0efd0 returned -11 [ 208.935982] binder: 473:500 transaction failed 29189/-22, size 0-0 line 2788 [ 208.958223] binder: 505:509 DecRefs 0 refcount change on invalid ref 1 ret -22 2018/01/26 10:31:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x18, 0x21, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006f4000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00003f1000-0x10)={0x0, 0x0, 0x0}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000c56000-0x16)='/selinux/checkreqprot\x00', 0x80000, 0x0) accept4$ipx(r2, 0x0, &(0x7f00002c8000-0x4)=0x0, 0x0) dup2(r0, r1) 2018/01/26 10:31:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000070c000)='/dev/binder#\x00', 0x0, 0x806) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000885000)='/dev/sequencer2\x00', 0x401, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000b35000)={0x4, 0x7, 0x2}) r2 = syz_open_dev$sndpcmc(&(0x7f0000ad4000)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x4d0401) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000cf1000)=0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000aa000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = dup3(r0, r1, 0x80000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f000053f000)={0x3, r3}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f00007c8000-0x8)={0x0, 0x0}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00004e2000-0x8)=0x6) r1 = syz_open_dev$tun(&(0x7f0000892000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00008e8000-0x4)=0x0) 2018/01/26 10:31:01 executing program 1: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000bd7000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x1, 0x6) r1 = socket(0xa, 0x802, 0x0) getsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f00009ee000-0x4)=0x0, &(0x7f0000d10000-0x4)=0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f000042b000-0x10)="b0bb301c2515d2c197329c266180a2be", 0x10) 2018/01/26 10:31:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_buf(r0, 0x0, 0x11, &(0x7f0000f6e000-0xcf)=""/207, &(0x7f0000a15000-0x4)=0xcf) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000ed8000+0x182)={{{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x0, 0x0}, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xffffffffffffffff, 0x0}, 0x0, @in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) [ 208.958235] binder: 505:509 BC_INCREFS_DONE node 290 has no pending increfs request [ 208.958251] binder: 505:509 ioctl c0306201 2000efd0 returned -11 [ 208.985125] binder: 507:511 transaction failed 29189/-22, size 0-0 line 2788 [ 209.018764] binder: 507:511 transaction failed 29189/-22, size 0-0 line 2788 [ 209.050708] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.060278] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x18, 0x21, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = gettid() perf_event_open(&(0x7f000025c000)={0x5, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f000057a000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0}) pipe2(&(0x7f00002ec000)={0x0, 0x0}, 0x4000) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x1a) 2018/01/26 10:31:01 executing program 2: mmap(&(0x7f0000000000/0xfe7000)=nil, 0xfe7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fe0000)={0x2, &(0x7f0000013000-0x10)=[{0x40, 0x0, 0x0, 0xffffffffffeff010}, {0x6, 0x0, 0x0, 0x0}]}, 0x8) write(r1, &(0x7f00007d2000-0x87)="", 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00003b1000-0x12)='/dev/snd/pcmC#D#p\x00', 0xfff, 0x2000) mmap(&(0x7f0000fe7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000fe8000-0x14)={0x81, 0x857, 0x2, 0x6, 0x4a6c}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000b20000)='/dev/vga_arbiter\x00', 0x0, 0x0) mmap(&(0x7f0000fe7000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000fe7000)={{0xa, 0x0, 0x1f, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x7}, {0xa, 0x3, 0x400, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8}, 0xffffffffffff7fff, [0xfffffffffffffffd, 0x2, 0x7, 0xce5, 0x0, 0x5, 0x40, 0x3]}, 0x5c) 2018/01/26 10:31:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x1}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x18, 0x21, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 209.111279] binder: 527:533 transaction failed 29189/-22, size 0-0 line 2788 [ 209.112283] binder: 525:538 transaction failed 29189/-22, size 0-0 line 2788 [ 209.113451] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.130161] binder: 525:540 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:01 executing program 7: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000107000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000a69000)={&(0x7f0000065000-0xc)=[0x78c0, 0x2, 0x1], 0x3, 0x1ff, 0x4, 0x7, 0x1, 0xc2, {0x1000, 0x100000000, 0x10000, 0x55, 0x8, 0x0, 0x7f, 0x8, 0x8, 0x2, 0x4, 0x6, 0x8, 0x1ff, "c4063fe36426647921a079af7dbb542f1931d7ec31c59b28a9b12dc3b56c9164"}}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10400, 0x0) r2 = getpgid(0x0) setpriority(0x3, r2, 0x1) fcntl$lock(r1, 0x7, &(0x7f0000001000-0x10)={0x2, 0x2, 0x2, 0x3ff, r2}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = accept4$llc(r1, &(0x7f0000001000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000002000-0x4)=0x10, 0x80800) setns(r3, 0x44000000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) write$selinux_load(r0, &(0x7f0000002000-0x77)={0xf97cff8c, 0x8, 'SE Linux', "e033c6c128148e887a0727bde57cca580ba38de71d8f90143a96aa363852c004106d43c03815fbc7736600e78ea25c285d4c18e11f268af0d8aadadae7e3ce5f0e8141964adea8cbecf272267c85ce48bc28b8c67e561242dc403767322248dc5d970dca37ac07"}, 0x77) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000001000-0x8c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000002000-0xb8)={0x0, 0x1ff, 0x3, 0x5, 0x100000000000, 0xb7, 0xe137, 0x7f, {0x0, @in={{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x2, 0x9, 0x8, 0x5}}, &(0x7f0000003000-0x4)=0xb8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000002000)={r4, 0x8000000000000000, 0x0}, 0xc) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000001000)={[0x8001, 0x5, 0x81, 0xffffffffffffb8ce, 0x7fffffff, 0x66, 0x3b1, 0x5, 0x7fff, 0x4, 0xde, 0xd3, 0xfffffffffffffff7, 0x2, 0x7, 0x100000001], 0x1, 0x40000}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast2=0x0, @empty=0x0, 0x0}, &(0x7f0000001000)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000001000-0xc)={@remote={0xac, 0x14, 0x0, 0xbb}, @local={0xac, 0x14, 0x0, 0xaa}, r5}, 0xc) fstat(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000004000-0x11)='/dev/vhost-vsock\x00', 0x2, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ptrace$setregset(0x4205, r2, 0x207, &(0x7f0000004000-0x8)={&(0x7f0000005000-0xb5)="ea008b4114521746ac154f6a1f42e42c0dcb4d0dcbc5ee227bf50b1e98298b24f54a39a01a516f24ce17ee3b5cde97993ef8d90a5aa9f8c8836ab2c3c2bc001555ff2e3de8863255e2e325edca8efccc3c4c262905ae91cf5b4876b6f245a911884a1cb071909c98aadba368ac1633b82e399babe708b7c4ffdf006cd8652a817f0e5453caa0ebfed0fbf8508e9b9d207d6cb5305ef6b856d5c9c4437089b08e76cdfbf5373be6d9c696a05a2ca8001ab2b50e6d31", 0xb5}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000005000)={0xaf2, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000003000-0xc)={0xed19, 0x5, 0x7, 0x400, 0xc3, 0xfffffffffffffff7, 0x200}, 0xc) syncfs(r3) 2018/01/26 10:31:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f000080b000)='/dev/snd/midiC#D#\x00', 0xf95, 0x105000) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1e, &(0x7f0000476000-0xa1)="41e4c2ebf47fa793914407a6cf6f16184964f92600013e8634e5c4000fd8eab66d57a374ae72176a9d8516c0909a4a8f51402e40fbad5cee09b6b37b85453ee3d9cd48c8d3814937240ccdf5f1b8270dcab54f262588f0fe3fd338983ad97d9d067ad41886508ccb64de2f083f0d22c75f4172b7e66271c44f1172d12a7adad6d8ff1662fbaaa8e8f2ca72b15f6cb8564aab59763ad13317a85e19ac8053382c17", 0xa1) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00008e8000)=""/63) 2018/01/26 10:31:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x14, 0x0, &(0x7f000000e000)=[@increfs_done={0x40106308, 0x0, 0x0}], 0x0, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x18, 0x21, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 209.145496] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.170928] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.185224] binder_alloc: 549: binder_alloc_buf, no vma [ 209.195296] binder: 554:558 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:01 executing program 1: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000001000)='/dev/input/mice\x00', 0x0, 0x840) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000000a000)={0x5, 0x7739, 0x0, 0x0, 0xb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) readv(r0, &(0x7f0000002000-0x10)=[{&(0x7f0000001000-0x5f)=""/95, 0x5f}], 0x1) 2018/01/26 10:31:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000121000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = dup3(r1, r1, 0x80000) renameat2(r2, &(0x7f0000319000)='./file0\x00', r3, &(0x7f00005b9000-0x8)='./file0\x00', 0x2) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) socket$llc(0x1a, 0x1, 0x0) [ 209.195435] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.216455] binder: 527:556 transaction failed 29189/-3, size 0-0 line 2903 [ 209.227375] binder_alloc: 560: binder_alloc_buf, no vma [ 209.227400] binder: 554:562 transaction failed 29189/-3, size 0-0 line 2903 [ 209.231854] binder: 560:561 BC_INCREFS_DONE node 301 has no pending increfs request [ 209.252070] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.275879] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) r2 = getpgrp(0xffffffffffffffff) wait4(r2, 0x0, 0x1, &(0x7f0000441000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000b23000)='/dev/mixer\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f0000428000)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$packet(0x11, 0x3, 0x300) close(r1) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000f89000-0xaf)={0x0, 0xa7, "647e0b1476d44e0542df942ffe87317fe333828bf3ba79fc8319517aa4a38b1b9fb44826bf82e6ef671a41cc0b75816a8ad5b1a3c157efa933c13bae317aaeda3e1ffb35a7101bd70f9255a7e430bdd4260280a01675f50a168496045092a44f54bdc33c593fb414bef1169a196ac605a771d6f90a7995583424fc71d8c73aefc1bad27f521ee0c3d3e2c100b004a6beefa3412cd3ca1ecce678252a87983fc313f9188c5ae133"}, &(0x7f00001af000+0xbea)=0xaf) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00003a0000)=@sack_info={r4, 0x12c, 0x8}, 0xc) 2018/01/26 10:31:01 executing program 1: mmap(&(0x7f0000000000/0xf2a000)=nil, 0xf2a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000f2a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000f2a000)={0x0, 0x48000}, &(0x7f0000dd3000)=0x8) mmap(&(0x7f0000f2a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000f2b000-0x4)=r1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000a9000)=[@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0xca}], 0x1c) 2018/01/26 10:31:01 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f000091f000)=@req3={0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0xffff}, 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000eb6000)='/dev/sequencer\x00', 0x101100, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) sendmsg$key(r0, &(0x7f00005af000)={0x0, 0x0, &(0x7f00003f1000)={&(0x7f00007b1000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0xffe2}, 0x1, 0x0, 0x0, 0x0}, 0x0) sendmsg$alg(r0, &(0x7f000002c000-0x1c)={0x0, 0x0, &(0x7f0000e90000)=[], 0x0, &(0x7f0000ff8000-0x244)=[], 0x0, 0x0}, 0x40) 2018/01/26 10:31:01 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000ba7000-0xb)='/dev/mixer\x00', 0x480101, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0186404, &(0x7f00000ce000-0x18)={&(0x7f0000915000/0x3000)=nil, 0x7, 0x0, 0x8, &(0x7f0000974000/0x1000)=nil, 0x200}) 2018/01/26 10:31:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000321000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x405ff) fgetxattr(r1, &(0x7f000001f000-0x19)=@known='system.posix_acl_default\x00', &(0x7f00007c2000-0x1000)=""/4096, 0x1000) r2 = syz_open_dev$adsp(&(0x7f00005ad000)='/dev/adsp#\x00', 0x9, 0x280002) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000285000)={{{@in=@multicast2=0x0, @in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@loopback=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000018e000)=0x7c) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000eb2000-0x18)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7f, r3}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a45323, &(0x7f0000e4b000-0xa8)={{0x95e3, 0xffffffff}, 'port1\x00', 0x10, 0x20, 0x5, 0x2, 0x0, 0x100000001, 0xff, 0x0, 0x6, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getpeername$ax25(r2, &(0x7f00004f6000)={0x0, {""/7}, 0x0}, &(0x7f0000dd0000-0x4)=0xfffffffffffffdf1) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000012000-0x88)={0x4, {{0xa, 0x3, 0x4, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000973000-0x4)=0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000714000)={0x5, &(0x7f0000c9c000-0x96)=[{0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}]}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 2018/01/26 10:31:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x14, 0x0, &(0x7f000000e000)=[@increfs_done={0x40106308, 0x0, 0x0}], 0x0, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x18, 0x21, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000412000-0xb)='/dev/audio\x00', 0x800, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fcntl$getown(0xffffffffffffff9c, 0x9) r3 = syz_open_dev$tun(&(0x7f0000e4f000-0xd)='/dev/net/tun\x00', 0x0, 0x40) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000f84000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00009c6000)=0xe8) sendmsg$netlink(r0, &(0x7f0000910000)={&(0x7f0000d8c000)=@proc={0x10, 0x0, 0x2, 0x4000000}, 0xc, &(0x7f00000fe000)=[{&(0x7f0000dba000)={0x4b4, 0x13, 0x108, 0x6, 0x3, "", [@nested={0x260, 0x6d, [@generic="9433e621dc83e7fcb41c065e42185b6c2b074a9f4517940b38086075de164c29c75f8aa4e6ab66b825aeac854d306e325c79ce94073ac552ededd2b69d0a81601c7098b4e03ad5a0216fa63130ef8e366877fad203a6828bce04ff93262efc5a81d89c9a66c08a5d6b4f4b1e01facc1e0f58b7e64da2ca3571b1d333f16f20a888691774b8a94670da", @typed={0xd8, 0x2f, @binary="ccc14e3686c0bc1d96b85788a5f6611bf1b86095124b65b57ac81947e11fab2ff690a6881b6e285dcef742256f1709d0cf4351678d2b361cd71f8cc777e3f058cdcccffc3ab42b599982556bbaecb090c7393abcefad67f4665be8064476534cd9314f778dfd4837ef49cf6e55245b45d2a3af5d26984273d398887636ce3a7c994cab089bac2bd2d4d29abe979bab571b83175c36005bb96ad35678ce4be98dff019fdd87d82c63924f2052b20dbcbd48c41fee8d169d43a4de797239c01197a8063f9ea53e39d55d202fdd2701220c"}, @typed={0x18, 0x0, @ipv6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}}, @generic="998199bbe2fcf5e59745e6de34b918bbadff0369d99227464535a91fb16fc87ad0e36ef3155e14ecba43b77ca6f8638d460d6a5d86b1fd53642cd92b8e6568d152e2035ebef35bdd6890dacb75422778c57ec65e45e37741f6254257b9a3ef5c2121c4a43af49f68b0cd0c96085c19edf17c5ae3c74509d9e2b8394edeab8392c0210051a560ca0ce0456ef7691018e22653439f18abcc8eb9df13a56390fc3900a12d7c71d4de4aa656ed62b0c2f59842b4f602170f0b9510653e3b92765eead573aa", @typed={0x20, 0x45, @str='-proc{em0!-bdevsystem\x00'}]}, @generic="20e1ee1a9003f4baab9c7cedb88d5be471a1682407c35baf1fb0b24e5084785cf27abec92a52a74768674a2654c9a15fadc8c05380ffecf13b902f32c7a65119b86550024f7104de99468e047af1ac2e7779fb0a10d1db6e5d19d82b50beadb1c729cb285bb04d53aadcf455aa869f32825b90c942faef773178d4e6629faeab6f2e5c99a391fbd912aa6d2442f2c32868d929da3c28031b9fe5dcc1316b5e30affa9c3bf356", @typed={0xc, 0x7f, @fd=r1}, @nested={0x15c, 0x2, [@generic="3460408a682f59b28eabfed76ecdd0520890c2673feeab2e70a88dea7c202aec233e9825926258e33c89889b7dc49b7f7dca75f0b5ffce98cf470126caa3c473ab138eff1b7871e20516ea7ce79edce09c7b3ac5989ea1e67d714f877724f790c9bdec3c63f95b0ad91b86a5c852c345807ac06808d97f73cbfa9946a77caf1b6a1185726f8d028f7e340eac3adf112b4f0d5742ee1642186fa4ae345718ae5184ecb32cb6911542951d33dc4d2683", @typed={0xc, 0x18, @str='\x00'}, @generic="9065d4ec9b173dc94564c90a59be1a1c0bbe5f1b37a82c7c1285113826962867f96f6920cc676fe7a68689cc9d3941ed0a96ed9517cbef1ef7b4f14012374324fff39cd0ca11cb274f0db4953fb770e9133608ce9f9182614e0c6a4e52f75ccbe304d52d6cf5813ec223b6f1374a8b4523cafed66fb5feb926e307b8ad4869ce0a742eab9760f0c93355177a655d00e03a6f07556fe413302c97"]}, @typed={0xc, 0x10, @ipv4=@remote={0xac, 0x14, 0x0, 0xbb}}, @typed={0xc, 0x3e, @pid=r2}, @nested={0x10, 0x2f, [@typed={0xc, 0xa, @fd=r3}]}, @nested={0xc, 0x1c, [@typed={0x8, 0x9, @void=""}]}]}, 0x4b4}, {&(0x7f00006ef000-0x3320)={0x3320, 0x2b, 0x2, 0x5, 0x1, "", [@generic="f4778866b0c6f4e36eb855a919fe48ae17b6513cd4979ac516563cef139dadee973db5369f593a8b86c06d2577c46c3af89d81f11f57c62b11191428e6e31cd67741c314e4a3a5c98a009bbc5e166040279f6c4a5ece3567e1cac33275f8609453c616c73f2c6926190f97bfa5362a3835145d281f15bb76394e8e0c6caf564731a941ddc39ccdf97bf6a45379f972aba955ed729a6293416e91f59818c7b140e99e38e51d8df4292d", @generic="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", @typed={0xc0, 0x3b, @binary="9d887f8b0be576b30db7b87792434e489358862452e89f3a14848c30b4b26d940471f5e15267719f1890af709aa0b9aadec3d7a894d7024e549e59713a05ae52c886cec38b76cb36b95a890e2f73a09bb17dbed2f4e7a2272e084fec367501457144f707326def942d75bcd11eac8512344b619226f06e5ec96de147fbe707490887ba6464d3ac6e705e1128b7ed36d26c28bad7baa5acb48326660383e465a5388c8ac2ef7ed93f53728345279235f9234310dee36d92"}, @nested={0x10a8, 0x6c, [@typed={0x10, 0x96, @u64=0x1}, @generic="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", @generic="6e1df75603387b02430c5b0816438315fa8a6fc72696c5d42827b08f26437018fcf37f23c3d09b99325d5843472af2d1bf5c0e310a5a70643e568e24c2f33c7240cba6ff0f2a1fc380d561c7f649f36ece98e21a24b3f710e627", @generic="a9a972de410152d9e27bd21f1e3c7edaade3c1bd9e59b230e512595d17acfb56689e5b26c80fd1e38372aa5033c2b1ae56fb8d0b741f4c"]}, @generic="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", @generic="6e0ea8ef603449e9d6660e889c7ce593e8297c6922e6e80a17e8be12af4d91910df7dc141944437df73b71fac4c2287912b0d48da6e90c3c2c8f743fa27d8e46fdfdafb6ea6a19907ce88c3ca72dd3adc9974c951475f7133bd295e2c248bc2af384ebbbcaca58b87f044882981dfb8319d69d34c6c69d38ed0cd768d5f8eafc44e8dd330334a3b8b16e463712b97a6028475b3753dd19eace809aa9f1e60215c07b4044f8614d17938bd3a72c6635c8c6982e2c4886f63fa30c44f76c1b85c9f2537a1021cbc707531cb854217b7e8eeea2623fd67500b05bb1194bd31177787df1bd4b399769447687f7eec90012bd", @typed={0xc, 0xd, @uid=r4}]}, 0x3320}], 0x2, 0x0, 0x0, 0x10}, 0x20000000) r5 