:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ff], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:13 executing program 5: r0 = socket$kcm(0x29, 0x4, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4e26, 0xb53d043cb1aef20a) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xffff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r2, 0x48, &(0x7f00000000c0)=[@in6={0xa, 0x4e22, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x1f}, @in6={0xa, 0x4e21, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x8}, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}]}, &(0x7f0000000180)=0x10) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x100) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f00000001c0)={0x3, 0xffffffff}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) getsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000200), &(0x7f0000000280)=0x4) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) 2018/06/03 08:33:13 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:13 executing program 4: bpf$MAP_CREATE(0x300, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x5d9c]}, 0x10) 2018/06/03 08:33:14 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00_\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:33:14 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xddf80000]}, 0x10) 2018/06/03 08:33:14 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x153a0000]}, 0x10) 2018/06/03 08:33:14 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:14 executing program 4: bpf$MAP_CREATE(0x4400, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:14 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000001980)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001a00)=0x80) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001a40)={{{@in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @in, 0x4e21, 0x8, 0x4e21, 0x349, 0xa, 0xa0, 0xa0, 0x32, r4, r5}, {0xad4, 0x2, 0x100000001, 0x10000, 0x4a50, 0x100, 0x7, 0x2}, {0x3, 0x3, 0x6, 0x25af}, 0x200, 0x0, 0x1, 0x1, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d5, 0x3c}, 0xa, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x34ff, 0x3, 0x1, 0x0, 0x0, 0x3, 0x7ff}}, 0xe8) 2018/06/03 08:33:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:14 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:14 executing program 4: bpf$MAP_CREATE(0x6400, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1181.529936] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:14 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x4d34]}, 0x10) 2018/06/03 08:33:14 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3d850000]}, 0x10) 2018/06/03 08:33:14 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:14 executing program 4: bpf$MAP_CREATE(0x6000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:14 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x25a20000]}, 0x10) 2018/06/03 08:33:14 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1181.882215] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:14 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x42000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x2, 0x3, 0x80000001, 0x1, 0x7}, 0xffffffff, 0x100000000, 'id1\x00', 'timer1\x00', 0x0, 0xfffffffffffffffc, 0x7, 0x20, 0x8}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:33:14 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x7f75]}, 0x10) 2018/06/03 08:33:14 executing program 4: bpf$MAP_CREATE(0x7a020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:14 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x9695]}, 0x10) 2018/06/03 08:33:14 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1182.072767] IPVS: ftp: loaded support on port[0] = 21 [ 1182.161922] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:15 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xfd560000]}, 0x10) 2018/06/03 08:33:15 executing program 4: bpf$MAP_CREATE(0x7e01, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:15 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x59]}, 0x10) 2018/06/03 08:33:15 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xb945]}, 0x10) 2018/06/03 08:33:15 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540)='/dev/hwrng\x00', 0xa0800, 0x0) r1 = memfd_create(&(0x7f0000000580)='loi\x00', 0x2) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x7, 0x0, 0x360, &(0x7f0000000040)=[0x0], 0x1}, 0xfffffffffffffeaa) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) mq_unlink(&(0x7f0000000180)='user%vboxnet1cpusetvmnet1-\x00') ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) r6 = add_key(&(0x7f0000000300)='ceph\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffc) fgetxattr(r0, &(0x7f0000000400)=@random={'osx.', 'cpuset!{\x00'}, &(0x7f0000000440)=""/232, 0xe8) request_key(&(0x7f0000000140)='big_key\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)='gre0\x00', r6) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000200)=""/7) modify_ldt$write2(0x11, &(0x7f0000000000)={0x1, 0x20001800, 0x2400, 0x1, 0x0, 0xfffe000000000000, 0xc1f1, 0x101, 0x8001, 0x17384fc4}, 0x10) ftruncate(r0, 0x9) 2018/06/03 08:33:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000001980)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001a00)=0x80) r5 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001a40)={{{@in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @in, 0x4e21, 0x8, 0x4e21, 0x349, 0xa, 0xa0, 0xa0, 0x32, r4, r5}, {0xad4, 0x2, 0x100000001, 0x10000, 0x4a50, 0x100, 0x7, 0x2}, {0x3, 0x3, 0x6, 0x25af}, 0x200, 0x0, 0x1, 0x1, 0x1}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d5, 0x3c}, 0xa, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x34ff, 0x3, 0x1, 0x0, 0x0, 0x3, 0x7ff}}, 0xe8) 2018/06/03 08:33:15 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1182.537667] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:15 executing program 4: bpf$MAP_CREATE(0x376, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xbf0d]}, 0x10) [ 1182.754111] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:16 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2e85]}, 0x10) 2018/06/03 08:33:16 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x25a2000000000000]}, 0x10) 2018/06/03 08:33:16 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:16 executing program 4: bpf$MAP_CREATE(0x1e, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xbd5]}, 0x10) 2018/06/03 08:33:16 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000001980)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001a00)=0x80) getuid() 2018/06/03 08:33:16 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97890b1400000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:16 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) socketpair$inet6(0xa, 0x2, 0x40, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x4, 0x4}, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r4, r6}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) 2018/06/03 08:33:16 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1183.489303] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:16 executing program 4: bpf$MAP_CREATE(0x7201000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x757f]}, 0x10) 2018/06/03 08:33:16 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x344d]}, 0x10) 2018/06/03 08:33:16 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:16 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45a5]}, 0x10) 2018/06/03 08:33:16 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:16 executing program 4: bpf$MAP_CREATE(0x5202000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:16 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd5c40000]}, 0x10) 2018/06/03 08:33:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x5d9c000000000000]}, 0x10) [ 1183.784521] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:16 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:16 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbd28000000000000]}, 0x10) 2018/06/03 08:33:16 executing program 4: bpf$MAP_CREATE(0x2e, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:16 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x274401, 0x0) mq_getsetattr(r0, &(0x7f00000000c0)={0x7fff, 0x5, 0x9, 0x3, 0x18, 0xac34, 0xfffffffffffffffa, 0xfffffffffffffff7}, &(0x7f0000000100)) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x30000, 0x0) write$cgroup_int(r2, &(0x7f0000000040)={[0x35, 0x31, 0x37]}, 0x3) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) [ 1184.086095] IPVS: ftp: loaded support on port[0] = 21 [ 1184.140410] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:17 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x15f30000]}, 0x10) 2018/06/03 08:33:17 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5900]}, 0x10) 2018/06/03 08:33:17 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:17 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xa545000000000000]}, 0x10) 2018/06/03 08:33:17 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000001980)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001a00)=0x80) getuid() 2018/06/03 08:33:17 executing program 4: bpf$MAP_CREATE(0x1c000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:17 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x3, &(0x7f0000000000)="005efc2f154bc8592b2acd8eef9e973a5a8da2abcb5ebc60afe317ef") unshare(0x60000000) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xa4c, 0x40000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x6, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) rt_sigreturn() 2018/06/03 08:33:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97890b14], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:17 executing program 4: bpf$MAP_CREATE(0x6c00, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1184.481821] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:17 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x7db30000]}, 0x10) 2018/06/03 08:33:18 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xb945]}, 0x10) 2018/06/03 08:33:18 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbde1000000000000]}, 0x10) 2018/06/03 08:33:18 executing program 4: bpf$MAP_CREATE(0x4a00, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:18 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:18 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x200000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000140)={0x6, {{0xa, 0x4e23, 0x3, @loopback={0x0, 0x1}, 0x10001}}}, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:33:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000001980)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001a00)=0x80) 2018/06/03 08:33:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:18 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1185.499647] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:18 executing program 4: bpf$MAP_CREATE(0xf403, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:18 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1765]}, 0x10) 2018/06/03 08:33:18 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5d9c000000000000]}, 0x10) 2018/06/03 08:33:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x45b90000]}, 0x10) 2018/06/03 08:33:18 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:18 executing program 4: bpf$MAP_CREATE(0x174, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x5dc]}, 0x10) 2018/06/03 08:33:18 executing program 4: bpf$MAP_CREATE(0x78, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:18 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:18 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x8d62000000000000]}, 0x10) 2018/06/03 08:33:18 executing program 4: bpf$MAP_CREATE(0x38, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1185.843716] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:18 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:18 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45b9000000000000]}, 0x10) 2018/06/03 08:33:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400001, 0x0) 2018/06/03 08:33:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x40030000000000]}, 0x10) 2018/06/03 08:33:19 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd50b]}, 0x10) 2018/06/03 08:33:19 executing program 4: bpf$MAP_CREATE(0xcc02000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:19 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:19 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x81, 0x400400) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={r5, 0xfffffffffffff3d0, 0x64b1}, &(0x7f0000000100)=0x8) 2018/06/03 08:33:19 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc55c0000]}, 0x10) 2018/06/03 08:33:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffffff], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) [ 1186.506371] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:19 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:19 executing program 4: bpf$MAP_CREATE(0x27a, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:19 