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r5) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000702000-0x8)={0x0, 0x2}, &(0x7f0000389000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000235000)={r6, @in={{0x2, 0x2, @dev={0xac, 0x14, 0x0, 0xe}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7b5, 0x5d80c7ef, 0x8, 0x7, 0x1f}, &(0x7f000019f000-0x4)=0xa0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000696000)={0x1000, 0x0, 'client0\x00', 0xffffffff80000001, "52287ba44fca8968", "2fc11320273d6347cac500a6feee7f0d9c1d86edc85b865ec9c6f06e24e9e351", 0x7, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$pptp(0x18, 0x1, 0x2) openat$ion(0xffffffffffffff9c, &(0x7f0000acc000-0x9)='/dev/ion\x00', 0x1002, 0x0) 2018/01/26 10:31:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00008a1000-0x10)={0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f000082b000)="", 0x0, 0x20020003, &(0x7f000005f000-0x10)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) shutdown(r0, 0x800000000001) r1 = dup2(r0, r0) getsockopt(r1, 0x4, 0x5, &(0x7f0000fbb000-0x83)=""/131, &(0x7f00008ce000)=0x83) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000ce2000)=[0x2, 0x2]) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f000027c000)=0x4) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000921000)=""/100) recvmsg(r0, &(0x7f0000687000-0x1c)={&(0x7f0000c2b000)=@nl=@proc={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xc, &(0x7f0000b1c000-0x10)=[], 0x0, &(0x7f0000b4b000-0x81)=""/129, 0x81, 0x0}, 0x0) r2 = open(&(0x7f0000cd7000)='./file0\x00', 0x200, 0x90) write$selinux_validatetrans(r2, &(0x7f00004b6000)={'system_u:object_r:kmsg_device_t:s0', 0x20, 'system_u:object_r:getty_exec_t:s0', 0x20, 0x3b, 0x32, 0x20, '/usrsbin/cupd\x00'}, 0x56) recvfrom(r0, &(0x7f0000c77000)=""/37, 0x25, 0x0, &(0x7f000006d000-0x1c)=@in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, 0x1c) 2018/01/26 10:31:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x14, 0x0, &(0x7f000000e000)=[@increfs_done={0x40106308, 0x0, 0x0}], 0x0, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x18, 0x21, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000d3e000-0x10)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000a36000)=0x0, &(0x7f0000ba6000)=0x4) r1 = syz_open_dev$sndtimer(&(0x7f0000215000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f000088b000-0xc)={0x0, 0x48, &(0x7f000038e000)=[@in6={0xa, 0x1, 0x3f, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x101}, @in6={0xa, 0x2, 0x3ff, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x5}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000266000-0x4)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f000006d000-0x10)={r2, 0x800, 0x0, 0x1}, 0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f000001e000-0x4)=0x9) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00006ec000-0xc)={0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f000001d000-0x50)={0x0, 0x1, 0x0, 0x0, 0xf, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) [ 209.355272] binder_alloc: 576: binder_alloc_buf, no vma [ 209.360932] binder: 576:581 BC_INCREFS_DONE node 303 has no pending increfs request [ 209.383210] binder: 580:584 transaction failed 29189/-22, size 0-0 line 2788 [ 209.394827] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x18, 0x21, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:01 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000213000-0x8)='./file0\x00', &(0x7f000078f000-0x8)='./file0\x00', &(0x7f0000983000-0x7)='mqueue\x00', 0x0, &(0x7f0000654000-0x1)="") r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000be6000-0x1)=0x0) r1 = creat(&(0x7f0000489000)='./file0/bus\x00', 0x0) mount(&(0x7f0000491000-0x12)='./file0/bus/file0\x00', &(0x7f0000b28000-0xc)='./file0/bus\x00', &(0x7f000003a000-0x7)='mqueue\x00', 0x0, 0x0) utimensat(r0, &(0x7f0000f64000-0x12)='./file0/bus/file0\x00', &(0x7f0000d23000)={{0x0, 0x7530}, {0x77359400, 0x0}}, 0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000819000-0x20)={0x0, 0xaf6f, 0x2, 0x7, 0x7, 0x2b6, 0x0, 0x1, 0x0}, &(0x7f000055c000-0x4)=0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000195000)={r2, 0x9}, &(0x7f00006d6000-0x4)=0x8) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000ffa000-0x4)=0xffffffff) 2018/01/26 10:31:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00006b9000-0xd)='/dev/dmmidi#\x00', 0x2, 0x4000) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000cb6000-0x70)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00004c7000)='/dev/rtc\x00', 0x400ac0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000fb4000+0x6df)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) close(r0) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000d06000-0x10)={r2, &(0x7f00003d2000+0x244)="15ed186bc1a20487682d604800b9ee1ea2ddaf82ebb85516eebdc7879899c8c7c013b67dfad9c8b579203c58585e56675d363572cbcb282cb480469f0aea2e468628204d2a791ceb00031f15a99b275aa2b1cfa5954e311ad330b029ab763e0080eb1fe6456e321897ffd7e818b9ee8d102db5d90cdc5886888ecc8b02588dbcce952092a731e24c669d348f96e3acc0e071852d093b66ffb6851e9b10"}, 0x10) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f000093b000-0x8)=[0x800, 0x9]) [ 209.410825] binder: 590:592 BC_INCREFS_DONE node 306 has no pending increfs request [ 209.411043] binder_alloc: 590: binder_alloc_buf, no vma 2018/01/26 10:31:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x8, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}], 0x0, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x18, 0x21, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:01 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1f, 0x803, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000865000-0x28)={@generic="63b4fb2e0888732db79209dc0a7ad1d4", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000d9d000-0x10)={r1, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, [0x0, 0x0]}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r2, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000ec9000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000ad1000)=""/0, 0x0, 0xffffffffffffffff) 2018/01/26 10:31:01 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00007b3000-0x11)='/dev/vga_arbiter\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000893000-0x8)={0x0, 0x80000001}, &(0x7f000021f000-0x4)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000003c000-0x8)={r1, 0xfff}, &(0x7f0000f0e000-0x4)=0x8) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00001f4000)={0x0, 0x0}) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000921000)=r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000eab000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw-twofish-3way\x00'}, 0x58) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000e4f000)={@common='irlan0\x00', @ifru_flags=0x500}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000403000-0x8d)="71e67a15df848dec108cec478e2e4bb4a2c8f1268ce73a338fbd5769094347ea", 0x20) pipe(&(0x7f00009a2000-0x8)={0x0, 0x0}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000e54000-0x20)="b17ec072d6c986be61a8557767c9c2e47f1182f03ad79bde328144d224c47bf1", 0x20) 2018/01/26 10:31:01 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000046000-0x12)='/dev/snd/midiC#D#\x00', 0x0, 0x400080) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000ede000-0x64)=""/100) close(r0) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:01 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00006b9000-0xd)='/dev/dmmidi#\x00', 0x2, 0x4000) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000cb6000-0x70)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00004c7000)='/dev/rtc\x00', 0x400ac0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000fb4000+0x6df)={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) close(r0) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000d06000-0x10)={r2, &(0x7f00003d2000+0x244)="15ed186bc1a20487682d604800b9ee1ea2ddaf82ebb85516eebdc7879899c8c7c013b67dfad9c8b579203c58585e56675d363572cbcb282cb480469f0aea2e468628204d2a791ceb00031f15a99b275aa2b1cfa5954e311ad330b029ab763e0080eb1fe6456e321897ffd7e818b9ee8d102db5d90cdc5886888ecc8b02588dbcce952092a731e24c669d348f96e3acc0e071852d093b66ffb6851e9b10"}, 0x10) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f000093b000-0x8)=[0x800, 0x9]) [ 209.411069] binder: 580:584 transaction failed 29189/-3, size 0-0 line 2903 [ 209.422945] binder_alloc: 590: binder_alloc_buf, no vma 2018/01/26 10:31:01 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x8, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}], 0x0, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x18, 0x21, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 209.422972] binder: 574:596 transaction failed 29189/-3, size 0-0 line 2903 [ 209.435563] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.438212] binder: 599:600 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 209.438224] binder: 599:600 BC_INCREFS_DONE node 309 has no pending increfs request [ 209.438881] binder: 599:600 ioctl c0306201 2000efd0 returned -11 [ 209.481896] binder: 605:607 transaction failed 29189/-22, size 0-0 line 2788 [ 209.483496] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.502783] binder: 605:614 transaction failed 29189/-22, size 0-0 line 2788 [ 209.505374] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.520066] binder: 608:615 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 209.539309] binder: 619:621 transaction failed 29189/-22, size 0-0 line 2788 [ 209.539425] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x80000000000002, 0x0, &(0x7f0000e19000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000e8f000)=[{&(0x7f0000fb7000-0x64)=""/25, 0x19}], 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = dup2(r0, r1) write$evdev(r1, &(0x7f0000bee000)=[], 0x2d4e53c3) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000939000-0x4)=0x0) 2018/01/26 10:31:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000273000-0x5)='/dev/amidi#\x00', 0x8, 0x101000) fchmodat(r1, &(0x7f0000c9b000-0x8)='./file0\x00', 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000ca3000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f00008da000-0x8)=@abs={0x1, 0x0, 0x0}, 0x8) connect$unix(r2, &(0x7f00000bc000)=@abs={0x1, 0x0, 0x0}, 0x8) connect$ipx(0xffffffffffffffff, &(0x7f00008e9000-0xe)={0x4, 0x0, 0x0, "fad1426895e9", 0x0, 0x0}, 0x10) 2018/01/26 10:31:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000072e000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = syz_open_dev$vcsa(&(0x7f000009b000)='/dev/vcsa#\x00', 0x3, 0xd52126638fcac57) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000d49000)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000049e000)=0x14) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:02 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x8, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}], 0x0, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x18, 0x21, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f000022d000)='/dev/amidi#\x00', 0x1, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000163000)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00009a4000)='/dev/sequencer2\x00', 0x200800004200, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40045109, &(0x7f0000505000)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 10:31:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000a31000)={0x0, 0x0}) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000dc2000)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}}, 0x8) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00008e9000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f000071b000)={0x0, 0x3df0}, &(0x7f0000796000-0x4)=0x6) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000e4a000)={r2, @in6={{0xa, 0x0, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xdba}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0xfff}, 0x98) r3 = socket$inet_sctp(0x2, 0x800000005, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000755000)=[{&(0x7f0000f72000-0x10)=@in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000dc4000-0x10)=[], 0x0, &(0x7f000070c000)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2c, 0x0}], 0x1, 0x0) 2018/01/26 10:31:02 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x40800) r1 = eventfd2(0x8, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x400) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000c7b000)={r1, 0x0, 0x8000, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) signalfd4(r1, &(0x7f00009d3000-0x8)={0x1000}, 0x8, 0x800) r3 = syz_open_dev$binder(&(0x7f000025c000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) r4 = dup2(r3, 0xffffffffffffffff) ioctl$TCSETA(r4, 0x5406, &(0x7f0000b71000)={0x7, 0x8, 0xff0c, 0x4, 0xffffffffffffff00, 0x2, 0x2, 0x1, 0x8001, 0x8001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/01/26 10:31:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000c7d000-0x8)={0x2, [0x6, 0x14de]}, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000eb2000-0x4)=0x0) r1 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000908000-0x4)=0x0, &(0x7f0000a75000-0x4)=0x4) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000043a000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f000070b000)={0x3, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000786000)='/dev/cuse\x00', 0x2400, 0x0) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000d62000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 209.544776] binder: 619:623 transaction failed 29189/-22, size 0-0 line 2788 [ 209.550133] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.551195] binder: 620:624 transaction failed 29189/-22, size 0-0 line 2788 [ 209.553556] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.577548] binder: 625:626 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 209.662487] binder: 574:579 transaction failed 29189/-3, size 0-0 line 2903 [ 209.669714] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.675228] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:02 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0x4, 0x0, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) pwrite64(r0, &(0x7f0000f39000)="4e470f6db2229ed98358525a2a0e12a89ebd96ca6b5365e83f538949b1fddc5919b55bc4ecfb33e3722f2f69c43579b65d5a2dba26992adeb51bffdb00db86fc23f5c20fecf252c2c6d1e695ce4ae977bade83478ce2bb8e26d30454c5dea08562a85343fba0c7142c4052c91c3c010894ba036c99a9993a611cd8fd10cbc0f17381cfb108b71df7f1690fc9ecc073e25bf123269a9c5adb461de64ceb023ad011cac51ae0f0f60e2587b6ced7dc4f52543408867e0f6ca4dfb7144ee289dde6edfabec9a6a1bf5620f6d5751100b4b2c6dc25a801dfaace4f5199372e588245bb2578952c3832f02b8e0eb0d44535ceb2ae", 0xf2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00008b3000-0x3)='nv\x00', 0x3) getsockopt$inet_tcp_int(r0, 0x6, 0x1a, &(0x7f0000ae7000)=0x0, &(0x7f000034e000-0x4)=0x4) [ 209.698201] binder_alloc: 631: binder_alloc_buf, no vma [ 209.699550] binder: 631:635 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 209.719427] binder: 632:642 transaction failed 29189/-3, size 0-0 line 2903 [ 209.731478] binder: 634:639 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:02 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) r1 = memfd_create(&(0x7f0000630000)='\x00', 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000f83000)={0x0, @empty=0x0, @broadcast=0x0}, &(0x7f0000aea000)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f000029d000)={@loopback={0x0, 0x1}, 0x9, r2}) lsetxattr(&(0x7f0000c6b000-0x8)='./file0\x00', &(0x7f0000d6e000)=@random={'user.', '\x00'}, &(0x7f0000c7d000-0x11)='\'em1\nkeyring%\\](\x00', 0x11, 0x2) sendto(r0, &(0x7f00008b7000)="", 0x0, 0x0, &(0x7f0000162000-0x10)=@can={0x1d, 0x0, 0x0, 0x0}, 0x10) [ 209.749601] binder: 645:650 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 209.749613] binder: 645:650 BC_INCREFS_DONE node 320 has no pending increfs request [ 209.749630] binder: 645:650 ioctl c0306201 2000efd0 returned -11 [ 209.779684] binder: 634:649 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:02 executing program 4 (fault-call:7 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:02 executing program 7: mbind(&(0x7f000040e000/0x1000)=nil, 0x1000, 0x0, &(0x7f0000000000+0x268)=0x0, 0x100000001, 0xa) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001000-0x8)={0x0, 0x0}, 0x4000) ioctl$TIOCNOTTY(r0, 0x5422) 2018/01/26 10:31:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) syncfs(r0) 2018/01/26 10:31:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x0, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000090000)=0x0, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x24, 0x21, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x3, 0x0, 0x0}, [@nested={0x10, 0x1, [@typed={0xc, 0x1, @fd=0xffffffffffffffff}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 209.779836] binder: 632:654 transaction failed 29189/-22, size 0-0 line 2788 [ 209.789869] binder: 656:658 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 209.789881] binder: 656:658 BC_INCREFS_DONE node 323 has no pending increfs request [ 209.789897] binder: 656:658 ioctl c0306201 2000efd0 returned -11 [ 209.831146] binder: 663:665 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fbb000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = epoll_create1(0x80000) epoll_pwait(r2, &(0x7f0000ee5000)=[{0x0, 0x0}], 0x1, 0xffffffffffff7fff, &(0x7f000074b000-0x8)={0x99fa}, 0x8) r3 = syz_open_dev$usbmon(&(0x7f0000dd0000-0xd)='/dev/usbmon#\x00', 0x1c00000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f00002a4000)={0x5, 0x10001, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000de4000-0x38)={0x1, 0x0, [{0x40000070, 0x0, 0x0}]}) bpf$OBJ_GET_PROG(0x7, &(0x7f000046a000)={&(0x7f00005f5000-0x8)='./file0\x00', 0x0, 0x8}, 0x10) 2018/01/26 10:31:02 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f000021f000)='/dev/hwrng\x00', 0x448000, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:02 executing program 1: mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80005, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000290000)='/dev/autofs\x00', 0x8600, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00002cf000)=[0x20, 0x9]) r2 = dup(r0) mmap(&(0x7f0000f9a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00001d1000-0xb3)={0x0, 0xab, "e3a8454c26f2919c539e582df8272d41bd0aadc75146404fa2e00239f78189bd6d7c5bbbac3362430067fb59833f18af09980a8d82c3693111b5241397c358a454116f245bef141789f8537d3a1f2ebc456e7eb02861a9c10c633b393240d0151555d6dedf3233476bce91deb771fa254508cb09c2eef5707d9d0c6a8815cbe5438ddae14910039a6ce15dbf39ed30e1bcfc24367f37eca7df395a978f7859f2ba75392100d63515efcdc1"}, &(0x7f0000f9b000-0x4)=0xb3) mmap(&(0x7f0000f9a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000efe000-0x1c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(r2, &(0x7f000036e000-0x8)='./file0\x00', 0x32) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000f9b000-0x20)={0x4, 0x503c0549, 0x200, 0x1, 0x4, 0x1, 0xb1a0, 0x5, r3}, 0x20) mmap(&(0x7f0000f9b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000f9b000)={@generic="f84e07487f950b9bd216e0dd37ab88a5", &(0x7f00000f8000-0x15)=@ethtool_gstrings={0x1b, 0x0, 0x0, ""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 209.831157] binder: 663:665 BC_INCREFS_DONE node 324 has no pending increfs request [ 209.831172] binder: 663:665 ioctl c0306201 2000efd0 returned -11 [ 209.861238] Bearer <> rejected, not supported in standalone mode [ 209.885459] binder: 672:680 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 209.892364] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.892495] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.892714] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.902960] binder: undelivered TRANSACTION_ERROR: 29189 [ 209.923955] binder: 672:680 unknown command 0 [ 209.929968] binder: 672:680 ioctl c0306201 2000efd0 returned -22 [ 209.937138] binder: BINDER_SET_CONTEXT_MGR already set [ 209.942693] binder: 672:686 ioctl 40046207 0 returned -16 [ 209.953547] binder: 672:680 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 209.961007] binder: 672:680 BC_INCREFS_DONE u0000000000000000 no match 2018/01/26 10:31:02 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000027e000-0x11)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000fce000)={0x4, 0x1}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000fab000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000714000-0x30)={0x24, 0x0, &(0x7f000047c000)=[@request_death={0x400c630e, 0x2, 0x2}, @acquire_done={0x40106309, r2, 0x0}], 0x15, 0x0, &(0x7f0000f57000-0x15)="b960346d251ae1baecc622d88696f8b3283badf3c9"}) close(r0) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$cuse(0xffffffffffffff9c, &(0x7f0000642000)='/dev/cuse\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2018/01/26 10:31:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000627000-0xa)="6e65742f69676da800fb") ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000a7d000-0xa0)=""/160) sendfile(r0, r0, &(0x7f00005d8000-0x8)=0x2, 0x133) 2018/01/26 10:31:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x181001) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r0, &(0x7f0000f51000-0x70)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) sendfile(r1, r2, &(0x7f00000de000-0x8)=0x0, 0x100000001) dup2(r2, r1) 2018/01/26 10:31:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000c27000)='/dev/qat_adf_ctl\x00', 0x408800, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f000018c000-0x26)={{0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4c, {0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xd}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='yam0\x00'}) perf_event_open(&(0x7f0000078000-0x78)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000e02000)={@common='lo\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route(r1, &(0x7f000058d000-0x38)={&(0x7f000078d000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00004e8000-0x10)={&(0x7f00008b1000)=@ipv4_newaddr={0x44, 0x14, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x18, 0x0, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @local={0xac, 0x14, 0x0, 0xaa}}, @IFA_FLAGS={0xbe84542ac838e5f3, 0x8, 0x0}, @IFA_BROADCAST={0x8, 0x4, @broadcast=0xffffffff}, @IFA_LOCAL={0x0, 0x2, @empty=0x0}]}, 0x44}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:02 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x2, 0x7, &(0x7f0000318000-0x8)={0x0, 0x0}) getsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000076000)=0x0, &(0x7f00008e0000-0x4)=0x4) r1 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000491000-0x58)={{0x1, 0x2}, 0x1, 0x8, 0x81, {0x1, 0x0}, 0xeb, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000e32000-0x4)=0x5, 0x329) r2 = socket$packet(0x11, 0x2, 0x300) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000398000-0x8)={0x0, 0x0}) socket$packet(0x11, 0x3, 0x300) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) pread64(r2, &(0x7f0000fdf000)=""/89, 0x59, 0xa) 2018/01/26 10:31:02 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000d84000-0x10)='/selinux/create\x00', 0x2, 0x0) 2018/01/26 10:31:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000b28000)='./file0\x00', 0x0) mount(&(0x7f00004a8000)='./file0\x00', &(0x7f00009ba000-0x8)='./file0\x00', &(0x7f0000393000-0x7)='fuse\x00', 0x0, &(0x7f0000141000)="") mknod(&(0x7f00005d3000-0xe)='./file0/file0\x00', 0x8021, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000de7000)={0x0, 0x0}) sendmmsg(r0, &(0x7f00006e8000)=[{{&(0x7f0000438000)=@l2={0x1f, 0x32be, {0x7, 0xffffffffffffff00, 0x6d180b6e, 0x46, 0xcd, 0xc294}, 0x0, 0x400}, 0xe, &(0x7f0000f80000-0x10)=[{&(0x7f0000753000)="72c41235db10efecf49ff471b362547ff871a65280049cfa4832eb2cd409abc395f8f27a11c1c8d640b132765d12e2823146", 0x32}, {&(0x7f0000f41000-0x69)="538eaba67d25eaed08750fd6ecf722e53c1c892885c3fb7ffc3e03b3ea99f2836e36c6989f0d2d01cabee404733e209c1709dba04ab67ca87cf2781ddd74c40fe3601c275f029222f2209cacee26041e22b93a150ac4dc48871637ee5a120433f42512fc10709b5001", 0x69}], 0x2, 0x0, 0x0, 0x8000}, 0x3}, {{&(0x7f00003aa000-0x6)=@hci={0x1f, 0x81, 0x3}, 0x6, &(0x7f00006df000)=[{&(0x7f0000044000)="", 0x0}, {&(0x7f00003e1000-0x76)="05e7a6a8e760e7a1300ebc2ca4ec537768ee66231e31fbcbd9975dc80d8b96f530f108d9cfb10236161246724e15333a61bb34f67db9e76949b5f34d5af7d8d2d8f2cc97533340025081c519463d618eff59987fac860144dd5cdf5ea01149aa3dba9f52e1014a1aac7748bfce9fb9c3a7810f01840f", 0x76}], 0x2, 0x0, 0x0, 0x1}, 0x3}, {{&(0x7f0000c63000)=@llc={0x1a, 0xf6, 0x8, 0x5, 0x200, 0x2e, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0]}, 0x10, &(0x7f000011e000-0x18)=[{&(0x7f00003ce000-0xa4)="9b0372637da8d7c35a496e36b38f9f14543c52d5afb2e61c72af80858ef1988957177b2cdb49647cb40faef736727d08af0e9dca35465c17e809e432e2cc2543b84d63441206d655113f8edcc12f236e83e5efe1827fd3b1ab0a98a77058ea1db288ebfe176eb8cda7c23b1a6ab28423c00ea176b1474eabafe3d7e36d58960347caab24748d935d2561e387a06bdecf4311b1033ff775cc99e8934893fb9503a4f1e83c", 0xa4}, {&(0x7f00004eb000-0x98)="dab5d8274eb5e86bad0024fcb6bac25bf17d6794d9b032e99a438d8a1dba2520408b2b58e87ec3d439cb6f641a1c58e1e29c02560f637794a7c113fa89a11452fc495f000731f751789d9566bf2bdb485529d6d954979e2e6f73076ecbf8dd1e4a437909232b9d8d7e8425457f17758dbfcb499511d05b4fd64a8b180574c7192ca5707bfa0d992e04724fc0868106dd9472f3b56ebb0c63", 0x98}, {&(0x7f0000edd000-0x93)="dd80a9f25fe496e328bdc0a164af1ee031b28944586aac16e7a1c263a5916234cdd2699b3a924b0bb95e76120336907108bccdfff7b33a9b5baf69b37ae43b74beabf4477fbe59b837d9f3bc90c783e188dfa4a5ca3f70a2e02aef9fdcbcbb72ecf7e8f6ef6e1ce42362d7316e4c62e00bfc7f3a9c7a575d72151099549c64a420e5792379336d700dfbf725da83bb0ec3fef0", 0x93}], 0x3, &(0x7f0000a74000-0xac)=[], 0x0, 0x44000}, 0x4}], 0x3, 0x4840) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000342000)=@get={0x1, &(0x7f00001b7000-0x29)=""/41, 0x8001}) execve(&(0x7f00008a7000-0xe)='./file0/file0\x00', &(0x7f0000fbf000)=[], &(0x7f000009b000)=[&(0x7f00002c3000-0x1)='\x00', &(0x7f0000cfd000-0x1c)='-trustedselinuxem0(%user{/!\x00', &(0x7f0000cf3000)='fuse\x00', &(0x7f000082a000)='fuse\x00', &(0x7f000097b000-0x5)='fuse\x00']) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000618000)='/dev/ppp\x00', 0x2, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00009c8000-0x1c)={&(0x7f000037e000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00001de000-0x8)={&(0x7f0000cbf000)={0x230, 0xa, 0x0, 0x0, 0x7, 0x2, {0xf, 0x0, 0x4}, [@typed={0x10, 0x8a, @str='fuse\x00'}, @nested={0x12c, 0x1a, [@generic="eb9ae5452de3216424309722c670460e9e28bdf8c7d5c606a51c1706c07c3f48a5d5c96d8e2e76af33374f69c0154d51d0ce0f11dcfb15151f01e76257a6db8760b4fe91a68e716f115e7356249483fdf9ae368950053d66591759fe0eedd9528ede74d8e591361be0c6ea2fd097cb4a8c1371d6ae92fc2875492e569440a5987ec634450c9a8eb969b6dc7d7a841f73100a0b58b82280f86c481d76321696cf41aa4d9e7ef3c8311fe758ff7006481dfdc51093831c835d2e70c97a6016b8cbbca3fd0f38c0115b7045a7f5143dc96ef921c1321084a2ec61", @typed={0xc, 0x48, @ipv4=@dev={0xac, 0x14, 0x0, 0xb}}, @typed={0x18, 0x15, @ipv6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @generic="5970ef30e7300c4f8257ce0cbc4a3db157c98892deadad073c0879b9347dccd77518d97b73b8825a"]}, @typed={0xa0, 0x28, @binary="a99e5354eda6e8cf07ac33391651cc6f807c7b223f7ec296e1e86d34c68c6864e7f6ff2b61eb836ba0077c10962b68169c3b7f701f97c6a29cdbc61e09a12be1f5d8d45563c593b09204fde989c1a75bd6572828b6bdc57e4be7f4429deca9ec3b2c333db2ed0beb860d5e8a4bb4ddf1c6dc03764c274400fccadf32ad4a70922c0b7107d40c94e8afbf50d30d8cb9fed82c31ed93"}, @typed={0xc, 0x85, @ipv4=@dev={0xac, 0x14, 0x0, 0xe}}, @typed={0x10, 0x86, @u64=0x0}, @nested={0x24, 0x43, [@generic="e5dd08da9b210c611dfb503b22ab0b0bfc9d", @typed={0xc, 0x3, @str='\x00'}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r3 = syz_open_dev$sndmidi(&(0x7f0000fa9000-0x12)='/dev/snd/midiC#D#\x00', 0x400, 0x404000) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f00001ab000-0xc)={0x20000000, 0x0}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000863000-0x4a)={@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x4, 0x2, 0x4}}, {&(0x7f00009e7000)=""/16, 0x10}, &(0x7f0000d5b000)=0x0, 0x23}, 0x4a) 2018/01/26 10:31:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ed8000/0x3000)=nil, 0x3000, 0x1, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f00001f1000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f000042f000)={0x0, 0x0, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$amidi(&(0x7f0000be8000-0xc)='/dev/amidi#\x00', 0xfffffffffffffc01, 0x10081) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000521000)=0x0) mknodat(r2, &(0x7f0000e9a000)='./file0\x00', 0x4, 0x6) [ 210.043472] binder: 690:700 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000547000-0x1)='/dev/binder#\x00', 0xffffffffffffffff, 0x2000000000000802) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000590000)={0x0, 0x0}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f00002fa000-0x18)=@add_del={0x2, &(0x7f000094f000)=@generic="3405d6e58c027172f1dbf92be64318e5", 0x4}) close(r0) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x4, 0x800, 0x0) sendmsg$nl_route(r0, &(0x7f0000e9c000-0x38)={&(0x7f0000770000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000009b000)={&(0x7f000083a000-0x38)=@newlink={0x28, 0x10, 0x9, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0xa, ""}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x0}, 0x0) set_robust_list(&(0x7f0000aa0000)={&(0x7f00002f0000/0x1000)=nil, 0x1, &(0x7f0000136000/0x2000)=nil}, 0xc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000380000-0xb)='/dev/hwrng\x00', 0x7658c0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000eba000-0x90)={[0x4f600000000000, 0x80000000, 0x5, 0x7fff, 0x40, 0x6, 0x80, 0xfffffffffffffff7, 0x77af, 0xeb, 0xa61, 0x1, 0xa1, 0x0, 0x363, 0x7f], 0xf000, 0x400c0}) 2018/01/26 10:31:02 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000f75000)={0x0, 0x100, 0xfffffffffffffad6, 0x2}, &(0x7f0000a9e000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000718000-0x8)={r3, 0x8, 0xb6d}, &(0x7f0000d5c000-0x4)=0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)="") pipe2(&(0x7f0000672000-0x8)={0x0, 0x0}, 0x4000) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f000078d000-0x4)=0x1f, 0x4) mount(&(0x7f0000e75000-0x8)='./file0\x00', &(0x7f00006a5000)='./file0\x00', &(0x7f00000f7000)='binfmt_misc\x00', 0x20000, &(0x7f0000b2b000)="") mount(&(0x7f0000eb8000-0x8)='./file0\x00', &(0x7f00006e8000+0xf18)='.', &(0x7f000086a000)='btrfs\x00', 0x2010, 0x0) mount(&(0x7f00004bf000-0x1)='.', &(0x7f00001a3000-0x1)='.', &(0x7f0000ea6000-0x6)='mslos\x00', 0x200500e, &(0x7f0000ec3000-0x1)="") [ 210.049671] binder: 689:699 transaction failed 29189/-22, size 0-0 line 2788 [ 210.049941] binder: undelivered TRANSACTION_ERROR: 29189 [ 210.066854] binder_alloc: 692: binder_alloc_buf, no vma 2018/01/26 10:31:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000007000-0xa)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f00001b3000)=[{r0, 0x0, 0x0}], 0x1, &(0x7f000023a000-0x10)={0x77359400, 0x0}, &(0x7f000016f000)={0x0}, 0x8) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000ee7000)={0x767, 0xc, [0x7ff, 0x7, 0xff]}) ioctl$int_in(r0, 0x800204c0045005, &(0x7f0000618000-0x8)=0x1000) [ 210.066881] binder: 689:705 transaction failed 29189/-3, size 0-0 line 2903 2018/01/26 10:31:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000054d000-0xd)='/dev/binder#\x00', 0x0, 0x3) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000c11000-0x9)='/dev/ppp\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000632000-0x8)={0x0, 0x0}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f00008e0000-0x400)={"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"}) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00008fa000-0x4)={0x2, 0x400, 0x6d5a}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000161000-0x4)=0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) execveat(r2, &(0x7f0000bc9000+0x6ab)='./file0\x00', &(0x7f0000aa9000)=[&(0x7f00003ea000-0xd)='/dev/binder#\x00'], &(0x7f00008bd000)=[&(0x7f000031f000)='wlan1%*ppp0em1posix_acl_accessmime_typecgroupsecuritysystem\x00'], 0x1500) 2018/01/26 10:31:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00004ca000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000de8000-0x5008)=@ethtool_per_queue_op={0x4b, 0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 210.068232] binder: undelivered TRANSACTION_ERROR: 29189 [ 210.072419] netlink: 36 bytes leftover after parsing attributes in process `syz-executor5'. [ 210.075249] binder: 692:701 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 210.075261] binder: 692:701 BC_INCREFS_DONE node 328 has no pending increfs request [ 210.075279] binder: 692:701 ioctl c0306201 2000efd0 returned -11 [ 210.092724] binder: BINDER_SET_CONTEXT_MGR already set [ 210.092742] binder: 692:714 ioctl 40046207 0 returned -16 [ 210.111116] binder: 692:701 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 210.111127] binder: 692:701 BC_INCREFS_DONE u0000000000000000 no match [ 210.125870] binder: 690:717 transaction failed 29189/-22, size 0-0 line 2788 [ 210.156842] binder: 723:729 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 210.156845] binder_alloc: 723: binder_alloc_buf, no vma [ 210.156854] binder: 723:729 BC_INCREFS_DONE node 331 has no pending increfs request [ 210.156868] binder: 716:722 transaction failed 29189/-3, size 0-0 line 2903 [ 210.156873] binder: 723:729 ioctl c0306201 2000efd0 returned -11 [ 210.157308] binder: undelivered TRANSACTION_ERROR: 29189 [ 210.194448] binder: BINDER_SET_CONTEXT_MGR already set [ 210.194471] binder: 723:739 ioctl 40046207 0 returned -16 [ 210.219754] binder: 723:729 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 210.219767] binder: 723:729 BC_INCREFS_DONE u0000000000000000 no match [ 210.248131] binder_alloc: 723: binder_alloc_buf, no vma [ 210.248155] binder: 744:745 transaction failed 29189/-3, size 0-0 line 2903 [ 210.251892] binder: undelivered TRANSACTION_ERROR: 29189 [ 210.263513] binder: 744:757 transaction failed 29189/-22, size 0-0 line 2788 [ 210.278375] netlink: 36 bytes leftover after parsing attributes in process `syz-executor5'. [ 210.297175] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:02 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x2403, &(0x7f000070a000-0x8)=0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000fb2000-0xa)='/dev/cuse\x00', 0x280000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000e4d000-0x8)={0x0, 0x80}, &(0x7f0000da0000-0x4)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00004f5000)={0x7, 0x7ff, 0x4, 0x200, 0x6, 0x2, 0x5000000000000000, 0x8000, r2}, 0xfffffffffffffebb) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000cda000-0x70)="fb7bd4f5d7082524ad80ce7b6075baedde2351203bb529f303dea096a69092f2b22cd90b0f3ce998dad1370a57f78192052cce6e12cf78938eb66ba6cc907d05edcedab9f2845b3aa1e9ae57781fecc6332d520ce1ab472fab6ddb7bacbf235a9238eb251bd8fcf489f9ca78815bb6ef", 0x70) fcntl$setstatus(r1, 0x4, 0x2800) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000fea000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) 2018/01/26 10:31:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000676000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000371000-0x20)={@generic="e1159970b6abc8a24b07d0eac54631b0", @ifru_addrs={0x2, 0x1, @rand_addr=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r2 = syz_open_procfs(0x0, &(0x7f0000aaf000-0xc)='oom_adj\x00') sendfile(r1, r2, &(0x7f0000f23000-0x4)=0x0, 0x5) 2018/01/26 10:31:02 executing program 3: r0 = memfd_create(&(0x7f0000d8d000)="2a79835e2d00", 0x3) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x0, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000b76000)=0xfff, 0x4) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r1, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:02 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = request_key(&(0x7f0000d46000)='encrypted\x00', &(0x7f000067a000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000081d000)='/dev/binder#\x00', 0x0) add_key(&(0x7f0000621000)='user\x00', &(0x7f000055d000)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, r1) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:02 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000bba000)='./file0\x00', 0x40, 0x41) getsockopt$inet6_tcp_int(r1, 0x6, 0x16, &(0x7f0000125000)=0x0, &(0x7f0000521000)=0x4) ioctl$TUNATTACHFILTER(r1, 0x400854d5, &(0x7f00002de000)={0x3, &(0x7f0000f92000-0x18)=[{0x5, 0x3, 0x9, 0x1c}, {0xc4e2, 0x3, 0x1, 0x7}, {0xa6c, 0xfffffffffffffff9, 0x7fff, 0xc91b}]}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000f1b000)={0x3, &(0x7f000030b000-0x18)=[{0xffffffffffffffff, 0x6, 0xcb7, 0x5}, {0x10000, 0x71, 0x2, 0xbecb}, {0x4, 0x80000000, 0x3, 0x8}]}, 0x8) getsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000efc000)=0x0, &(0x7f0000f24000-0x4)=0x4) getsockname$inet6(r0, &(0x7f0000b1b000-0xf)={0x0, 0xffffffffffffffff, 0x0, @mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}, &(0x7f000003a000)=0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000625000)={0x0, 