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe8030000]}, 0x10) 2018/06/03 08:33:19 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3fdd]}, 0x10) 2018/06/03 08:33:19 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:19 executing program 4: bpf$MAP_CREATE(0x6202000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:19 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9d11]}, 0x10) 2018/06/03 08:33:19 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4ded000000000000]}, 0x10) [ 1186.815790] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:20 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x4ded000000000000]}, 0x10) 2018/06/03 08:33:20 executing program 4: bpf$MAP_CREATE(0x7402, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:20 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x5568]}, 0x10) 2018/06/03 08:33:20 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3d85000000000000]}, 0x10) 2018/06/03 08:33:20 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x2000000400) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:33:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffe0], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:20 executing program 4: bpf$MAP_CREATE(0x66000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:20 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:20 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8913, &(0x7f0000000240)="0047fc2f072c24097000") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:33:20 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x1000000]}, 0x10) 2018/06/03 08:33:20 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe1bd]}, 0x10) 2018/06/03 08:33:20 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xcd90000000000000]}, 0x10) 2018/06/03 08:33:20 executing program 4: bpf$MAP_CREATE(0xee030000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1187.648368] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:20 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1187.865163] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:21 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:21 executing program 4: bpf$MAP_CREATE(0x9602, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:21 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xeda7]}, 0x10) 2018/06/03 08:33:21 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4500000000000000]}, 0x10) 2018/06/03 08:33:21 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf5db000000000000]}, 0x10) 2018/06/03 08:33:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:21 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000004) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x109000, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000040)={0x3, 0x9}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0x1d0, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xf}}}, {{@ip={@loopback=0x7f000001, @loopback=0x7f000001, 0xffffff00, 0xffffffff, 'veth1_to_team\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x17, 0x3, 0x6d}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x0, 0x3, 0x1}}, @common=@socket0={0x20, 'socket\x00'}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, 0xff, 0xffffffff, 'ipddp0\x00', '\x00', {}, {}, 0x5e, 0x1}, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x7fffffff, 0xd, [0x32, 0x3b, 0x0, 0x34, 0x40, 0x31, 0x2d, 0x2e, 0x1e, 0x29, 0x23, 0x13, 0x2c, 0x19, 0x37, 0x30], 0x0, 0x0, 0x505}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:33:21 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:21 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45000000]}, 0x10) 2018/06/03 08:33:21 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) r4 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3f, 0x400000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000040)={0x9, 0x1, 'client1\x00', 0x1, "27cb87375aabc19c", "e22a6adce13afd04579a38e08f23077fcf00aaf9fabd54fc2dc53d3095a9aeb5", 0x84, 0x1000}) 2018/06/03 08:33:21 executing program 4: bpf$MAP_CREATE(0x168, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1188.660982] IPVS: ftp: loaded support on port[0] = 21 [ 1188.760666] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:22 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x757f000000000000]}, 0x10) 2018/06/03 08:33:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:22 executing program 4: bpf$MAP_CREATE(0xce02000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:22 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x852e0000]}, 0x10) 2018/06/03 08:33:22 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf5220000]}, 0x10) 2018/06/03 08:33:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:22 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:33:22 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:22 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x2d1d0000]}, 0x10) 2018/06/03 08:33:22 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x700) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) r5 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x800) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f0000000080)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:33:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:23 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xb37d]}, 0x10) 2018/06/03 08:33:23 executing program 4: bpf$MAP_CREATE(0x7a02000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:23 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:23 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x2d1d0000]}, 0x10) 2018/06/03 08:33:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe5730000]}, 0x10) 2018/06/03 08:33:23 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x62, 0x40000) getsockname$unix(r4, &(0x7f0000000800), &(0x7f0000000380)=0x6e) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:33:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) [ 1190.282973] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:23 executing program 4: bpf$MAP_CREATE(0x7603000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:23 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xf8dd]}, 0x10) 2018/06/03 08:33:23 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xbde1]}, 0x10) 2018/06/03 08:33:23 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x9596000000000000]}, 0x10) 2018/06/03 08:33:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) [ 1190.554928] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:23 executing program 4: bpf$MAP_CREATE(0x60000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:23 