0x40, &(0x7f0000f91000)=[@in={0x2, 0x0, @rand_addr=0xfc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @rand_addr=0x81, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000dfd000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000c38000-0xc)={r2, 0x2, 0x2, [0x2, 0x6]}, &(0x7f0000768000)=0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000f25000-0x50)={@common='tunl0\x00', @ifru_mtu=0x80000001}) 2018/01/26 10:31:02 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000552000)='/selinux/enforce\x00', 0x214401, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000941000-0x8)={0x0, 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000b36000-0x8)={r1, r2}) r3 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r3) r4 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 2018/01/26 10:31:02 executing program 2: mmap(&(0x7f0000000000/0x24000)=nil, 0x24000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000023000)={0x1c, 0x20, 0xafb, 0xffffffffffffffff, 0xffffffffffffffff, {0x3, 0x0, 0x0}, [@nested={0x8, 0x4, [@generic='\'']}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) sync_file_range(r0, 0x5, 0x5, 0x4) 2018/01/26 10:31:02 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000-0x16)='/selinux/checkreqprot\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000000)=@ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000a3b000)={0x2, 0xad}) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) [ 210.425504] binder: undelivered TRANSACTION_ERROR: 29189 [ 210.433081] binder: undelivered TRANSACTION_ERROR: 29189 [ 210.455894] binder_alloc: 763: binder_alloc_buf, no vma 2018/01/26 10:31:02 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000088b000-0x13)='/dev/snd/controlC#\x00', 0x4f79, 0x40000000101844) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000b000-0x4)=0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00006a7000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) pselect6(0x40, &(0x7f0000d49000-0x40)={0x3, 0x1, 0x100000000, 0x297, 0x3, 0x5, 0x80, 0x4}, &(0x7f000035d000)={0x10000000000000, 0x8001, 0xb7, 0x1f, 0x8, 0x4, 0x83d, 0x8ab4}, &(0x7f00005c1000-0x40)={0x80000001, 0x3, 0x5, 0x2, 0x26a2, 0x400, 0x6, 0x401}, &(0x7f0000f58000)={0x77359400, 0x0}, &(0x7f000093b000)={&(0x7f00009b7000)={0x8}, 0x8}) ppoll(&(0x7f0000b3a000)=[{r1, 0x0, 0x0}], 0x1, &(0x7f0000982000)={0x0, r2}, &(0x7f0000661000-0x8)={0xb50a}, 0x8) readv(r0, &(0x7f00002f1000-0x8)=[{&(0x7f00006b0000)=""/189, 0x3ab}], 0xb097c615e769884) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000770000)=0x0) 2018/01/26 10:31:02 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000b59000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f000086b000-0x18)={0x0, 0x5, 0xddb, &(0x7f0000860000)=0x0}) 2018/01/26 10:31:02 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000fd5000)='/dev/mixer\x00', 0x80200, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000ddf000-0xc)={0x0, 0x10, &(0x7f0000da6000)=[@in={0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000606000)=0xc) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00006a7000)={r1, 0xab, "99fd8f090570fb8efcb2806d7c0238cc0f8917f39eaaddcb5a009cef186d4292630b6da460d2fe036ee7eebb594065f9198c727512261f5c14e5619293ac7e8d0e333b84a4ea5573f7c0cc91d20ef5541b03c60c5b735bc870bbea147b591c870563a17dea270f51dde694a89bcaed1173ce9045020c9d9a279be1649e5fd7210d74503429b57df1024fab6a833e3879b64628aaf99bcd77ab4481cfec23bf0d7cb7518ab1890f1f13fc39"}, &(0x7f0000d2c000-0x4)=0xb3) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r2, &(0x7f000000e000-0x38)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000001000)={&(0x7f0000fc6000)={0x14, 0x21, 0x100000829, 0xffffffffffffffff, 0xffffffffffffffff, {0x403, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 210.467541] binder: 763:774 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 210.467552] binder: 763:774 BC_INCREFS_DONE node 335 has no pending increfs request [ 210.467568] binder: 763:774 ioctl c0306201 2000efd0 returned -11 [ 210.475771] binder: BINDER_SET_CONTEXT_MGR already set [ 210.475789] binder: 763:782 ioctl 40046207 0 returned -16 [ 210.488615] binder: 763:774 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 210.488626] binder: 763:774 BC_INCREFS_DONE u0000000000000000 no match [ 210.518860] binder: 787:790 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 210.518873] binder: 787:790 BC_INCREFS_DONE node 338 has no pending increfs request [ 210.518891] binder: 787:790 ioctl c0306201 2000efd0 returned -11 [ 210.537081] binder_alloc: 787: binder_alloc_buf, no vma [ 210.537109] binder: 769:788 transaction failed 29189/-3, size 0-0 line 2903 [ 210.538115] binder_alloc: 787: binder_alloc_buf, no vma [ 210.538138] binder: 765:792 transaction failed 29189/-3, size 0-0 line 2903 [ 210.549642] binder: BINDER_SET_CONTEXT_MGR already set [ 210.549660] binder: 787:795 ioctl 40046207 0 returned -16 [ 210.560866] binder: 787:790 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 210.560876] binder: 787:790 BC_INCREFS_DONE u0000000000000000 no match [ 210.645310] binder_alloc: 763: binder_alloc_buf, no vma [ 210.645324] binder: 765:773 transaction failed 29189/-3, size 0-0 line 2903 [ 210.645436] binder: undelivered TRANSACTION_ERROR: 29189 [ 210.650524] binder: undelivered TRANSACTION_ERROR: 29189 [ 210.669094] binder: 769:770 transaction failed 29189/-3, size 0-0 line 2903 2018/01/26 10:31:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x4) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000387000-0x10)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x87}]}, &(0x7f0000f92000-0x4)=0x10) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000841000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f000048c000-0x8)={0x0, 0x0, 0x0, 0x0}, &(0x7f000029a000)=0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000ddc000-0x48)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@call={0x85, 0x0, 0x0, 0x2a}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0x8000, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r2 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f000094d000-0x4)=r1, 0x4) write(r2, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/26 10:31:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000bb8000)=""/83, &(0x7f00005ab000-0x4)=0x53) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000a1d000)=0x0, &(0x7f000000f000-0x4)=0x4) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = getpgrp(0xffffffffffffffff) setpriority(0x1, r1, 0xff) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000098b000)='/selinux/status\x00', 0x0, 0x0) keyctl$join(0x1, &(0x7f0000770000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00004d5000-0x8)={0x0, 0x80000000}, &(0x7f0000a51000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000b5e000-0xa0)={r3, @in6={{0xa, 0x3, 0x6, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast1=0xe0000001}, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, 0x10001, 0xc79, 0x9, 0xd8}, &(0x7f0000a96000)=0xa0) 2018/01/26 10:31:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000635000)=@un=@abs={0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000494000)=0x8, 0x80000) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000fd9000-0x28)={@common=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000d25000-0x8c)={0x0, @in={{0x2, 0x2, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000274000)=0x8c) r3 = syz_open_dev$tun(&(0x7f00006c9000-0xd)='/dev/net/tun\x00', 0x0, 0x204800) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00007c6000-0x50)={@common='bridge0\x00', @ifru_addrs=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x3, 0x3, 0x3}}}) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000ed1000-0x98)={r2, @in={{0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x101, 0xccd8}, 0x98) r4 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 2018/01/26 10:31:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00007bc000-0x8)={0x0, 0x0}) write$vnet(r0, &(0x7f0000a8d000)={0x1, {&(0x7f0000c91000)=""/24, 0xfffffffffffffed2, &(0x7f0000a5e000-0x65)=""/101, 0x0, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x24e) r1 = syz_open_dev$amidi(&(0x7f000022d000-0xc)='/dev/amidi#\x00', 0x0, 0x8000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000288000-0x1)={0xffff}, 0x1) 2018/01/26 10:31:03 executing program 6: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) r1 = socket$inet(0x2, 0xe, 0x10001) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000c6b000)={0x6, r1, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r3) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x4000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) personality(0x5000002) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:03 executing program 7: mmap(&(0x7f0000000000/0x35000)=nil, 0x35000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000035000-0x1)='./file0/bus\x00', &(0x7f000002d000-0x8)='./file0\x00', &(0x7f0000020000)='overlay\x00', 0x202008, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000032000-0x12)='/dev/input/mouse#\x00', 0x1, 0x200000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f000001a000)='./file0/bus\x00', 0x4a0041, 0xc2) linkat(r0, &(0x7f0000005000-0x8)='./file0\x00', r1, &(0x7f0000012000-0xc)='./file0/bus\x00', 0x0) mmap(&(0x7f0000035000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000035000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lgetxattr(&(0x7f0000035000)='./file0/bus\x00', &(0x7f0000036000-0xe)=@known='system.advise\x00', &(0x7f000000c000-0x18)=""/24, 0x18) 2018/01/26 10:31:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffff9c, &(0x7f0000129000)={0xffff}, 0x8, 0x800) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00001cc000-0x9)='net/tcp6\x00') readv(r2, &(0x7f0000266000-0x8)=[{&(0x7f0000c3e000)=""/256, 0x100}], 0x1) r3 = socket$key(0xf, 0x3, 0x2) fcntl$dupfd(r0, 0x406, r3) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f00007e9000)={0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$unix(r2, &(0x7f000083a000)={&(0x7f0000fa9000-0xa)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000eb3000-0x38)=[{&(0x7f000076f000-0xd3)="b8ded8639005c3b5f75316fa9cb0f4667087f17a2d158be0985fcef37f1e27921ed372652dc6b6b19879c159f4814e2aa0862586713941922177676ebad51b7fda4e99e580682bc32d031fdeff6903ed0a00559e8f8de26132bb7ca088e52f37dc6a7d40fb02e19fef80c465ae745370e20cb168ff7e452c8ccdd7cfd75ce899e3c95f6368c9b2c9e685ac88fdd0747ad7805c948f2bcaa5a1014b73cea7552e1c142e6a0ccb89236287b76a1facfccfdb82fbd33bdc3cd2d280a296cb1793364ba3f0728d16fc0d499b981fc5fe94bc10c268", 0xd3}, {&(0x7f0000844000)="6cf8414f40cb7f4d0cb901ce726a6e5cb57c16f638f36bcbcb0d152b05c3d20753d295f3c9ace8e9ee09c39a336ad5847673bdcc46be47ac8ba0a91747fa8677994464721bb115cfd4b13298c1aab3a17893a3b7c544b5ebcd48e2c04b1cbd278bae566dacd21037a437346380caa4fa1a8a4eac377ca1b89addd0f80a82e62f04323fd75a6576b6f091297fe9643d17a762f3ebe8b637fbf4dd282868e8f6e04912cdcfaa435ccef83ceb24e019a5d10114d06fe1649e6d325dba3e473552af10b7f4fb6b05e79500976fdb75d60e8db32583d1c0a33aa954dba7cff9d8d2d218ae96d5324f0d5c766fa018bfad", 0xee}, {&(0x7f0000523000-0xf6)="91a7e4cf7f7ea55339c1201ce3e83971b359e8783645bdd5b1e4d10d3198e345343b24dc869590365fefce2bedcc0e0922cd3d9030977f3974bf3e13757b963ba50ae2440b566a19b1986abcdf8c28bd6c71be401d9005a27272e3d9b123a0894fc76e3e39b5c430db47be3b6e6c8543b16ba51a63fbe9157a3a62b1e5ce486f498ea65745fef476f30f08ae0336f7eb9c280b347f90fe6ed5bbbf7a3a46fecef0ccc1d5fda86abf3e0bcafd9de59be111137ad50a6e5a0beede1a806fa2a3064e1dd5e3e3f37fad2465723b1d386fcea68b613eec0718dd236a0a6255ceeeb75efe590fe7ea9e26fcbed708c90954ad6901f780a526", 0xf6}, {&(0x7f0000feb000-0xc7)="52967e5c0b28a3311a0ede6e1f5deb39baa99aab537a40c799dfe10d1cec8b06a19071374128d4c0f892da4c007b8a730e7c0bb1ec896a41f1b4009c02e81330b2a4372db61e9c19132c6abb16b19210931711615339402ee8fbc9f730aea6b45778abeebc002dcf028601df112378d245aa65f0c91a47bb4af3b792a346b51af0eb837b7ca5d770e67011151a3d0c6905b8643b38f6768f454ec28ea95ee48d2477f4c3315a70b7c0203916b5d04137147fab71e9a1e190aaafda0381e8be6c75308852a656c9", 0xc7}, {&(0x7f0000759000)="0b9c420b1ef811b2212e0d881a28e22def0a6d55a8871c06222d19d9c9d710e7a6513a66880ec612c3740f0079141e1061fbeeaf2cfc3f961f38f374824fbd3f92a8791164634d074e85712a56f9034f3903bd3bce7a0a8cb818adfaf69a2055513e3a1659856ca3470f6ac08f01b5c2d78a17273400dd7290c31395cc5bd096dabae549603b0c60052cf98f83cd827ac39d63db670ea3093708c0ac8e4f02b950ca8a9c91e95f48a5786314c05bb3c4e230a96b28ef992beef7cd51db2a16817271a3e7fff5a549ba35080865a985d4595182e59bf409461b3a81e6af687327141ac4194d356034ef9a8e47c6c3ac8899a9f35ab408fa3857e01b456ee0b64a3f232dd9fa733abe4c712c628c67cb55b8bc8111538e429f5878740b7c901cf2369d0ea34c9323441157ada9d738adcba7218c806556fe93d39972b76b385229da5e98d44a0d0e5211f54361cf8d3d9b5a12171bb46ab26bdd326865a9031e68c17420f6aa9d2096edf604b512d4bd8b5fb494090511e36bfc56f7555fb5fd739adf54207be269de6a1068392aa305812ea20d7cc7bd4635033746076df2ece066fd580d7512611d49fea19f8e9b6cee45576c1a0dc82b871c6571f6ee0c5c2f4e563f2677dadc23952fe98151772cff95a324481e2cabc4e6d349347220c0366769e599f7fc4743864a237dafa79821cdc8723cc53bf16162be9d1449a5d4cf006bee9ec0a4d1157f132a0efc0183fc005a14185c76f0df95bc589c73a182086122c139758fc63815e8bec2cd0b3a7ad6c4c1859810c47eb4c917cde3eded7d0dde350b2cd6409f75634321916eba3ae846d3c85d9db4651b779895b2eae449389c1d3614c51cd39aeabb838e8b310d732ecac97ec6a342c307d0ce8c22bb63dd9a1b1c17cb23a6e00b5770697ec65e6f898e811dba7889175d85eb89e7e29829a7b371e015c595ba75619d00704125e3243826877f9f1935f7f89839aff1be2d7f6ec69f7a6b7297862600f7a4cf33ba657d7426544d6ce6a8c5b5dd210d07b97bec84832b8cb1f0df62cc01f59b83d4cb444ca79a067e4b47f6b1cdb261e8ec57650325248396dac6d35d70fc69b700aad6178d5ad0c00d4d6406391382f66ea341140d02bfaa159ec5bd46f976db59e3075c2e7fd5e27397ce6d2b41324e959add0ebbf844b3184310de908f7686260039e914270f987f90a9b20147b8f95e1620ce3c975b00d748da25fd7d409c06b9ae71c45764754c0ef63714aa7d68aa81d2165ca20bb59a70b1a70639ed6385691b8073155ff64053c3c2a9bba7a0bd075dd98e2c0d897e5abf5579c6833caa41c367dc9380a2c823da0ba01fd9029a041ae2c4a7158d1039ac0b6cf73a5072c18873d783e667c98fdb86b6f51869120e86f8568f33b77d4ee2ef58e3a33ca9c7f7b342ca6090e936e6d0beeed501802cd8ba5f09b74f7dede7854d39a1a640587272cc50aca0fc4bbcc26acd2cb80e3fd04df1697d65eff6ceb67d6512189992eb6040b9c6a57d5ed237de0730de453f7dfe5975c25c2c97157d15c362001708d7a24aac59a772b6575a83655f77f1149ff98ee53c8facaa9fa5b38544b954732e7d452d76f1bd2fe54ec78085a2bec7f323018a8f7a5d0ad1c4434e25542c6c076a262020c07eb23e9495f4b7fa41ba754756b3b5d45a8374553163f690e790d0ba764392290117f071405d10bbd9c877d72df8671b8d83a76996d22c4c3064ce99a967ead994e008392d285b17eb8dde9f3ffb2ac67320ff44047c5488f2a18fa4b3ce184a1502396bd73b7bcde45c38d8c8085f1b054ad3e741ff14b925b8535f3afe23ec47758621343ef7ce25ae1e11ed37c24326224bb4673901e61e8bb4f6a13fd6630eb4acacd78b6ccc9386176f8bcd6bb685e02bd42d798a04a98a8b25985ff30ea32248e23076ac4f587c0cfcc7cd43336e4614c857ed1d5f21c82b2c545ea64adc10b0d8b9367cb35c95873c7f04d78b8f82ed2c473e5cdf86c62421a3d66d03112c78fc05769dbbef0a7bc2626bd439038f90cf240b7addfb7aa4896e664c35640336769de95d54a6075f0d51d2436971db3ceeee80f9167587393c2f916eb32a83bbbb13143bd7ce037b2a3bb51d844945880e731b8be081060e51b59ff26a1936e3a900ab1c118f507a1ed0c05897a5d457b2325b78260ea8c4146b49aa283ee05574061a02aebe409b1707508b3425f480f2186f8f6a90ae22f695d39f8cd202a901aa7fa314f4a4830a86d5f653b2f1a405907bc816938b395939ec5d54ed6cb0e9c2027b0b318144ea2e4faf70fc8ba8961cd11deca7caefd84d736d3f7e2b087e9683a52b9ff2151d95d2c49540abc72e3dcb4e164548f6c8f646aa55ea62bacb33781ca11f03c47e976633999b27aa8ebf6876b5c3c6acc56ebc1346ef5be9133584836cf29a74326fabf5f8e003a9e9fce1a3b1c8d584a43ac8c30198562a036e7422b8de69ab3bc7be0ccbbefb47fe0a39696744d56da24a5b759b3688da1d032a16cc9af64d64056a734ced8e8b140cf63b04a2600af06162e959ae95469710421751ee867ff20dd26438abe549ec47336732128cd9457ff1291f142e2dae1a74867af86e4e62f1bf9a13acd247ad7dff0796b5844936d99f200c55ec5c7c400b48ad73cb6301629907629fc154f1e9d6bca1c485e17ee8513bf7e682acdcd4149f429bc6dcdc1010b79462c9e06fb89769c3b753e9b75c6c35d34aec579fbaaa97e29c5cb7829661fd2f361536e745bd7dc52baa285dde8b74d7bce309da056cb7ce31cfc27493b1ef818c0324400152e3a4351ec7c89115f5d10991dc621f7895ff474f1104a91254538385827241ca54a87f028b4e1134c21df836f74d74a8f45872bf97d00d1e94792bc657ff297e0812473f7fbbca51a0d74f240529fe694be20c026e5cc2a5cc5b35ea83341709588dd828c2ae837b868ebc66a15d01830a35368db614fa9c7573659d3da0c9a654088006c00401e329b4498f7b47599a1197e630a319f73136c5e0ad9e8fd7b832575538e0ce4b0dc14642f5365a0ceb857be1609ce8cf748561eb6775c44b647e30f1bebd71b0af9c8a960bcb8aef5bab5d683a5d6f8c53bfe8c4eff1e71a83c12a6dd5b6f06ef3b5ea9be6fff9eac1c9ae47709557ad8dfb7062647925ab22585f9821a710e701f16dad9582bac3a77e82974a3b5d9a56aa357cd0c01a2d6e8eda473d18084a53683eb53e51b5ea5e6c73ac448123b545cd5d44a2c4b7b5eb5db81e1f85068c216584d414da8c83aceafaadbb72ef67c04980dbf80d020aa11b13b791a7a82586a664b260eef2a93ac236f78363896d9047448a0365ab966aeb4e0aa42f01707038acfb40bb40cae072efffce6bc56e74301742d5a3883e959fb3f8f121047ce18be55a2744aed1ef0920ded52aeea1af456d2c8ce17d8e741e9707bba51cd9f8949a9018158f39d2df769f4020ae304ac3485cdeb8498af6f161e2b171360eac5f14d4216b32f3633034f6d0d7188a765655acefd8e9d0a7628d3428ef7ea9e984e2f30e414e394b64f42575feb8209e9654378d043a522d6a36d5800298c9d029f522d46f7ac5c5502a37febfae6a47839e54ec2697736723981ed4a15fae291c89414e7cc9246cba8f87e19318b87ca3f288f855dbdf67512018748403045c915211b85a2d7a9fa06263c99550bb79d92aea34d230bdfee2413982d275bd30ad3f7a8251da538bc35d0ea2743d2005e96372523fe5bed2f2b92e7e8a36160f4c7f3b48fea1f28977abb6664ee4aa483cc1d0de5b5cb82a7ce249a184ae6a273e01d3cde9e30098aa5425becfa0b94f6cf938cdb8df368ddb5f7d5f44229259fe0dd8d82611e39b8ed89185cb6867457240c273b043eb25bb856cd79f22254bbc994ae24ae5d5552244edd110bef22f4b704968d38db3b87b56b2e2e6ae68bc282d5f0317f395fd8bd37033ef8fec88b9eee414bb8afe86efbe00eeef2ea220321f8454e610583c166a08b32c4eedaa9a7eedbb7427eb7dcc53b02ff27a1aa9ea50870ab319825ee9e96a54d11f5aaf920e23d2d2889b097ae8a07bd1e0a423b78f683ceabc8e2a718e85baa587ba8b8ef2e23f3a06c6b143e17c93a8015f858abd784ddfc392a9cd9f75a06ef1f6608f2877484a09430d9c2e3d5d0f736a50adee21bed105977b617366ac2bf23eb16bc80539797f4eebe7b5f955bf4010f1fb6739f30d83bfa87dda2ee824b397c27041e27c6164a6834e86cab28a4849f32acc6806228232f5469a5a96c540d26bb9e9252c60d85af3ed2aff93ede9b786cadb885ff80c5f922f1a96d29116f92b05850b184ca1ea875f6d85e269fe3c4c9d8d0f5047afed2ebae68fd70779a4f975de0f5d3db6b7bbca4a92f731d538728c8e8d2e09ae725071f1c8aee71219b0fd21dd8c440546ed94bf696dec9bef83a4b4e2924c974dec34b2e7602a3b2728c10c7b8fd35e24b2c29063271954b1d714d0415e095e738040cac30fac607d027812b6ce28be2ae4c9e514f9a4724d88b3a1e0d275c5a9e37000f7d3adcaec447b9823f3ef8f0379bd9bf63822e922ebf1e64a5613cd0a1149f5576e93e046fa556dba79d9cb56b262ac59b81e3bc2e342ab8ae11e53ed1e2f05ed1897359186b4faabc363dbacaed78f3bdf442f67106c8db70e0f6171044813e8cf34a638238002a8403e2e9a3bf2ac79dbf52470f838dd5e3129303c795ff1f3514bd143ae8d5f00bf9332d4a9b427be2efa2cc56193bfc15a43120cdaffb81ca3b5240583e2d6f660bcbd66eea723d4ae5d4fcf42dd5d24f580da03d1c105f258fcd823a97189c99e1c4a1e3caa35a0d68ecd5b5a474660629f2c9b3b1dca43907607fe4b56028bb586f5db3fd3f0fab58ac70a6752ff1c69e8ab1c13cd3439e618ff21e096d673b35a10cf24cc107cc9b352eda4d3e4d40eb07eb9750843559cc0dd74b1ded326845cda7e4ef3c589006ff265d0b8cebb993c6b742351d74dc7aa159c520cb9f4d4eb61618a4c6c62fc8c01853f74d6b97dc9fa560e223e3c66d182e1d3d971c6308e5d4d59b94169a80f4498348abaf6b5c4fed6171520949e8e8ce7e03a1b5abf95d0b38bff2aa47e9994c56e7bf5662341c5271b430fbe836fcc987e4bb8eb21329d06fa04fe4b098d6caacf5e6a35ee6d1c4f96083ef666c5567ad4c8e97571976b61623f46e75c573924c13681d9104d0a79d923390ca75033c7d03956a39d1857e86586b0c17565ae798adae3319564f9464c319c9fe1c8a3770889308c616f2e99b1d336a126810883c6947868c04ba7fd03d6b370a604db7aafb14f73a86cd5307b066c6a6ff071b489811f322fe3d05abe19b6d43661edf4dde26e9de357664f3d0966d0f139f89d4ff3ed8c6a9a9444d18a443f10c7794501d798caa90ccd7414a919765f50f46ed3b924c8dafd996e964f11affc88553eeea14433cf811ab039c36ed9b3da5070298cc4fc781383eee290ec423bb32b1b796926b8cafeee74ffab7eee02b3d7dd040b02c7fb83a4a24e0dedce7fb0c58f2bd106ab741c075741428219eb8a354fb3b2261a9fa1d4e4c1543297322e9be7b12137406c4222b32d00e16707d416945a90fab1e6b02532e81da25377996b325b60d044ed52cae7ee6f064afc3197e55566ae250d3b72005ab6c68f9effa5b1f5505e17850b69e4a738768aff746035c2f511b113d508104d4549fce176eebd0b8b0dd5b825be0f2eaf136c5ffd6c5547ddffd8858f747a1c7143", 0x1000}, {&(0x7f0000cd3000)="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", 0x1000}, {&(0x7f0000654000-0xee)="3c8cbc110d4293496976a0c73edeace491bdd1fdbdbc7174e687c8f4d882c513b9ca5aeec7f313cd7e6437f202d7abe4d248c86c0f746b4f1e5b9b5bbcc774a80fbd4fe08e39719927122ac888706060afff9f6044522b6f039181d817c6774a9e770ef741d430bb30328b2013898467b9d482df12592ecbe0b0006bfe55f66e054770863b9ebb97f613597a0350e10fb9abc21640de5ddec7bcde628d089d103cfae0bfe079253300bd6913e72310fd3ab48d02af5015a44d9f2864c0694eddd4da51080235caf374b8d82c7a61856ef301af4867a4971f18f0334fec9c65178539a01665e8e35fccea9b519589", 0xee}], 0x7, 0x0, 0x0, 0x0}, 0x80) [ 210.678500] binder: undelivered TRANSACTION_ERROR: 29189 [ 210.689385] binder: undelivered TRANSACTION_ERROR: 29189 [ 210.706789] binder: 801:808 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000cbc000)='/dev/binder#\x00', 0x0, 0x2000000802) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000823000-0x30)={0xb0, 0x0, &(0x7f0000938000)=[], 0xfffffffffffffcbe, 0x0, &(0x7f0000002000)=""}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000087000-0x11)='/selinux/enforce\x00', 0x40000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000205000-0xe8)={{{@in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000bad000-0x4)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f000087a000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, r3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00009bb000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r5 = syz_open_dev$audion(&(0x7f0000afd000-0xc)='/dev/audio#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) chdir(&(0x7f000091e000)='./file0\x00') ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) mlock2(&(0x7f0000fe6000/0x2000)=nil, 0x2000, 0x1) 2018/01/26 10:31:03 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000f5c000-0xd)='/dev/dmmidi#\x00', 0x4, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000002000-0x1000)=""/4096) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x15, 0x4) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) [ 210.723375] binder: 801:808 BC_INCREFS_DONE node 341 has no pending increfs request [ 210.731315] binder_alloc: 801: binder_alloc_buf, no vma [ 210.736968] binder: 800:812 transaction failed 29189/-3, size 0-0 line 2903 [ 210.744713] binder: 801:808 ioctl c0306201 2000efd0 returned -11 2018/01/26 10:31:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00006a6000)='/dev/cuse\x00', 0x0, 0x0) io_setup(0x203, &(0x7f0000d5b000-0x8)=0x0) r3 = add_key(&(0x7f0000eb4000-0x6)='.dead\x00', &(0x7f0000e92000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f00000de000-0x6)="780c4d313b8d", 0x6, 0xfffffffffffffffc) add_key$user(&(0x7f00007ba000)='user\x00', &(0x7f0000342000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000c67000)="c5d8b972f6a2c0d6b3751e5731fe655eb4c8538f671bfc223be873c298714f1771ca5635258cce5a4bb02a73fd145be79fa77261c51c0850612c40c6cd7d822a4948703c87e7e13a11174354dd52bdd4f9ab8926fcd9f6114d4f3f762a466b10a95f19be4f4897c868b806457fd1efcbc15922a7144d34c0c1204da0209a79ceb0c84b4844ac32df6cc9c0e59021c89add4078a0ba7eb0afa7fa8dfe5b9f9898d362c56e27fbf67a4652775a1b747eb90614075ca3cc9cea387ff2232dfe75ce1441949a75189a69ecf142be4e7f11106b2aa114aa5799878cd29e7daed32bac", 0xe0, r3) clock_gettime(0x0, &(0x7f0000291000)={0x0, 0x0}) io_getevents(r2, 0x1, 0x1, &(0x7f0000c8a000-0x80)=[{0x0, 0x0, 0x0, 0x0}], &(0x7f000018e000-0x10)={0x0, r4+10000000}) io_submit(r2, 0x1, &(0x7f000044b000)=[&(0x7f0000404000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000e28000-0x27)="", 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) preadv(r0, &(0x7f0000739000)=[{&(0x7f000015c000)=""/29, 0x1d}, {&(0x7f0000326000-0x68)=""/124, 0x7c}, {&(0x7f00009a0000)=""/184, 0xb8}, {&(0x7f0000bdc000)=""/39, 0x27}, {&(0x7f0000c33000-0x7a)=""/122, 0x7a}, {&(0x7f0000675000)=""/4096, 0x1000}, {&(0x7f0000687000)=""/234, 0xea}, {&(0x7f00009ff000-0xc9)=""/201, 0xc9}, {&(0x7f0000328000)=""/137, 0x89}, {&(0x7f00005a6000)=""/138, 0x8a}], 0xa, 0x0) 2018/01/26 10:31:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getpeername$inet(r1, &(0x7f0000c53000)={0x0, 0xffffffffffffffff, @dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000810000-0x4)=0x10) r2 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) pipe(&(0x7f0000989000)={0x0, 0x0}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000492000)={[{0x6f3d3d23, 0xff, 0x80000000, 0x5, 0x6, 0x1, 0x3f, 0x2, 0x0, 0x4, 0x20, 0x4, 0x3f}, {0x80000000, 0x4, 0x9, 0x0, 0x2, 0x6, 0x9, 0x0, 0x8c7, 0x4, 0x0, 0x7fffffff, 0x8}, {0xbc8, 0x4, 0x80000000, 0x5, 0x181, 0x7, 0x2, 0x3, 0x851e, 0x6, 0xfffffffffffff725, 0x8000, 0x10000}], 0x2c8c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 210.766733] binder: BINDER_SET_CONTEXT_MGR already set [ 210.766744] binder: 801:821 ioctl 40046207 0 returned -16 [ 210.770605] binder: 822:823 unknown command 0 [ 210.770616] binder: 822:823 ioctl c0306201 20822fd0 returned -22 [ 210.776165] binder: 801:808 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 210.776194] binder: 801:808 BC_INCREFS_DONE u0000000000000000 no match [ 210.794794] binder: 822:826 unknown command 0 [ 210.794805] binder: 822:826 ioctl c0306201 20822fd0 returned -22 [ 210.836890] binder: 831:833 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 210.836902] binder: 831:833 BC_INCREFS_DONE node 343 has no pending increfs request 2018/01/26 10:31:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000726000)='/dev/dsp\x00', 0x101481, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000d4d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$inet6(0xa, 0x7, 0xd5, &(0x7f0000be3000-0x8)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x1, 0x5, 0x9, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x14) unshare(0x8000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00002f9000)={0xd, 0x4, 0x4, 0x100000001, 0x0, r0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1c) socket$unix(0x1, 0x5, 0x0) fchown(r1, 0x0, 0x0) r2 = dup(r0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) 2018/01/26 10:31:03 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000025000-0xa)='./control\x00', 0x0) r0 = open(&(0x7f0000fbe000)='./control\x00', 0x0, 0x0) syz_open_dev$random(&(0x7f0000d77000-0xc)='/dev/random\x00', 0x0, 0x40) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000727000)=@ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) r1 = openat(r0, &(0x7f0000fca000-0x10)='./control\x00', 0x41, 0x0) rename(&(0x7f0000cfc000)='./control\x00', &(0x7f0000e01000)='./control\x00') ioctl$LOOP_CHANGE_FD(r1, 0x40049409, r1) 2018/01/26 10:31:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000ea3000)='/dev/adsp#\x00', 0x7, 0x200000) bind$pptp(r1, &(0x7f0000d3b000)={0x18, 0x2, {0x1, @multicast1=0xe0000001}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20) close(r0) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000459000)='/dev/rtc\x00', 0xc781, 0x0) ioctl$TCXONC(r0, 0x540a, 0xffff) r1 = syz_open_dev$binder(&(0x7f0000541000)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = open(&(0x7f0000853000)='./file0\x00', 0x8000000000, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00005ac000-0xe8)={{{@in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001f9000-0x4)=0xe8) stat(&(0x7f00006df000-0x8)='./file0\x00', &(0x7f00006ee000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00005cb000)={{{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x1, 0x71, 0x3, 0x734, 0xa, 0x0, 0x80, 0x4, r4, r5}, {0x5, 0xcd, 0x601a, 0x3, 0x1, 0x7, 0x6, 0x0}, {0x5, 0x100, 0x400, 0x7}, 0x3f, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x3}, {{@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3, 0x3f}, 0x2, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11}, 0x6, 0x1, 0x0, 0xffff, 0x80, 0x7f, 0x8}}, 0xe8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000059d000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x0, 0xfdfd, &(0x7f0000a76000)=""}) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000ccb000-0x1)=0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00004b9000-0x4)=0x10000, 0x4) r6 = getuid() syz_open_dev$urandom(&(0x7f00005e2000-0xd)='/dev/urandom\x00', 0x0, 0x2) r7 = getgid() syz_fuse_mount(&(0x7f0000c67000)='./file0\x00', 0x2000, r6, r7, 0x80000000, 0x1) openat$ashmem(0xffffffffffffff9c, &(0x7f0000701000)='/dev/ashmem\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000d22000)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) 2018/01/26 10:31:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00008d4000)='/dev/kvm\x00', 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f000026e000)='/dev/rtc\x00', 0x4000, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f0000bb0000-0x24)={0x40, 0x10000, 0x7f, 0x6, 0x13e, 0x94, 0x0, 0xaa4, 0x10000, 0x401, 0x7fff, 0x10001}) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x0) syz_open_dev$admmidi(&(0x7f0000296000)='/dev/admmidi#\x00', 0x4, 0x40000) r3 = gettid() process_vm_readv(r3, &(0x7f00009ed000-0x40)=[{&(0x7f0000b79000-0xc2)=""/194, 0xc2}, {&(0x7f0000d5e000-0x2)=""/2, 0x2}, {&(0x7f0000ec8000)=""/158, 0x9e}, {&(0x7f000056e000-0x12)=""/18, 0x12}, {&(0x7f0000fd1000)=""/78, 0x4e}, {&(0x7f00005b7000)=""/53, 0x35}, {&(0x7f00006da000)=""/182, 0xb6}, {&(0x7f0000c36000-0x35)=""/53, 0x35}], 0x8, &(0x7f00003f0000)=[{&(0x7f0000303000)=""/185, 0xb9}, {&(0x7f0000128000-0x68)=""/104, 0x68}, {&(0x7f000003a000-0xc3)=""/195, 0xc3}], 0x3, 0x0) 2018/01/26 10:31:03 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000f5c000-0xd)='/dev/dmmidi#\x00', 0x4, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000002000-0x1000)=""/4096) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x15, 0x4) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) [ 210.836919] binder: 831:833 ioctl c0306201 2000efd0 returned -11 [ 210.844414] binder: BINDER_SET_CONTEXT_MGR already set [ 210.844425] binder: 831:837 ioctl 40046207 0 returned -16 [ 210.864289] binder: 831:837 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 210.864300] binder: 831:837 BC_INCREFS_DONE u0000000000000000 no match [ 210.914689] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f000098a000-0xb)='/dev/vcsa#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r0, 0x8915, &(0x7f000019f000-0x20)={"968e83d378d4d439803070f569d3cd29", {0x4, 0x9, 0x0, "d9e1c865000f", 0x4, 0x0}}) bind$alg(r1, &(0x7f0000f41000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0xfffffe99) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2000) recvmmsg(r2, &(0x7f0000467000)=[{{&(0x7f000051b000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, 0x14, &(0x7f00003f2000)=[{&(0x7f0000a3d000-0x29)=""/41, 0x29}], 0x1, &(0x7f0000965000-0x99)=""/153, 0x99, 0x0}, 0x0}], 0x1, 0x0, &(0x7f00008ce000-0x8)={0x77359400, 0x0}) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000aa7000-0x8)={0x0, 0x0}, &(0x7f0000e51000-0x4)=0x8) 2018/01/26 10:31:03 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000f5c000-0xd)='/dev/dmmidi#\x00', 0x4, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000002000-0x1000)=""/4096) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x15, 0x4) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) [ 210.961381] binder: 842:850 transaction failed 29189/-22, size 0-0 line 2788 [ 210.964653] binder: 844:847 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) r2 = mmap$binder(&(0x7f0000e9c000/0x2000)=nil, 0x2000, 0x1000000, 0x80010, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000f7a000-0x18)={r2, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x7, 0x10004) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:03 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000f5c000-0xd)='/dev/dmmidi#\x00', 0x4, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000002000-0x1000)=""/4096) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x15, 0x4) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:03 executing program 2: mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000008000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffe, 0x0) ioctl(r0, 0x40044146, &(0x7f0000001000-0x1)="") openat$cuse(0xffffffffffffff9c, &(0x7f0000005000-0xa)='/dev/cuse\x00', 0x4c046, 0x0) 2018/01/26 10:31:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0x1, &(0x7f000068c000/0x4000)=nil) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000bf8000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f000049b000-0x4)=0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@increfs={0x40046304, 0x2}], 0xd7, 0x0, &(0x7f0000d7b000-0xd7)="796f3ba6e55f333f0706b7f0323d5bd25dec5ccff29ffb2aaafdb49a663a1fa09b1acc793bb9401baacc6fd538899a06ecda7a0d8fa281ed42ac02d4c1b16692bddc5195286fc39ff81dc48740d2096de966aca8a73b52c509a48f96c4995ec139e6b33f1fcc1c14159cc23456e9deca28113acda179bc8896fae1223e85bcb5b04e41009c5502efd361542661be3d819403ebfffdb3d15c83329ddeb18fd4497ddbbf555821dcd2c149d5bf1aab05170605c592b39a48629c74338b8818ae82bec19563da98f2d379a9a6057b716550aec9169fdebb87"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 210.964663] binder: 844:847 BC_INCREFS_DONE node 344 has no pending increfs request 2018/01/26 10:31:03 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000258000-0x12)='/dev/snd/midiC#D#\x00', 0x1, 0x8001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000001000-0x8)={0x3, 0xffff}) sendfile(r0, r0, &(0x7f0000001000-0x4)=0x0, 0x4) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000000)=[0x8, 0xffffffffffffffe0]) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000002000-0x4)=0x2, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002000)='/dev/mixer\x00', 0x10800, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000003000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000002000+0x667)=0x14) sendto$packet(r1, &(0x7f0000003000)="", 0x0, 0x4040000, &(0x7f0000002000-0x14)={0x11, 0xf5, r2, 0x1, 0x9, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, [0x0, 0x0]}, 0x14) ioctl$VT_ACTIVATE(r0, 0x5606, 0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000005000-0x4)=0x1) ioctl$TCXONC(r1, 0x540a, 