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:23 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xfd56000000000000]}, 0x10) 2018/06/03 08:33:23 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc0ffffff00000000]}, 0x10) 2018/06/03 08:33:23 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd62d]}, 0x10) 2018/06/03 08:33:23 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:23 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000040)={0x0, 0xc76f, 0x8, 0x36, 0x7, 0x81}, &(0x7f0000000080)=0x14) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) unshare(0x60000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) 2018/06/03 08:33:23 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec00000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:24 executing program 4: bpf$MAP_CREATE(0x6e000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1191.159888] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:24 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd060000]}, 0x10) 2018/06/03 08:33:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xcd900000]}, 0x10) 2018/06/03 08:33:24 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x28bd]}, 0x10) 2018/06/03 08:33:24 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:24 executing program 4: bpf$MAP_CREATE(0x1c, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:24 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x15f30000]}, 0x10) 2018/06/03 08:33:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x45b9000000000000]}, 0x10) 2018/06/03 08:33:24 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:24 executing program 4: bpf$MAP_CREATE(0x6601000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:24 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x10000, 0xa, 0x4, 0xfffffffffffffff7, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x800, 0x6, 0x80, 0x3f}, &(0x7f0000000100)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000140)=r5) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) 2018/06/03 08:33:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:24 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xdbf000000000000]}, 0x10) 2018/06/03 08:33:24 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:24 executing program 4: bpf$MAP_CREATE(0x900000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1192.047548] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:24 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:24 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xa5450000]}, 0x10) 2018/06/03 08:33:24 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x45b9]}, 0x10) 2018/06/03 08:33:24 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xb5ad000000000000]}, 0x10) 2018/06/03 08:33:25 executing program 4: bpf$MAP_CREATE(0xee03000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:25 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1192.400473] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:25 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xfd560000]}, 0x10) 2018/06/03 08:33:25 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3551000000000000]}, 0x10) 2018/06/03 08:33:25 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:25 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1d2d]}, 0x10) 2018/06/03 08:33:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:25 executing program 4: bpf$MAP_CREATE(0x21a, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:25 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x40) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000040)) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) [ 1192.885899] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:25 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:25 executing program 4: bpf$MAP_CREATE(0x3800000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:25 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:25 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x25a20000]}, 0x10) 2018/06/03 08:33:25 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x4d340000]}, 0x10) 2018/06/03 08:33:25 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x1d6e0000]}, 0x10) [ 1193.167953] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:26 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:26 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:26 executing program 4: bpf$MAP_CREATE(0x5600000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:26 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x35510000]}, 0x10) 2018/06/03 08:33:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x25a2]}, 0x10) 2018/06/03 08:33:26 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x60d]}, 0x10) 2018/06/03 08:33:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff0f0000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:26 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="00e5813f04787a596475b18d9ed82c99240970") socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x2000) getpeername$packet(0xffffffffffffff9c, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001780)=0x14) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000017c0)=r2) unshare(0x60000000) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000040)='gre0\x00') r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xb1a, 0x20242) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) 2018/06/03 08:33:26 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:26 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x4008ae61, &(0x7f0000000080)) [ 1193.842964] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:26 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x1100]}, 0x10) 2018/06/03 08:33:26 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x65d0]}, 0x10) 2018/06/03 08:33:26 executing program 4: bpf$MAP_CREATE(0x5e020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:26 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x25a2]}, 0x10) 2018/06/03 08:33:26 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1194.162141] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:27 executing program 4: bpf$MAP_CREATE(0x14e, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:27 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:27 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xc805]}, 0x10) 2018/06/03 08:33:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe1bd]}, 0x10) 2018/06/03 08:33:27 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x58b]}, 0x10) 2018/06/03 08:33:27 