0x53a) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000004000)="ad80c102abdd6b87145f84adcae6bd70752dc49549bce54ca527ab703f9f82cdb266c77f7d7496dd7a0fda951f54cd1c9909c7ed844b18147cf7748ab14b89f0a60ff88420ea5119e9477b8e563c7af2ca00bcd87ad0b74cab9e47162ff8e2113efc0ec9d8e7e60d697f1aa888193cee2189e7625a5813c016b9d1d49dd0ecc3efa602ad02a0e5aa8fa153ad3fe164de788aa6ea0f1ab70f156cfcd3be1ec9212d35d621a503e86bc22dabd6fcfcdc4ff1a96221f9890b5fec0c7687218cbcaf9dfaccb354a0336c5be50d73a3ed8989fefa9c11d5e24ffdc62685567b3eaf3f27092b8dafa5ef19d4450fe21917a09894b19645670866ca42f95aa9593ad94b635f377d13353f90d36b4d9c6753e6223b54faf7543df1af55df9e0bde8015bfeabf565b23cc8f5d2179602ca0af94eca17f8fa65522479d9af58527120d08b5f57bd22cee932cc864dbf6183a0e1479f4d6be1833358ac915ce1c89c8009deeec055ab1c9b3a96093e4ebe4c252c67690f50d73ea4913d88c6243b2ae300a37f9bf2da441fd3be22276a294ee2d164dbdd366a7abf01a29949c1f7861b960c523410c35cd2b092524a17ce22c4bf60c5b742eabae83a186d46a49c5bef4af60efe47d7f96ff09ce1c662f4324036ba90788e62cbaa2510e032ac261cee454d735074bd64fbfc4bb3d30d2bcfc8c6eaa61bbab802405c3cf2482dc4b551b2c762064a21e1bfc01fe88f1ed6b048468e016686c700de8700cad12c04e898b3a5b86ac14775e6ea54b4a0f094731065ef48064cabd5f8efcddd9ea5f75173da82360c00c6f54ffc49c0ca2a698ba030eacd95b19ab9f313656e22bdabefac916c2fab6d969f69ebd9e28997ce7708570131cb19aa46eafff4e873f542a83451f78dc58748ae880278ee866f762067c4da341c1adb2f05911b8da970154e0771dbc5db5588692fc0a0470102a75b5dcac2bc5e01a86068577b4c46bb8abda0f5c3408693e079395910a05ee13d2dffae3d1ead646d7d8a9bf2087ed3bcc1411c75a500935e9cca04ce0b056d8014232c2cd61dcf15af006ced928390491dbc6ad9bdf38dc50840d7086fcd059d948326b1e1f83859ca8275bed0afe790ff8c03306dbe21cc1104155cbf2bb85643b1315395623bde959ae6c6c72cf668485e14586fdabf17a634fa7d023e8cc798db7d63cd5f7057378bbc90795674c00d3934f720c11d92ce0dfc209c22fc74211e0eb5216f4ae2ea7e84e127ec7a55a6786445bd2730cbd71fd0c20c8e86cf5da1731c1f86cfecaac301ec1836d8d0a6f0f32421e13ee9b451d227693d1af3b62f5f112931bce8bbc1cc620d38d99f37653cb98302092e43aafe50b98af4f7afda086ec2a15dd2951a66d1d6d48a1c202e932dc91187a88d4138ce296298229fa2a5e842eb7b1e1dae7c9e07ccfcf3abba3f8e60f6e11bf86fa2bf37ba41b31dcd1d2080f0ee48bd4269344f1469617cdf8925a029c021c9cb1f578543a429d12636a3a8ec20fd763614f58f6b41c544890ea4b40a1f90ca91d6aa99d448c6311f38ba742a92c167f271ecc52ff342195ba2df7a17815216f79b952f983d251843c7466da7881e61551eb701b827e51ce4b3c72fe2b6b0c9c4d339822870ed760c67ac4bf9c316c4c6ddbe60b285e8333823b928104dc53ca71cc2b632a06480e7dbb0b9e38be8dcd7c7404a16e8faa0579b7ebc96c85c52979baefba4f740a79e766e749cac5009339fd6d4beddad3c01d1962459f9fc6aa7835558464aaa73e4f8d739d3eca6be1e6cc667a987e63a118e7bb3a863e43dee5ec39f0a745841667cebec629f41744fdafef5e3350f6403906da724d1577206630993304197512b0ca7d304974dac55bd17d668f0757aedabebb44c4acdc77af4200aeceb55f870b5d4c2732fbea1278f792e3a1d66829bf8e6be01ff9b023efad1b9cacd87c5400d94d7a2714be49cb66c3507292cb11b8425049f63992286a1dde2ba1e6b965e4849295bc14c4bb09baa568880c94b8a64d7870b11694bbf43dfecfd7a2ec3b09bf108a8778540e93796292b02ad9dc5df0c81c77649f6c8f85363469b0a08bf1cccedf779a2dad788b38b760aadb90be42385a568836fea05ac655b7e3b4eaf1df11cf436a4cf6c839b8c3126f1ab77092ac868bda1088045c5f3829d4e058922a7ad70911fa5fa505bfc78a9bbbd8e1fffedf580d2fc72a08489eaead4e97c62531f05076671e8d839de2d4c71b5e448d5b95abd149ee523e68a7e9b901820c5fec72f5a686c34090bfcf7d0871027ff16dba39f282e53d6b7237ffd2b239fcc89e79c4aacdd7b7349e6232c3a675e65adbea7d43b16f3e43bafd9310a52f7cf3d01258cd9df378c2139248f52f4a502fc5338fc8bee225b258eaf5eb1d87444e8f219cc796bbd9c090fe04f937a669016088a0a9e7cdc7e673e56501af1551c4ca409e5e79f158ffa1b9b2bb7eecc763caf94b84377be011aec0c5370ba20b8302d48cc2d5a4d98665efb33b163726846016ab9734bec2f49de2c95a7d97737c30e44519a78cfd09fecdc7d4d95a0f7df4e75cce3b741a95bf0e3b9514a23ec949c8a458a168c597533679816e6bb1296bd18f1620df53e308028c7c056becb72b996016b32fbab9b801254c5a1969c89a73b138846baf7a816614021ed8d03eb896af51367f942dcaa687f513eb40d73aec8f3bcb34075068a37ba7d5573f648b255f58090c41bbaa4a05eabe7fed383795bf34444c357871e148a77c3aa79c56f82f7adb36d9b895f9c05d15dc16af2eaf1a4deb8569f55d3cd7814d387fb77b879d5ef2b2348b36e57830136757a10dc17a3086e40e362b42a06c2062715af8870e103f4035867a36cc59f0b2ef83f3b3eb207dc9e2d8563d919f7720f6360fe78e00a6c83724874d0da236db873b99a849e4863711333d677e675fca26dd5d6b82897bb400524c1fb91725d2e576249f51db5741c38bed0b192e6c5f4ac3f9ae3bdb0ce9180ca61a71a73476fe983eb773709fb78c1af1e2d506a4ed44e4a0a384ab982a706f410b01d0da00d8cf1d10a4de186087ddcc7853d58dda1171c78b63f65a59b8a5323d6a97061ae49afa36f6a8465b4baa629303066ccbdfdaaa2d3b45f885ddf447efeab9a9fc2c15578feab15f19a14cef95cc739711a4b429f25ae824a3ba085790007df634935ba1f9cb4ece30f6ef89caf61d608f5b28b4668e1724fea621c97338cfb67092378d8750ccf265f38d706f22eae134007fa4907b81dc578a72d75a36c946e02157bfaf9076cd6daeaa0aec4fbdb8879f527b3806c3d5de37b3edf022fd54272df1d6a8efba045cc5ae131257c4b93055e74bb062267f31c8297aa046306592e4abd9a5466f9acfddb6ef7075ef3fa7f32f7c83d01afc9cc08be8b8b7ae60b36b38cbfc71c020b2bf307e7da0167219c92198c2694547ddf8db1345f9c1413e047c4357a284d6ae3cc0a8bfb97003f2d210335a4daad8011503ab88e05e20d693794d5c66c0b1a7005e5b5cf109917a3ae4ab07e12131f4466bf2768be05fd7e9dfa0b92e251c2cf422abd338d6d435981e800051d45b10eca1398eb4b49d4dc792be739ad3635a761803111ab40a5e0de930bd012b02cc1d898731cc37c7f7e42f2ebfde6707454de8afaedb8301c6989ddf5d0e832902f9e590821d62250f29ad13f5688ca7e41562f58d5c4360c5812678e4b82ffa3ae23fe4df6b4876a9b3499b37d1dfef61091e660c40be515cc9f49368a5ec37d1f46403fc12abcac6e38dd7c56856520ed0fef3662016798690c8a44e86ed7420050c503794c6e8578fedc1e99dc0870b69e5e62d7465218b01fd2b7e33ae6deebae3db1a66ede7018a10c7a7cbed61651b06e6818e844b64ba331cd208feeb221742695d2ccc09694957f450e5f982b8d112e3464c18ba7149b06b03af897ed4d2275f166a3ef0b9d0935477a9972fa7bb4f353d95217f7c2872c0fab99259404fbe07edcbc4b0367365791b6f6145a4190c1e54a563496bac0d2188a7030ac24da478b02cd1b794213a96aaacdcb320f182af86a07df28038dd13a20c8c8b4e06dfd62d5d12b3f2fd0faec9b0ab94edc853af06ca4d7d772858da16b9ad377ad4e1799cd5879f73b389a324de735ae67cff5152baca336a195ec5de883e3589c2beee1563743ea778677194088b493ace181ea7fc4ef63e3fdb9e230f1df24f34e3862d5ddaf80637daa371edcd7e4ba5a9535009a595da31079498c2c78a22f003bf9d2fee38b79d86308e9328b1aa5295bf0a739ee5d38be21a5e962dd67a94e558dd088d56bfee8c070d878637bb957ae719866d31c2c903eda221819944ab67d7159bb5f713f575ce26ba6a3a599eaa1af9f65d3feb1a1f6c5a3ca0568c0f0c83a934043b324b4cc750adc430fee4f977b08600074fb2a23ae77e08eda0c12b11643b3dcbba13f651ad7570e7016609f1f1e26771c1db2dccb0f4b378b2774f847b3e914461a65617b97ec0f38462838f5420d64d371092e7b1a7077553cb0d826fb5dfda5c172d542d6a30224becb84c4b58c33abfcdf14c2ac303c52c7ab3f88aef72f7aa88da136f03ff7efb6e9befc7ebaf36c1faca43485e259f72b0a8a666fcd46c786808cdfcef14d65b21e36adfb4a975c97f41d4b67b0748b7b6a2cc54d15cf675c04ccbb71f1d383f607a12cd432a1958bd1a0a3abcf575f19e70954e076e6fbcd391abb88f83e6b54b91e8669ae71ab2471248d625a68c529c080846c500c788420f6f5253be59279ff352cfc2ef7684e3b65076d92c990325440fe2ef77bad7e20719e47faeafa8f0f769a685babaf32dd3f00a40cfb136bf6df7bcb5939ee42654483c113a5792bf95a42adf87fdf06fc8dfbebc88824129da34bb26d76b6e71a73d938e5b2767d67a9422eda75f123a2acf61baf57e282bc2e6a95e0cb637cf7cbafdd558f08e7f29b9c3d76cea200262f1cc1d3a7953dde738c54e8a22ea4a9eef21bcb80b1b7102fb60312f3f86d72de6563a259d98190ff9cd54f250ee30f0d6dd42c54217d0d54ac8a3c89a36515e6fdbd5116d6d23e7a870a73b315033608cf8083a401a9af2c09ef49d49a0c3672a6d801aa6d7b80a2f1855d29eb73878a0dbffd651dfe75b137be5abd3526a5d6e06802a39ed0df7d15b5c19ae6410ebc4d8fd11e72e7e0c5d964f203a84dbd0aa3b6519f35b0fc80c055c7dceaf69fcfaab757b2950e1d967ee19f47eb90393ae84dc68c6679e423fd82e1aba483d36188c83ed87673aa18bbabc2e271e11ac8fbb9c7bfbe993e8dfcf5fb96173098cd845d2a1f7e4321cb3c811cfce91649c2cafb04e0a68de04a4f8541cce90761a1c6f8d10bfdbd76c3c589b9bc2337d31509628310cd629f371b03f0c8c56b32c5b51865d718951655b52918eb21ddf7c1a99e008f2bccac95f3a3b9b72231064ce72da540ddb0913ae9320defd2b1b76a8ea1ea7acf1c24059bc736015b1a9916319815775c7ba23eae3c1ca9b1ef90d2e1ce3478e0882b4b0e4d8dc20949f36158e23b86a9a6820c4148575716b7e1b2580cd7202869e135b6504bfdc0d1587893abf4cce3eecf72ea7ec762f15c2b2d31f5102cdc559e9202cefe07dc1c973e502433590655af01201c8a49e9dff8eadf2b81cf0adac4a837a3176060a252b900e694c23ebe0fc8f648a1aac8f46f996181483d8b6522ad8685bb0b3f4e6acd83ee907e0c9fd822e8480510d3e5855d9d9f81051e8b50b28632f070a33dbbac5") mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000005000)=0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000007000-0x10)=[{&(0x7f0000000000)=""/5, 0x5}, {&(0x7f0000007000-0xf)=""/15, 0xf}], 0x2, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open_by_handle_at(r0, &(0x7f0000007000)={0x38, 0x80, "ebad53a7eac341d8fc1e43c847ca0a9764a229c21ef3bea18aecb2e7edde90e79e3f1ff08ed7b4f13ed611b8cc0ecfea"}, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000008000+0xd72)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r0, 0x8040ae69, &(0x7f0000008000)={0x3f, 0x200000000000, 0x3, 0x5, 0x8}) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fanotify_mark(r1, 0x4, 0x8, r1, &(0x7f000000a000-0x8)='./file0\x00') [ 210.971952] binder: BINDER_SET_CONTEXT_MGR already set [ 210.971962] binder: 844:847 ioctl 40046207 0 returned -16 [ 210.988818] binder: 840:860 transaction failed 29189/-22, size 0-0 line 2788 [ 210.990060] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.003655] binder: 844:847 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 211.003665] binder: 844:847 BC_INCREFS_DONE u0000000000000000 no match [ 211.010730] binder: 842:863 transaction failed 29189/-22, size 0-0 line 2788 [ 211.046393] binder: 840:860 transaction failed 29189/-22, size 0-0 line 2788 [ 211.080191] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.097005] kauditd_printk_skb: 2 callbacks suppressed [ 211.097043] audit: type=1400 audit(1516962663.462:262): avc: denied { map } for pid=874 comm="syz-executor4" path="/selinux/commit_pending_bools" dev="selinuxfs" ino=11 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 [ 211.097790] binder: 874:879 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 211.097799] binder: 874:879 BC_INCREFS_DONE node 349 has no pending increfs request [ 211.097811] binder: 874:879 ioctl c0306201 2000efd0 returned -11 [ 211.110270] binder: BINDER_SET_CONTEXT_MGR already set [ 211.110282] binder: 874:889 ioctl 40046207 0 returned -16 [ 211.123099] binder: 882:886 IncRefs 0 refcount change on invalid ref 2 ret -22 2018/01/26 10:31:03 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x0, &(0x7f0000001000)=0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000c46000-0x108)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000000)=0x108) 2018/01/26 10:31:03 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000f5c000-0xd)='/dev/dmmidi#\x00', 0x4, 0x80000) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000002000-0x1000)=""/4096) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x15, 0x4) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000041d000)='/dev/binder#\x00', 0x0, 0x200000882) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) readahead(r2, 0x3, 0xd4) connect$netrom(r1, &(0x7f0000a5e000-0x10)=@ax25={0x3, {"4c0b3dca27bfa3"}, 0x80000001}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:03 executing program 5: mmap(&(0x7f0000000000/0xf86000)=nil, 0xf86000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000f86000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000f87000-0x1c)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000334000-0x78)={0x2, 0x4, 0x0, 0x5, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_sa={0x2, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000c2a000-0x4)=0x40, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000558000-0x38)={&(0x7f0000e3b000-0x10)=@in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000b03000)=[], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000ac1000)=0x0, 0x4) 2018/01/26 10:31:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000f0c000-0xb)='/dev/mixer\x00', 0x2000, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x12000) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f00008f3000-0x8)=@un=@abs={0x1, 0x0, 0x0}, 0x8) r1 = syz_open_dev$sndpcmp(&(0x7f0000962000)='/dev/snd/pcmC#D#p\x00', 0x6, 0x400) accept4$packet(r1, &(0x7f0000a02000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000c9c000-0x4)=0x14, 0x800) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r2 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000f7e000)={0x4, &(0x7f0000a29000-0x20)=[{0x7ff, 0x7fff, 0x6, 0x400}, {0x1, 0x7, 0xc5b, 0x5}, {0x200, 0x8001, 0xe634, 0x40}, {0x7ff, 0x5a8, 0x2, 0x3}]}, 0x8) 2018/01/26 10:31:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000cfc000-0xb)='/dev/adsp#\x00', 0x0, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00009ea000)={0x1f, 0x9, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffff9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2c) bind$netrom(r0, &(0x7f0000c94000)=@full={{0x3, {"4b6c05cf6b2a66"}, 0x8}, [{"d3ccb0f0b2db61"}, {"66b2b4d858b9f5"}, {"56399d6aee4b86"}, {"ad9e0b40c35221"}, {"9d9422c7c67d7a"}, {"c5163fa4596d75"}, {"7283847a971ee3"}, {"8960fd8dedf921"}]}, 0x48) r2 = syz_open_dev$binder(&(0x7f0000cea000-0xd)='/dev/binder#\x00', 0x0, 0x0) close(r1) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) [ 211.123356] binder: 874:879 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 211.123365] binder: 874:879 BC_INCREFS_DONE u0000000000000000 no match [ 211.150296] binder: 882:886 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 211.267515] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.273064] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mlockall(0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:03 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000f5c000-0xd)='/dev/dmmidi#\x00', 0x4, 0x80000) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000002000-0x1000)=""/4096) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00005fe000-0x30)={0x0, 0x0, &(0x7f0000414000)=[@enter_looper={0x630c}], 0xfffffffffffffd0b, 0x0, &(0x7f0000f2c000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000d2b000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000043000-0x8)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r0, 0x400, 0x0) rt_sigprocmask(0x0, &(0x7f0000da1000)={0x7fffffff}, 0x0, 0x8) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f000034a000-0x4)=0x0) rt_sigtimedwait(&(0x7f0000061000)={0xfffffffffffffffd}, &(0x7f000003a000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f000003a000-0x10)={0x77359400, 0xffff}, 0x8) truncate(&(0x7f0000b45000-0x8)='./file0\x00', 0x0) fcntl$getflags(r0, 0x401) 2018/01/26 10:31:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000002000)={0x0, 0x3b, 0x0, @thr={&(0x7f0000001000)="", &(0x7f0000006000-0xb7)=""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000005000)=0x0) r0 = memfd_create(&(0x7f0000795000)="6b657972696e67766d6e65743175734372707070313c00ca", 0x0) ftruncate(r0, 0xe3bd) ioctl$TIOCLINUX2(r0, 0x40305828, &(0x7f0000002000-0xc)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r0, 0x0, 0x3) [ 211.302598] binder: 897:899 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 211.307273] binder: 901:904 transaction failed 29189/-22, size 0-0 line 2788 [ 211.307917] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.320348] binder: 901:906 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:03 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000fda000)='/dev/binder#\x00', 0x1) getpeername$ipx(r2, &(0x7f00009f8000)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000f54000-0x4)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:03 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000f5c000-0xd)='/dev/dmmidi#\x00', 0x4, 0x80000) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x5, 0x4) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fea000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) munlockall() epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000b49000)={0x20000010, 0x0}) 2018/01/26 10:31:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) symlinkat(&(0x7f0000f0f000)='./file0\x00', r0, &(0x7f00000df000)='./file0\x00') ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 211.321936] binder: 903:909 transaction failed 29189/-22, size 0-0 line 2788 [ 211.330661] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.343972] binder: 913:916 transaction failed 29189/-22, size 0-0 line 2788 [ 211.344081] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.357593] binder: 903:909 transaction failed 29189/-22, size 0-0 line 2788 [ 211.378104] binder: BINDER_SET_CONTEXT_MGR already set [ 211.381351] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.381516] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.389715] binder: 897:925 ioctl 40046207 0 returned -16 [ 211.393652] binder: 927:928 transaction failed 29189/-22, size 0-0 line 2788 [ 211.393722] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.395209] binder: 897:912 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 211.395219] binder: 897:912 BC_INCREFS_DONE u0000000000000000 no match [ 211.414129] binder: 927:931 transaction failed 29189/-22, size 0-0 line 2788 [ 211.428210] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.431479] binder: 938:939 transaction failed 29189/-22, size 0-0 line 2788 [ 211.431695] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.447164] binder: 938:941 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:03 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/access\x00', 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x7) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f00002ab000-0xf)='/dev/sequencer\x00', 0x200, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r3, 0x800442d2, &(0x7f00006c5000-0x8)={0xa, &(0x7f0000075000)=[{0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}, {0x0, 0x0, 0x0, ""/6, ""/16}]}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:03 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000f5c000-0xd)='/dev/dmmidi#\x00', 0x4, 0x80000) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:03 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x0, 0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000dc6000)='/dev/cuse\x00', 0x86000, 0x0) r2 = socket$packet(0x11, 0x400000002, 0x300) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000033000-0x14)={@loopback={0x0, 0x0}, 0x0}, &(0x7f0000663000)=0x14) sendto$packet(r2, &(0x7f00009b8000-0x4d)="22c37be1a5f1259cb759f0b0d5ea7eccd48897651116b8f04cc09f3e5def207e062f0182eb87719b121241684853789048af767c5bf27b603c2f1b55ca250c25a45cc669a60834ac0139696610", 0x4d, 0x80, &(0x7f0000b8d000-0x14)={0x11, 0xf7, r3, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xa}, [0x0, 0x0]}, 0x14) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f000073d000-0x14)={0x6, 0x0, 0x8, 0x4, 0x2000000000000}) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:03 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r0, &(0x7f000023f000-0x2)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000412000-0xc)=@sack_info={0x0, 0x0, 0x81}, 0xc) sendto$inet6(r0, &(0x7f0000f49000-0x1)="8c", 0x1, 0x0, &(0x7f0000194000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) fcntl$getownex(r0, 0x10, &(0x7f0000d70000)={0x0, 0x0}) getpgid(r1) 2018/01/26 10:31:03 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:03 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup3(r1, r0, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00004ea000)={0x0, @in6={{0xa, 0x1, 0xf9, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x9a6f}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0xffff, 0x10000, 0x1f, 0x7fffffff, 0x101, 0xed, 0x1ff, 0xfffffffffffffffc, 0x0, 0xffffffffffffd18b, 0x1ff, 0x193c, 0x391, 0x7, 0x1f]}, &(0x7f0000ce4000-0x4)=0x108) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f000087b000)={r3, @in={{0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x3}, 0x98) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = syz_open_dev$sg(&(0x7f0000c0c000)='/dev/sg#\x00', 0x735, 0x208241) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f00006d7000-0xd4)=""/212, &(0x7f000072b000)=0xd4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000651000)={0x0, 0x2}, &(0x7f00009ca000)=0x8) r6 = syz_open_dev$midi(&(0x7f0000c3c000-0xb)='/dev/midi#\x00', 0xe2a6, 0x404c00) ioctl$KVM_ASSIGN_PCI_DEVICE(r6, 0x8040ae69, &(0x7f0000c7d000-0x14)={0xfffffffffffffff8, 0xfffffffffffffffa, 0x2, 0x1, 0xff}) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f000062b000)={0x7fffffff, 0x38d, 0x2, 0x100, 0xc1, 0x0, 0x70c, 0x1, r5}, 0x20) 2018/01/26 10:31:03 executing program 5: socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000505000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000512000)='net/kcm\x00\b\x00') readv(r0, &(0x7f0000c44000-0x90)=[{&(0x7f0000f44000)=""/100, 0x64}, {&(0x7f0000ee6000)=""/4096, 0x1000}], 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000162000-0x8c)={0x0, 0x1, 0xfffffffffffffffe, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TUNDETACHFILTER(r1, 0x400854d6, 0x0) 2018/01/26 10:31:03 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000d2b000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000096a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$sndpcmc(&(0x7f0000e4f000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f000022c000)={0x0, 0x94, &(0x7f00007e2000)=[@in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x2, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x0, 0xd}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x14}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x1}, @in6={0xa, 0x3, 0x12, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @loopback=0x7f000001}, 0x1}, @in={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000bcc000-0x4)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00004b1000-0x8)={r3, 0x0}, 0x8) r4 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000a31000-0x14)={0x6, 0xf218, 0x7, 0x0, 0xfff, 0x81, 0x672, 0x0, 0x9, 0x5}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000b19000)=0x8a) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000a000)={0x4, 0x0, &(0x7f000000b000-0x10)=[@enter_looper={0x630c}], 0x2, 0x0, &(0x7f0000004000)="2716"}) fchdir(r0) r5 = syz_open_dev$adsp(&(0x7f0000e48000)='/dev/adsp#\x00', 0xfffffffffffff2f1, 0x98001) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00001e8000+0xeb9)={0x0, 0x4}, &(0x7f0000b34000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000730000-0x10)={0x0, 0x2, 0x200, 0x2, r6}, 0x10) bind$bt_sco(0xffffffffffffffff, &(0x7f0000a1c000)={0x1f, {0x6, 0x0, 0x3, 0x100, 0x4, 0x3}}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000005000-0x14)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40047705, &(0x7f0000e75000)={0x7, 0x7}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 211.468167] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.534008] binder: 897:899 BC_INCREFS_DONE node 350 has no pending increfs request [ 211.541842] binder: 897:899 ioctl c0306201 2000efd0 returned -11 2018/01/26 10:31:03 executing program 7: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) [ 211.582691] binder_alloc: 951: binder_alloc_buf, no vma [ 211.604353] binder: 951:958 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:03 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:04 executing program 7: syslog(0x0, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00002c8000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0xfffffc89, 0x0, &(0x7f0000ce0000-0x1c)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x95, 0xfdfd, &(0x7f00000a7000-0x95)="3027c642bdc86e0a8954434bfb4e68ee2f0938781a456219b528eb979ad18deb9fadef726b7a034615a0a47cdbad092ce7d73a0196e8da6a6e697d3d56c5f49d17a12bc6f175bac2e114899746c1d0739e5769bae0715ac4339a6548011e5f558e2298fedcabf496b7041756104c946ed974dd8c6a1f03a0ad0b1d7e90a042cdb5038776f10d049fff8a3bf6b2c100f1240452a292"}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:04 executing program 2: mmap(&(0x7f0000000000/0x296000)=nil, 0x296000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x114, 0x2710, &(0x7f0000294000)=0x0, &(0x7f000028a000)=0xfffffffffffffc86) mmap(&(0x7f0000296000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$pptp(r0, &(0x7f0000296000)={0x18, 0x2, {0x3, @local={0xac, 0x14, 0x0, 0xaa}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000fc000-0xa)='/dev/cuse\x00', 0x10000, 0x0) mmap(&(0x7f0000296000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000297000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000298000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000296000)={{&(0x7f0000055000/0x9000)=nil, 0x9000}, 0x2, 0x0}) bind$pptp(r1, &(0x7f00000bb000-0x20)={0x18, 0x2, {0x2, @broadcast=0xffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20) mmap(&(0x7f0000298000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000299000-0x4)=0x4) [ 211.604365] binder: 951:958 BC_INCREFS_DONE node 360 has no pending increfs request 2018/01/26 10:31:04 executing program 7: syslog(0x0, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = syz_open_dev$audion(&(0x7f0000d1b000-0xc)='/dev/audio#\x00', 0x9, 0x40) epoll_pwait(r2, &(0x7f00009ab000)=[{0x0, 0x0}], 0x1, 0xffffffff, &(0x7f000073d000)={0x5}, 0x8) sendto$inet(0xffffffffffffffff, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000c1f000)={{{@in=@multicast2=0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000fcf000)=0xe8) bind$packet(r1, &(0x7f00002e8000-0x14)={0x11, 0x2, r3, 0x1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, [0x0, 0x0]}, 0x14) 2018/01/26 10:31:04 executing program 7: syslog(0x0, &(0x7f0000001000-0xf8)=""/248, 0xf8) [ 211.604388] binder: 951:958 ioctl c0306201 2000efd0 returned -11 [ 211.605833] binder: BINDER_SET_CONTEXT_MGR already set [ 211.605843] binder: 950:957 ioctl 40046207 0 returned -16 [ 211.605996] binder: 957 RLIMIT_NICE not set [ 211.625859] binder: BINDER_SET_CONTEXT_MGR already set [ 211.625870] binder: 951:958 ioctl 40046207 0 returned -16 [ 211.645370] binder: 951:969 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 211.645462] binder: 951:969 BC_INCREFS_DONE u0000000000000000 no match [ 211.683545] binder_alloc: 982: binder_alloc_buf, no vma [ 211.683569] binder: 945:985 transaction failed 29189/-3, size 0-0 line 2903 [ 211.684573] binder: 982:983 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 211.684582] binder: 982:983 BC_INCREFS_DONE node 365 has no pending increfs request [ 211.684591] binder: 982:983 unknown command 0 [ 211.684598] binder: 982:983 ioctl c0306201 2000efd0 returned -22 [ 211.700506] binder: BINDER_SET_CONTEXT_MGR already set [ 211.700522] binder: 982:990 ioctl 40046207 0 returned -16 [ 211.724653] binder: 982:983 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 211.724665] binder: 982:983 BC_INCREFS_DONE u0000000000000000 no match [ 211.724672] binder: 982:983 unknown command 0 [ 211.724683] binder: 982:983 ioctl c0306201 2000efd0 returned -22 [ 211.733622] binder_alloc: binder_alloc_mmap_handler: 950 20000000-20002000 already mapped failed -16 [ 211.736211] binder: BINDER_SET_CONTEXT_MGR already set [ 211.736233] binder: 950:987 ioctl 40046207 0 returned -16 [ 211.736294] binder: 999 RLIMIT_NICE not set [ 211.739948] binder_alloc: 982: binder_alloc_buf, no vma [ 211.739972] binder: 950:999 transaction failed 29189/-3, size 0-0 line 2903 [ 211.741203] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.870218] binder_alloc: 951: binder_alloc_buf, no vma [ 211.870231] binder: 946:953 transaction failed 29189/-3, size 0-0 line 2903 [ 211.870351] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.888239] binder_alloc: 951: binder_alloc_buf, no vma [ 211.888247] binder: 945:956 transaction failed 29189/-3, size 0-0 line 2903 [ 211.888366] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.893572] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.911762] binder_alloc: 951: binder_alloc_buf, no vma [ 211.911769] binder: 946:967 transaction failed 29189/-3, size 0-0 line 2903 [ 211.916336] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:04 executing program 2: set_mempolicy(0x4000, &(0x7f0000682000-0x8)=0x0, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x20000000000000a, 0x2, 0x0) sendmsg(r0, &(0x7f0000bae000)={&(0x7f0000f66000)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0}, 0x1c, &(0x7f00000ec000)=[], 0x0, &(0x7f0000818000-0x10)=[{0x10, 0x29, 0x3e, "ad"}], 0x10, 0x0}, 0x0) 2018/01/26 10:31:04 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) listxattr(&(0x7f000067c000)='./file0\x00', &(0x7f00001ea000)=""/156, 0x9c) connect(r0, &(0x7f00000ff000-0x1c)=@in6={0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000706000)=@routing={0x0, 0x0, 0x0, 0x0, 0x0, []}, 0x8) sendmsg(r0, &(0x7f00000c9000-0x38)={0x0, 0x0, &(0x7f00000e5000)=[{&(0x7f0000064000-0x5)="d5c0", 0x2}], 0x1, &(0x7f0000101000-0xc8)=[], 0x0, 0x0}, 0x0) 2018/01/26 10:31:04 executing program 7 (fault-call:0 fault-nth:0): syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000c48000-0xc)={0x0, 0x0, 0x0}, &(0x7f00009f9000-0x4)=0xc) getpgrp(r1) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r2 = syz_open_dev$audion(&(0x7f0000f53000)='/dev/audio#\x00', 0x0, 0x2a200) ioctl$KDSETLED(r2, 0x4b32, 0x9) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000d37000-0x4)=0x9) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:04 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x4) r1 = syz_open_dev$mice(&(0x7f0000fd2000)='/dev/input/mice\x00', 0x0, 0x0) mmap(&(0x7f0000624000/0x2000)=nil, 0x2000, 0x2000000, 0x13, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0405405, &(0x7f000043e000-0x40)={{0x2, 0x0, 0x5, 0x3, 0x2f726d02}, 0x77c, 0xe52, 0x34e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000d5a000)=[{&(0x7f0000802000-0x22)="e089a47977177a1687e3761508d589b2661d03f0fac13a6a75be9cac7c7546c7fb02", 0x22}, {&(0x7f0000f4a000-0x5)="a96bc5aa3f", 0x5}, {&(0x7f0000791000)="3bac5b28b02cc1f9c97be52eada48a35be4fe57d126d0072610a2a1a9419e7495b3f15e5412c75233c469439a25a27398bd2f409bb16be85c60341cb", 0x3c}, {&(0x7f00009b1000-0x24)="bddf604e0d90b5983cccd6ab2db607a53cd9441f6871189e82efd1793149e32cafe3613f", 0x24}, {&(0x7f0000519000-0x1b)="c24c25da3c2b5b8708c817be599767c913eeb56f011f4572dea439", 0x1b}, {&(0x7f0000392000-0xc0)="5cd05cb30f0b728752a5174dd0a0ec8e6e0aae60734820a0e31f0f0b7e60a18fb510c65a49fed4710cee2f655fca989e78b4e7a9cc88e55bbde71fbcd0867a77920ded3439ce9e24acd63b2fca707c120a51fbde6e9e833d1f724e4d1d1d3d818aecd083136e9923775a56359dd7fd4e218af5527a45d4610854790ad533b50c7e50480fc18efe0d3c4052a3b292381bc13cb7044afb0d356f8c8abb2083573740ff025311d00f1f770137be000be2f82be959e9033fccf1cb0f61d3589fb7d2", 0xc0}], 0x6, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x8000000000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:04 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000a97000)='keyring\x00', &(0x7f0000f1a000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000ae9000)=0x0, &(0x7f0000720000)=0x0, &(0x7f0000d36000)=0x0) r1 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r1, &(0x7f00002b1000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000d24000-0x18)="0a07750600e383e5b3b60ced5c54dbb7295df0df82060000", 0x18) recvmmsg(r2, &(0x7f000040f000)=[{{&(0x7f000002b000-0x1c)=@in6={0x0, 0xffffffffffffffff, 0x0, @dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, 0x1c, &(0x7f0000ab1000)=[], 0x0, &(0x7f0000893000-0x28)=""/40, 0x28, 0x0}, 0x0}], 0x1, 0x0, &(0x7f000005e000)={0x77359400, 0x0}) keyctl$revoke(0x3, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f000048d000-0x28)={@common='lo\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r5 = gettid() r6 = gettid() r7 = syz_open_dev$usbmon(&(0x7f0000134000-0x6)='/dev/usbmon#\x00', 0x3, 0x549fe) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r3, &(0x7f000008d000-0xc)={r7, r3, 0x3}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000ebf000-0x8)=0xfffffffffffffffe, 0x8) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000049000-0x10)='/selinux/create\x00', 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000873000)={&(0x7f0000187000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000452000)={&(0x7f0000009000)=@ipv6_newaddr={0x40, 0x14, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback={0x0, 0x1}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x0, 0x0, 0x0}}]}, 0x40}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000bce000-0x12)='/dev/snd/pcmC#D#c\x00', 0x61bc, 0x40000) getpeername$packet(0xffffffffffffffff, &(0x7f000052a000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0]}, &(0x7f00002cf000)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000d01000-0x28)={'vcan0\x00', r1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000d4d000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2018/01/26 10:31:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x80000) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) fcntl$notify(r0, 0x402, 0x18) [ 211.930308] binder: 950:977 transaction failed 29189/-3, size 0-0 line 2903 [ 211.942867] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.961505] FAULT_INJECTION: forcing a failure. [ 211.961505] name failslab, interval 1, probability 0, space 0, times 0 2018/01/26 10:31:04 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000960000)='/dev/dsp\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet6(r0, &(0x7f0000001000-0x58)="b62ab77b4963cbb6dd4a0417f82c62a721612525c7d1b1ca9fd04746503633e36500f763def71390539e9b763e0107551189cb1d8388886e1803c6ceac6640b81c00899ab5e3955d449ae89fc021237bbba2d9e4cb4074ce", 0x58, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f60000-0x20)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1, 0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f00001e1000-0x4)=0x3ff, 0x4) connect$inet6(r1, &(0x7f0000f03000)={0xa, 0xffffffffffffffff, 0x800, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f000074b000)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @broadcast=0xffffffff}, 0x800, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) 2018/01/26 10:31:04 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000255000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) close(r0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f000091a000)='/selinux/mls\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f000004f000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00004cb000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000d1e000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000e74000-0x8)={0x8, 0x10c9}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = creat(&(0x7f000007b000-0x8)='./file0\x00', 0x122) ioctl$sock_inet_udp_SIOCOUTQ(r3, 0x5411, &(0x7f000077b000)=0x0) 2018/01/26 10:31:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00007f7000-0xd)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 211.977607] binder: 1004:1011 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 211.977619] binder: 1004:1011 BC_INCREFS_DONE node 368 has no pending increfs request [ 211.977648] binder: 1004:1011 ioctl c0306201 2000efd0 returned -11 2018/01/26 10:31:04 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000e27000)='/dev/rtc\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000321000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x40600) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00007fc000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8)={0x0}, 0x8}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000cfd000-0x8)={0x3, 0xffffffff}) 2018/01/26 10:31:04 executing program 1: mmap(&(0x7f0000000000/0xde2000)=nil, 0xde2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x100000114, 0x2713, &(0x7f0000862000-0x28)=""/40, &(0x7f0000dcb000-0x4)=0x28) r1 = gettid() mmap(&(0x7f0000de2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000de2000)={0x2, r1}) 2018/01/26 10:31:04 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x10000) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f000064d000)={0x2000, 0x0, 0xffffffffffffffff, 0xff, 0x8}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000f06000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x1200}) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000cd0000-0x11)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 211.979912] binder_alloc: 1004: binder_alloc_buf, no vma [ 211.979933] binder: 1009:1014 transaction failed 29189/-3, size 0-0 line 2903 2018/01/26 10:31:04 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/26 10:31:04 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x7c, 0x0, &(0x7f000042d000-0x7c)=[@request_death={0x400c630e, 0x0, 0x2}, @acquire={0x40046305, 0x0}, @transaction={0x40406300, {0x3, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x40, 0x0, &(0x7f00008bb000)=[@ptr={0x70742a85, 0x0, &(0x7f0000934000)=0x0, 0x1, 0x0, 0x28}, @fd={0x66642a85, 0x0, r0, 0x0, 0x0}], &(0x7f00004fe000)=[]}}, @release={0x40046306, 0x2}, @dead_binder_done={0x40086310, 0x3}, @dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000041b000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) inotify_add_watch(r1, &(0x7f0000f24000-0x8)='./file0\x00', 0x4000080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x0, 0x0, &(0x7f000000e000)=[], 0xf1, 0xfdfd, &(0x7f0000927000)=""}) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f000007e000-0x8)={0x0, 0x0}) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 211.985935] binder_alloc: 1004: binder_alloc_buf, no vma [ 211.985956] binder: 1008:1015 transaction failed 29189/-3, size 0-0 line 2903 [ 211.986245] binder: undelivered TRANSACTION_ERROR: 29189 [ 211.999589] binder: BINDER_SET_CONTEXT_MGR already set [ 211.999600] binder: 1004:1017 ioctl 40046207 0 returned -16 [ 212.009157] binder_alloc: 1004: binder_alloc_buf, no vma [ 212.009185] binder: 1009:1014 transaction failed 29189/-3, size 0-0 line 2903 [ 212.016129] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.016319] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.017699] binder_alloc: 1004: binder_alloc_buf, no vma [ 212.017719] binder: 1008:1015 transaction failed 29189/-3, size 0-0 line 2903 [ 212.018446] audit: type=1400 audit(1516962664.383:263): avc: denied { map } for pid=1007 comm="syz-executor3" path="/dev/input/mice" dev="devtmpfs" ino=1081 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mouse_device_t:s0 tclass=chr_file permissive=1 [ 212.023945] binder: 1004:1017 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 212.023957] binder: 1004:1017 BC_INCREFS_DONE u0000000000000000 no match [ 212.023971] binder: 1004:1017 ioctl c0306201 2000efd0 returned -11 [ 212.039707] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.071284] binder: 1026:1029 transaction failed 29189/-22, size 0-0 line 2788 [ 212.091318] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.099080] binder: 1030:1041 transaction failed 29189/-22, size 0-0 line 2788 [ 212.100317] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.119714] binder: 1032:1034 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 212.119725] binder: 1032:1034 BC_INCREFS_DONE u0000000000000000 no match [ 212.120676] binder: 1030:1046 transaction failed 29189/-22, size 0-0 line 2788 [ 212.121568] binder: 1042:1047 transaction failed 29189/-22, size 0-0 line 2788 [ 212.122602] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.141982] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.154053] binder: 1042:1049 transaction failed 29189/-22, size 0-0 line 2788 [ 212.156483] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.158381] binder: 1052:1055 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 212.158414] binder: 1052:1055 got transaction to invalid handle [ 212.158423] binder: 1052:1055 transaction failed 29201/-22, size 64-0 line 2788 [ 212.161800] binder: BINDER_SET_CONTEXT_MGR already set [ 212.161820] binder: 