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:27 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:27 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x18000, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x2, @empty, 0x1ff}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000200)={r1, 0xfffffffffffff307}, 0x8) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'team_slave_1\x00'}) ioctl(r2, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) [ 1194.713536] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:27 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:27 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r0, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:27 executing program 4: bpf$MAP_CREATE(0x262, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:27 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4d34000000000000]}, 0x10) 2018/06/03 08:33:27 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x7]}, 0x10) 2018/06/03 08:33:27 executing program 4: bpf$MAP_CREATE(0x70, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:27 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:27 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1194.942274] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:27 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x28bd]}, 0x10) 2018/06/03 08:33:28 executing program 4: bpf$MAP_CREATE(0x186, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x6517]}, 0x10) 2018/06/03 08:33:28 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xeda7000000000000]}, 0x10) 2018/06/03 08:33:28 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:28 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x6517000000000000]}, 0x10) 2018/06/03 08:33:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:28 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = accept(r0, &(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x9}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x8, 0x8, 0x401, 0x6, 0x2}, 0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000003480)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000003580)=0xe8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003600)={"6700000008000000000000ffff00", r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r6}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r6}) 2018/06/03 08:33:28 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) [ 1195.654826] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:28 executing program 4: bpf$MAP_CREATE(0x58010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x65d0]}, 0x10) 2018/06/03 08:33:28 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x65d0000000000000]}, 0x10) 2018/06/03 08:33:28 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:28 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:28 executing program 4: bpf$MAP_CREATE(0x2a00, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:28 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x7db3000000000000]}, 0x10) 2018/06/03 08:33:28 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xc4d5]}, 0x10) 2018/06/03 08:33:28 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:28 executing program 4: bpf$MAP_CREATE(0x5801, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1196.042874] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:29 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x58b]}, 0x10) 2018/06/03 08:33:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:29 executing program 4: bpf$MAP_CREATE(0x7603, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:29 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xf401000000000000]}, 0x10) 2018/06/03 08:33:29 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xfd56]}, 0x10) 2018/06/03 08:33:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:29 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x102, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000040)={0x1, 0x9}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) [ 1196.485599] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:29 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x6517]}, 0x10) 2018/06/03 08:33:29 executing program 4: bpf$MAP_CREATE(0x76010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:29 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:29 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:29 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xd5c4000000000000]}, 0x10) 2018/06/03 08:33:29 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3a15]}, 0x10) 2018/06/03 08:33:29 executing program 4: bpf$MAP_CREATE(0x50010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:29 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1196.741128] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:30 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xd5c4]}, 0x10) 2018/06/03 08:33:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xd060000]}, 0x10) 2018/06/03 08:33:30 executing program 4: bpf$MAP_CREATE(0xa801, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:30 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:30 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x45a5]}, 0x10) 2018/06/03 08:33:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:30 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:33:30 executing program 4: bpf$MAP_CREATE(0x7a01, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1197.448570] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:30 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:30 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe785]}, 0x10) 2018/06/03 08:33:30 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:30 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xf401000000000000]}, 0x10) 2018/06/03 08:33:30 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe573000000000000]}, 0x10) [ 1197.778496] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:31 executing program 4: bpf$MAP_CREATE(0x166, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:31 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x344d]}, 0x10) 2018/06/03 08:33:31 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x55680000]}, 0x10) 2018/06/03 08:33:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:31 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xfd56000000000000]}, 0x10) 2018/06/03 08:33:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0ffffffffffffff], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:31 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x101, 0x10000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x2}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r4, 0x9, 0x4}, &(0x7f0000000180)=0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x60000, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000040)) 2018/06/03 08:33:31 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1198.385433] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:31 executing program 4: bpf$MAP_CREATE(0x148, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x4b6d]}, 0x10) 2018/06/03 08:33:31 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:31 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x58b0000]}, 0x10) 2018/06/03 08:33:31 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x85e70000]}, 0x10) 2018/06/03 08:33:31 executing program 4: bpf$MAP_CREATE(0x7000000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:31 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1198.760524] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xd06]}, 0x10) 2018/06/03 08:33:32 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4500]}, 0x10) 2018/06/03 08:33:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:32 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:32 executing program 4: bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:32 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x153a0000]}, 0x10) 2018/06/03 08:33:32 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x10800) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000040)={0x8, 0x9, 0x1, 0x400, 0xffff, 0xb19}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r4}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r4}) 2018/06/03 08:33:32 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1199.333581] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xbd28]}, 0x10) 2018/06/03 08:33:32 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xe00000000000000]}, 0x10) 2018/06/03 08:33:32 executing program 4: bpf$MAP_CREATE(0x3ec, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:32 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:32 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x400300]}, 0x10) 2018/06/03 08:33:32 executing program 4: bpf$MAP_CREATE(0x172, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xc805]}, 0x10) 2018/06/03 08:33:32 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1199.585415] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:32 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xcd90000000000000]}, 0x10) 2018/06/03 08:33:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:32 executing program 4: bpf$MAP_CREATE(0xbe030000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:32 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:32 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x628d]}, 0x10) 2018/06/03 08:33:32 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x11000000]}, 0x10) 2018/06/03 08:33:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:32 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x80100, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x0, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0xffffffffffffffec, 0x9, 0x7f, 0x0, 0x101, 0x400}, 0x100000000}, 0xa) unshare(0x60000000) r2 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x0, 0x204000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xbb}, 0x5b0000000000000, 0x1, 0x3, 0x2, 0x1, 0x3, 0x3}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) r6 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="d7e488ff4fd95bb721f5844cfbfa24bed1187809b0d7d9e6372b289bdb", 0x1d, 0xfffffffffffffff9) keyctl$invalidate(0x15, r6) 2018/06/03 08:33:33 executing program 4: bpf$MAP_CREATE(0x76000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) [ 1200.235490] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:33 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe803000000000000]}, 0x10) 2018/06/03 08:33:33 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x11]}, 0x10) 2018/06/03 08:33:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:33 executing program 4: bpf$MAP_CREATE(0x1e020000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:33 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x58b0000]}, 0x10) 2018/06/03 08:33:33 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80fe]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x2dd60000]}, 0x10) 2018/06/03 08:33:33 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x3d85000000000000]}, 0x10) 2018/06/03 08:33:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18020000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:33 executing program 5: r0 = socket$kcm(0x29, 0x8, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r4, 0x10e, 0x8, &(0x7f0000000040)=0x9, 0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)="2f70726f632f7379732f6e65742f697076342f76882873796e635f736f63635f72697a650023158bea80fd2d3e3f3ccc9f226902fea85f3cdf6902bd9f209974cf9ced3419baaea18917c207a2ebee5814f57e0068c41760539adc010a6a2513661feaddf1da56afc99c655bdfeb053ad9f797702df183cc971cedffa34d46567fb9e5059100000000000000000000200000", 0x2, 0x0) 2018/06/03 08:33:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:33 executing program 4: bpf$MAP_CREATE(0x5a000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:33 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1201.102902] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:33 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xe5730000]}, 0x10) 2018/06/03 08:33:33 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x85e7000000000000]}, 0x10) 2018/06/03 08:33:33 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3f000000]}, 0x10) 2018/06/03 08:33:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:34 executing program 4: bpf$MAP_CREATE(0x84010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:34 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xdd3f]}, 0x10) [ 1201.477123] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:35 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x852e000000000000]}, 0x10) 2018/06/03 08:33:35 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:35 executing program 4: bpf$MAP_CREATE(0x25e, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xddf8]}, 0x10) 2018/06/03 08:33:35 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x60000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r3}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r3}) 2018/06/03 08:33:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff5], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:35 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x7000000]}, 0x10) 2018/06/03 08:33:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:35 executing program 4: bpf$MAP_CREATE(0x6201000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:35 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1202.404894] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:35 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x852e000000000000]}, 0x10) 2018/06/03 08:33:35 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x59000000]}, 0x10) 2018/06/03 08:33:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000001980)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001a00)=0x80) getuid() [ 1202.659336] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:36 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:36 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x6d4b0000]}, 0x10) 2018/06/03 08:33:36 executing program 4: bpf$MAP_CREATE(0x1e000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x3551]}, 0x10) 2018/06/03 08:33:36 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x4ded]}, 0x10) 2018/06/03 08:33:36 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x3, &(0x7f0000000000)="005efc2f154bc8592b2acd8eef9e973a5a8da2abcb5ebc60afe317ef") unshare(0x60000000) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xa4c, 0x40000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x6, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'gre0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000340)={@mcast1={0x3e2, 0x1, [], 0x1}, 0x0, r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x0, r5}) rt_sigreturn() 2018/06/03 08:33:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400001, 0x0) getpeername(0xffffffffffffffff, &(0x7f0000001980)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000001a00)=0x80) getuid() 2018/06/03 08:33:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:36 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe80]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1203.533342] IPVS: ftp: loaded support on port[0] = 21 2018/06/03 08:33:36 executing program 4: bpf$MAP_CREATE(0xf4030000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:36 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x9596]}, 0x10) 2018/06/03 08:33:36 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x1000000]}, 0x10) 2018/06/03 08:33:36 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:36 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xa7ed]}, 0x10) 2018/06/03 08:33:36 executing program 4: bpf$MAP_CREATE(0xf003, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:37 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfec0000000000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x9c5d]}, 0x10) 2018/06/03 08:33:37 executing program 4: bpf$MAP_CREATE(0x378, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:37 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x852e000000000000]}, 0x10) 2018/06/03 08:33:37 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0xf522]}, 0x10) 2018/06/03 08:33:37 executing program 5 (fault-call:6 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000080)) 2018/06/03 08:33:37 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x4, 0x400000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x48, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x11}, 0x5}, @in6={0xa, 0x4e24, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0x503d}, @in={0x2, 0x4e22, @loopback=0x7f000001}]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0xb2, 0x100000001}, &(0x7f0000000300)=0x90) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xc001, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000040)=0x3) set_tid_address(&(0x7f0000000080)) r4 = socket(0x9, 0x11, 0xc) write(r4, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100040423dcffdf00", 0x1f) 2018/06/03 08:33:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000], 0xbb}, 0x5}, 0x1c) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r2, r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1004000000016) 2018/06/03 08:33:37 executing program 4: bpf$MAP_CREATE(0x8801000000000000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:37 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe800000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:37 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xa545]}, 0x10) 2018/06/03 08:33:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x6d4b000000000000]}, 0x10) 2018/06/03 08:33:37 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:37 executing program 7: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x9dca, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x9dca]}, 0x10) 2018/06/03 08:33:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x105080) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8000400000000c9, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/udp\x00') ioctl$TCXONC(r3, 0x540a, 0x7b57) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000900)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000a00)=0xe8) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r5, r7) splice(r0, &(0x7f00000000c0), r0, &(0x7f0000000100)=0x54, 0x2, 0x1) r8 = socket$inet6(0xa, 0x802, 0x0) sendto$inet6(r8, &(0x7f0000000080)="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", 0x821, 0x0, &(0x7f0000089000)={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}, 0x1c) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r8, &(0x7f00000009c0), 0x0, 0x0, &(0x7f0000000b00)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}, 0x1c) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f00000008c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000b40)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4e23, 0x20, 0x4e21, 0x5, 0xa, 0xa0, 0xa0, 0x89, r4, r6}, {0x5, 0x3, 0xffff, 0x1, 0x9, 0x8, 0x101, 0x8}, {0x3fd, 0x80, 0x9, 0x2}, 0x7, 0x0, 0x2, 0x1, 0x3, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x1c}, 0x4d3, 0x6c}, 0x2, @in6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x34ff, 0x2, 0x3, 0x0, 0x9, 0x1, 0x9}}, 0xe8) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) 2018/06/03 08:33:37 executing program 4: bpf$MAP_CREATE(0x80010000, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:37 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r0, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0x0, 0x58b]}, 0x10) 2018/06/03 08:33:37 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) 2018/06/03 08:33:37 executing program 6: r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="1bd45006000000d1240970") r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfe9d, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe000000d, [0x0, 0xadb5]}, 0x10) 2018/06/03 08:33:37 executing program 4: bpf$MAP_CREATE(0x7202, &(0x7f0000000040)={0x6, 0x4, 0x4, 0x101}, 0x2c) 2018/06/03 08:33:37 executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, '\x00', 0x44, 0x11, 0x0, @empty, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}}}}}}}, &(0x7f0000005000)) [ 1329.837022] INFO: rcu_sched self-detected stall on CPU [ 1329.842480] 0-....: (124999 ticks this GP) idle=bfa/1/4611686018427387906 softirq=366006/366006 fqs=31212 [ 1329.852617] (t=125000 jiffies g=198033 c=198032 q=1012) [ 1329.858161] NMI backtrace for cpu 0 [ 1329.861766] CPU: 0 PID: 6936 Comm: syz-executor1 Not tainted 4.17.0-rc7+ #80 [ 1329.868927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1329.878258] Call Trace: [ 1329.880824] [ 1329.882958] dump_stack+0x1b9/0x294 [ 1329.886568] ? dump_stack_print_info.cold.2+0x52/0x52 [ 1329.891739] ? lock_release+0xa10/0xa10 [ 1329.895694] nmi_cpu_backtrace.cold.4+0x19/0xce [ 1329.900349] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 1329.905529] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 1329.910786] arch_trigger_cpumask_backtrace+0x14/0x20 [ 1329.915956] rcu_dump_cpu_stacks+0x175/0x1c2 [ 1329.920354] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 1329.925355] check_cpu_stall.isra.61.cold.80+0x36c/0x59a [ 1329.930803] ? print_other_cpu_stall+0x4a0/0x4a0 [ 1329.935543] ? debug_check_no_locks_freed+0x310/0x310 [ 1329.940709] ? find_held_lock+0x36/0x1c0 [ 1329.944752] ? lock_downgrade+0x8e0/0x8e0 [ 1329.948883] ? lock_release+0xa10/0xa10 [ 1329.952839] ? graph_lock+0x170/0x170 [ 1329.956621] ? graph_lock+0x170/0x170 [ 1329.960400] ? graph_lock+0x170/0x170 [ 1329.964182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1329.969702] ? pvclock_gtod_notify+0x2db/0x3c0 [ 1329.974262] ? graph_lock+0x170/0x170 [ 1329.978043] ? graph_lock+0x170/0x170 [ 1329.981826] ? __lock_is_held+0xb5/0x140 [ 1329.985884] rcu_check_callbacks+0x21b/0xad0 [ 1329.990274] ? rcu_cpu_stall_reset+0x210/0x210 [ 1329.994836] ? trace_hardirqs_off+0xd/0x10 [ 1329.999051] ? raise_softirq+0x1b2/0x450 [ 1330.003090] ? raise_softirq_irqoff+0x310/0x310 [ 1330.007741] ? account_guest_time+0x3d0/0x3d0 [ 1330.012217] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1330.017733] ? hrtimer_run_queues+0x70/0x390 [ 1330.022121] ? run_local_timers+0x168/0x1d0 [ 1330.026420] ? timer_clear_idle+0x50/0x50 [ 1330.030572] ? account_system_time+0x7f/0xb0 [ 1330.034961] ? account_process_tick+0x76/0x240 [ 1330.039544] update_process_times+0x2d/0x70 [ 1330.043844] tick_sched_handle+0x9f/0x180 [ 1330.047970] tick_sched_timer+0x45/0x130 [ 1330.052273] __hrtimer_run_queues+0x3e3/0x10a0 [ 1330.056841] ? tick_sched_do_timer+0x1a0/0x1a0 [ 1330.061407] ? hrtimer_start_range_ns+0xd10/0xd10 [ 1330.066235] ? pvclock_read_flags+0x160/0x160 [ 1330.070711] ? kvm_clock_read+0x25/0x30 [ 1330.074667] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1330.079673] ? kvm_clock_read+0x25/0x30 [ 1330.083626] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 1330.088622] ? ktime_get_update_offsets_now+0x3d3/0x5c0 [ 1330.093965] ? do_timer+0x50/0x50 [ 1330.097404] ? rcu_nmi_exit+0xd7/0x2b0 [ 1330.101279] ? do_raw_spin_lock+0xc1/0x200 [ 1330.105495] hrtimer_interrupt+0x2f3/0x750 [ 1330.109716] smp_apic_timer_interrupt+0x15d/0x710 [ 1330.114543] ? smp_call_function_single_interrupt+0x650/0x650 [ 1330.120413] ? _raw_spin_lock+0x32/0x40 [ 1330.124366] ? _raw_spin_unlock+0x22/0x30 [ 1330.128497] ? handle_edge_irq+0x330/0x870 [ 1330.132710] ? task_prio+0x50/0x50 [ 1330.136232] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1330.141068] apic_timer_interrupt+0xf/0x20 [ 1330.145277] [ 1330.147497] RIP: 0010:__sanitizer_cov_trace_pc+0x14/0x50 [ 1330.152919] RSP: 0018:ffff8801c38d7938 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 1330.160605] RAX: ffff8801bc28c640 RBX: ffff8801d28e8900 RCX: ffffffff84b30abf [ 1330.167851] RDX: 0000000000000000 RSI: 0000000000006000 RDI: 0000000000000003 [ 1330.175098] RBP: ffff8801c38d7938 R08: ffff8801bc28c640 R09: ffffed003b5c46d2 [ 1330.182345] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 1330.189592] R13: ffff8801d4f84518 R14: ffff8801b683f120 R15: ffff8801b683f040 [ 1330.196848] ? lo_ioctl+0x1b5f/0x2130 [ 1330.200635] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1330.206151] lo_ioctl+0x1b71/0x2130 [ 1330.209769] ? exit_robust_list+0x290/0x290 [ 1330.214074] ? lo_rw_aio_complete+0x430/0x430 [ 1330.218552] blkdev_ioctl+0x9b6/0x2020 [ 1330.222421] ? blkpg_ioctl+0xc40/0xc40 [ 1330.226287] ? lock_downgrade+0x8e0/0x8e0 [ 1330.230417] ? __fget+0x40c/0x650 [ 1330.233852] ? kasan_check_read+0x11/0x20 [ 1330.237979] ? rcu_is_watching+0x85/0x140 [ 1330.242193] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 1330.247366] ? __fget+0x40c/0x650 [ 1330.250812] ? expand_files.part.8+0x9a0/0x9a0 [ 1330.255394] ? __fget_light+0x2ef/0x430 [ 1330.259350] ? fget_raw+0x20/0x20 [ 1330.262797] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1330.268318] block_ioctl+0xee/0x130 [ 1330.271923] ? blkdev_fallocate+0x400/0x400 [ 1330.276227] do_vfs_ioctl+0x1cf/0x16a0 [ 1330.280114] ? ioctl_preallocate+0x2e0/0x2e0 [ 1330.284500] ? fget_raw+0x20/0x20 [ 1330.287936] ? sockfd_lookup_light+0xc5/0x160 [ 1330.292413] ? __x64_sys_futex+0x477/0x680 [ 1330.296627] ? do_futex+0x27d0/0x27d0 [ 1330.300408] ? security_file_ioctl+0x94/0xc0 [ 1330.304798] ksys_ioctl+0xa9/0xd0 [ 1330.308232] __x64_sys_ioctl+0x73/0xb0 [ 1330.312100] do_syscall_64+0x1b1/0x800 [ 1330.315969] ? syscall_return_slowpath+0x5c0/0x5c0 [ 1330.320889] ? syscall_return_slowpath+0x30f/0x5c0 [ 1330.325799] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 1330.331158] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1330.335993] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1330.341163] RIP: 0033:0x455a09 [ 1330.344338] RSP: 002b:00007f0f5e072c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1330.352029] RAX: ffffffffffffffda RBX: 00007f0f5e0736d4 RCX: 0000000000455a09 [ 1330.359277] RDX: 0000000000000014 RSI: 0000000000004c00 RDI: 0000000000000015 [ 1330.366539] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 1330.373785] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 1330.381038] R13: 00000000000002de R14: 00000000006f9570 R15: 0000000000000000