1052:1056 ioctl 40046207 0 returned -16 [ 212.167302] binder_alloc: 1052: binder_alloc_buf, no vma [ 212.167323] binder: 1051:1054 transaction failed 29189/-3, size 0-0 line 2903 [ 212.167421] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.170132] binder: 1052:1055 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 212.170161] binder: 1052:1055 got transaction to invalid handle [ 212.170170] binder: 1052:1055 transaction failed 29201/-22, size 64-0 line 2788 [ 212.177164] binder_alloc: 1052: binder_alloc_buf, no vma [ 212.177190] binder: 1051:1057 transaction failed 29189/-3, size 0-0 line 2903 [ 212.186626] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.188716] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.429672] CPU: 0 PID: 1006 Comm: syz-executor7 Not tainted 4.15.0-rc9+ #191 [ 212.436915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 212.446714] Call Trace: [ 212.449282] dump_stack+0x194/0x257 [ 212.452886] ? arch_local_irq_restore+0x53/0x53 [ 212.457539] ? do_raw_spin_trylock+0x190/0x190 [ 212.462103] should_fail+0x8c0/0xa40 [ 212.465794] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 212.470875] ? avc_has_perm+0x35e/0x680 [ 212.474834] ? lock_downgrade+0x980/0x980 [ 212.479129] ? find_held_lock+0x35/0x1d0 [ 212.483193] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 212.489063] ? rcu_note_context_switch+0x710/0x710 [ 212.493976] should_failslab+0xec/0x120 [ 212.497925] kmem_cache_alloc_trace+0x4b/0x750 [ 212.502482] ? schedule+0xf5/0x430 [ 212.505993] ? __lock_is_held+0xb6/0x140 [ 212.510044] syslog_print_all+0x58/0x770 [ 212.514087] do_syslog+0x20d/0xb80 [ 212.517598] ? exit_to_usermode_loop+0x8c/0x310 [ 212.522242] ? log_buf_vmcoreinfo_setup+0x120/0x120 [ 212.527230] ? trace_hardirqs_off+0xd/0x10 [ 212.531437] ? exit_to_usermode_loop+0x198/0x310 [ 212.536168] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 212.541682] SyS_syslog+0x26/0x30 [ 212.545108] ? do_syslog+0xb80/0xb80 [ 212.548795] do_fast_syscall_32+0x3ee/0xf9d [ 212.553098] ? do_int80_syscall_32+0x9d0/0x9d0 [ 212.557652] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 212.563164] ? syscall_return_slowpath+0x2ad/0x550 [ 212.568072] ? sysret32_from_system_call+0x5/0x3b [ 212.572893] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 212.577715] entry_SYSENTER_compat+0x54/0x63 [ 212.582094] RIP: 0023:0xf7f93c79 [ 212.585426] RSP: 002b:00000000f778f08c EFLAGS: 00000296 ORIG_RAX: 0000000000000067 [ 212.594635] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000f08 [ 212.601878] RDX: 00000000000000f8 RSI: 0000000000000000 RDI: 0000000000000000 2018/01/26 10:31:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x810) 2018/01/26 10:31:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000d31000-0x38)={&(0x7f0000de3000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000023000)={&(0x7f0000e6b000-0x138)={0x14, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) r1 = open(&(0x7f0000a96000)='./file0\x00', 0x80040, 0x2) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000141000-0x4)=0x0, 0x4) 2018/01/26 10:31:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000959000-0xf)='/dev/sequencer\x00', 0x400000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000098000-0x8)=[{0x7, 0x6}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:05 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xa8f, 0x8000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000001000)=0x453, 0x4) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xbe) openat$rtc(0xffffffffffffff9c, &(0x7f000063a000-0x9)='/dev/rtc\x00', 0x100, 0x0) 2018/01/26 10:31:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00008d3000)={{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x307, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, {0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000577000-0x10)={&(0x7f00007d6000-0x8)='./file0\x00', 0x0, 0x8}, 0x10) 2018/01/26 10:31:05 executing program 1: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000002000-0x8)={0x0, 0x0}) dup(r0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x40000000101, 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0405519, &(0x7f0000004000-0x4)=0x0) 2018/01/26 10:31:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:05 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000af6000)='/dev/sequencer\x00', 0x62880, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000001000-0x8)={r1, 0x7fff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000021000)="220000001a000704009433dd0100040080010f0001c6001500fffe3b06000f00ff27", 0x22) [ 212.609119] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 212.617245] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 212.624486] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 212.642416] binder: 1058:1060 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:05 executing program 1: unshare(0x88000400) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000001000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000001000-0x92)=""/146, &(0x7f0000f6b000-0x4)=0x92) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNATTACHFILTER(r1, 0x400854d5, &(0x7f0000002000-0x8)={0x2, &(0x7f0000000000)=[{0x6, 0x8, 0x3f, 0x0}, {0x0, 0x18, 0x0, 0x8}]}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0xf, 0xa, 0x7f, &(0x7f0000002000)={0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000002000)={0x0, 0x4f}, &(0x7f0000003000)=0x8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000003000)={r3, 0xa1, "bdf3bc76a1547e4a5d5c82359edd8191de93e5e50707685d3c04f578247491a4bd278f7aed5958d483bd512994c62396dc24be96c6a89c6e64ef300ceec3a26a580ec78c7470465c8397597c5ff381e1321e177b8673483e934c37981e3f5d129e2ae26029a63779a20ac4389f141e4618420b621b5b129b75c5c73fffd9de6b8d4d248712b16543f781716559148932fa4ac7a9d3d028b943271aaf0bb32324b8"}, &(0x7f0000002000)=0xa9) r4 = dup3(r0, r1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000001000+0x682)={r1, r4}) 2018/01/26 10:31:05 executing program 4: r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000c9000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:05 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) r0 = syz_open_dev$mouse(&(0x7f0000af0000-0x12)='/dev/input/mouse#\x00', 0x2, 0x100) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000001000-0x3d)=""/61) 2018/01/26 10:31:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffc) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 212.663125] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.664222] binder: 1063:1069 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 212.664233] binder: 1063:1069 BC_INCREFS_DONE node 386 has no pending increfs request [ 212.664248] binder: 1063:1069 ioctl c0306201 2000efd0 returned -11 [ 212.666797] binder: BINDER_SET_CONTEXT_MGR already set [ 212.666814] binder: 1063:1074 ioctl 40046207 0 returned -16 [ 212.671769] binder: 1063:1074 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 212.671779] binder: 1063:1074 BC_INCREFS_DONE u0000000000000000 no match [ 212.711278] binder: 1058:1081 transaction failed 29189/-22, size 0-0 line 2788 [ 212.715874] binder: 1088:1089 ioctl 8070ae9f 200c9000 returned -22 [ 212.726630] binder: 1088:1089 transaction failed 29189/-22, size 0-0 line 2788 [ 212.726694] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.729097] binder: 1088:1091 ioctl 8070ae9f 200c9000 returned -22 [ 212.737744] binder: 1088:1089 transaction failed 29189/-22, size 0-0 line 2788 [ 212.751814] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.767257] binder: 1093:1095 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 212.767268] binder: 1093:1095 BC_INCREFS_DONE node 390 has no pending increfs request 2018/01/26 10:31:05 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f00000c3000)='rxrpc_s\x00', &(0x7f00000a2000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000001000-0xc)='bdev*-wlan0\x00', 0xfffffffffffffffd) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000001000-0x8)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r0, &(0x7f0000000000)=[{&(0x7f00001ef000)="9bd78031a8f03b1da9c4b789b7c2f24968fc92d11bc4f798fb63dc2cb257711564d56e8211001b6c8b0f0d4509a13fd46802e97c85f9b7cabd21bb80668bc7cfd9bd95367086728bd5f78610934d6af42f01657101b1da21fab138f54998d1ba400071c9843201fc319e1ea86bb5d662bdb038d897230f9151edaa4a8448dabd825b249379b9c833f247db297c2cf34aab3716b7441c338b95483a12c8183857258cafdff173d54982d8f3b7e5efe2cb7aa152dbf41fbaf0d05acf9d28eea43b8421cbfc6340986a2ae05fb77511666c83742e47eb0bd0f6b347649413d213c76c75dc24fb7858e3ba835df2456e09ab5b8fed1e5e120088", 0xf8}, {&(0x7f0000000000)="9aff1aa54988d511460f13d3ecf9fc88ec9be9316ae8c3fc2ade84c98eb0fe712f7c4ffaf2e42794bc71e0cef3f51e4132cb8d341ecc7696ad51f013c914c73f9d8e6323d8ce42b85f6ea108147417412c05c0475734", 0x56}, {&(0x7f0000000000)="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", 0x1000}], 0x3, r1) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:05 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000735000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000426000-0x8)={0x8, &(0x7f0000702000-0xa0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0}]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) write$selinux_user(r1, &(0x7f000043b000)={'system_u:object_r:var_lib_t:s0', 0x20, 'user_u\x00'}, 0x26) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat(r0, &(0x7f00002fd000-0x6)='./file0\x00', 0x40, 0x40) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f00003c0000-0xd5)=""/213) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:05 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000ff7000-0x1c)={0xa, 0x0, 0x9, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x7}, 0x1c) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000747000)=0x0, &(0x7f00009bd000-0x4)=0x4) sendto$inet6(r0, &(0x7f0000ee6000)="", 0x0, 0x8000, &(0x7f000024c000)={0xa, 0x2, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x0}, 0x1c) sendmsg$inet_sctp(r0, &(0x7f0000558000-0x38)={&(0x7f0000c88000)=@in6={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, 0x1c, &(0x7f0000a7e000-0x10)=[{&(0x7f0000085000)="19", 0x1}], 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) recvfrom$llc(r0, &(0x7f0000e4f000-0xb6)=""/182, 0xb6, 0x2043, &(0x7f000005e000)={0x1a, 0xf8, 0x1, 0x800, 0x10000, 0x80, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, [0x0, 0x0]}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000ecf000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x0, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00002e6000-0x8)='./file0\x00', 0x43, 0x0) r1 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x185005, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00003cd000)=0x0, &(0x7f000017e000)=0x4) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000361000-0x30)={0x8, 0x300, &(0x7f0000744000-0xe)="1f5f9ca0aff8829127c8d52dca0f8cadcd78d8680fc3ad2fbd2710ef1995b4960913087616c3109c99", &(0x7f0000993000)="e6fc42666440038d24f962e59f8cb7ebc1312731e4d1272e324d871302d0dda4a3339b80ecd40c93316d9a3620655a8e94355f22defc199e07a8a1359d709e83bf85a3b572c35089bcd3c310d6eedadac9cb3d1ea97356ce6475eff5f22802819780bd2305b0d5f085f1c67e422539f9727d2ea9a0740d68274d29ad750f0cdd544e01f6835c11665e", 0x29, 0x89, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$setlease(r1, 0x400, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000063000-0x30)={0x1, 0x6, 0x0, 0x9, 0x8001, 0xbf}) fgetxattr(r1, &(0x7f0000749000-0x11)=@known='security.selinux\x00', &(0x7f00003fe000)=""/68, 0x44) unlink(&(0x7f0000de7000)='./file0\x00') ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00004bc000)={0x1f, 0x10001}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00005b8000-0x6)={0x0, 0x6}, &(0x7f000030b000-0x4)=0x6) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000b56000)={r2, 0x0}, 0x6) 2018/01/26 10:31:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000002000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1f000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000288000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000965000-0x1008)={0x0, 0x1000, "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"}, &(0x7f00001dd000-0x4)=0x1008) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000a7f000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00009a6000-0x8)=@assoc_value={r2, 0x2}, &(0x7f00004a0000)=0x8) 2018/01/26 10:31:05 executing program 3: r0 = syz_open_dev$adsp(&(0x7f000077a000)='/dev/adsp#\x00', 0x3, 0x80000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$packet(r0, &(0x7f000085f000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000332000)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000c07000-0xc)={r1, @multicast1=0xe0000001, @dev={0xac, 0x14, 0x0, 0x16}}, 0xc) r2 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000e24000-0x14)={0xa69, 0xe000000000000, 0x1f, 0x3, 0x7}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f000051f000-0x10)=@common='eql\x00', 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000b92000)={0x2, 0x0, @rand_addr=0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r2, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000116000-0x18)={0x0, 0x10, "dd0b29faf0a62fb850f975286e019835"}, &(0x7f00002ad000+0xb6f)=0x18) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00007eb000-0x98)={r4, @in6={{0xa, 0x3, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x4}, &(0x7f0000f27000-0x4)=0x98) 2018/01/26 10:31:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000a9000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000600000-0x4)=0x0) sched_setscheduler(r1, 0x3, &(0x7f0000443000)=0x5e0fe957) close(r0) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00008c8000-0xc)={0x4, r2, 0x0}) openat(r3, &(0x7f000062e000-0x8)='./file0\x00', 0x101000, 0x1f8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 212.767322] binder: 1093:1095 ioctl c0306201 2000efd0 returned -11 [ 212.771344] binder: BINDER_SET_CONTEXT_MGR already set [ 212.771361] binder: 1093:1100 ioctl 40046207 0 returned -16 [ 212.776975] binder: 1093:1095 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 212.776985] binder: 1093:1095 BC_INCREFS_DONE u0000000000000000 no match [ 212.869168] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:05 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) socketpair(0xc, 0x5, 0x2, &(0x7f00007e2000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={{{{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x8001, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x100}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0xf2, 0xe, 0x1, "0281a7d677ab77e444349a0a06e7c314b1efa33d955be0a5912938827e5a7eea2cfbe4d2c468fed3611a3a52c55a7a45e6f4515a7fa41f73f57e9766cf220086d53157a5cf49663ff7925bb72a0d5a73"}, 0x160) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000002000-0x1)={0xffffffffffffff45}, 0x1) 2018/01/26 10:31:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000dbc000-0x8)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000005000-0x44)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x8, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004ee000-0x76)='\x00', 0x1, 0x0, 0x0}], &(0x7f000000b000-0x30)=[0x0]}}], 0x0, 0x0, &(0x7f0000009000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000084b000)={0x0, 0x0, &(0x7f00004f3000)=[], 0x1, 0x0, &(0x7f0000e8c000-0x1)="c5"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000c7d000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000f24000)={0x14, 0x0, &(0x7f0000d89000)=[@acquire_done={0x40106309, r1, 0x1}], 0x0, 0x0, &(0x7f0000919000-0x1e)=""}) [ 212.905097] binder_alloc: 1108: binder_alloc_buf, no vma [ 212.922793] binder: BINDER_SET_CONTEXT_MGR already set [ 212.922804] binder: 1108:1120 ioctl 40046207 0 returned -16 2018/01/26 10:31:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000190000)='/dev/amidi#\x00', 0x1ff, 0x800) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000a7c000-0x4)=0x8001) r1 = socket(0x201d, 0x804, 0x3ffffffffd) connect(r1, &(0x7f0000526000)=@ethernet={0x7, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000e50000-0x10)={{0x6, 0x100000001}, 0x1}, 0x10) listen(r1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000a58000)={{0x2, 0x1, @rand_addr=0x10001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, {0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="aa292d82226107c959330ca107472933"}) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000292000-0x4)=0x0, &(0x7f0000ef8000)=0x4) accept4$ipx(r1, 0x0, &(0x7f0000242000)=0x0, 0x0) setsockopt$inet6_dccp_buf(r1, 0x21, 0xd, &(0x7f0000b80000-0x4b)="c406236d2c4216893a9789da72eedd49efc1ecd09bdf49f9b1304f6d21973c416be94d0d680a5eeb75378593d6c37b8ed9135080f9726470b767d01c9f002bb815aa109a97515a885348da", 0x4b) sysfs$3(0x3) 2018/01/26 10:31:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = memfd_create(&(0x7f00001a2000)='/dev/binder#\x00', 0x3) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000ed8000-0x18)={0x8, 0x0, 0x3, 0x7fffffff, 0x1014, 0x8}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) ioctl$sock_ipx_SIOCIPXNCPCONN(r2, 0x89e3, &(0x7f000021a000)=0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 212.954239] binder: 1105:1113 transaction failed 29189/-3, size 0-0 line 2903 [ 212.956174] binder_alloc: 1108: binder_alloc_buf, no vma 2018/01/26 10:31:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c46000-0x9)='/dev/dsp\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000ffe000-0x9)='/dev/sg#\x00', 0x7f, 0x80000) socket$bt_rfcomm(0x1f, 0x3, 0x3) read$eventfd(r0, &(0x7f0000001000)=0x0, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000044000)=0x0) read$eventfd(r0, &(0x7f0000454000-0x8)=0x0, 0x8) close(r0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)={{0x0, 0x0}, {0x0, 0x0}}) openat$selinux_access(0xffffffffffffff9c, &(0x7f000019f000)='/selinux/access\x00', 0x2, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f00009c9000)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000fe6000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002f000-0x10)={0x2, &(0x7f0000c62000-0x10)=[{0x2d, 0x0, 0x0, 0x0}, {0x80000006, 0x80000000000, 0x0, 0x0}]}, 0x8) write(r2, &(0x7f0000fe4000)="", 0x0) tkill(r1, 0x15) [ 212.956201] binder: 1112:1119 transaction failed 29189/-3, size 0-0 line 2903 [ 212.976995] audit: type=1400 audit(1516962665.341:264): avc: denied { transfer } for pid=1130 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 212.984818] binder: 1105:1125 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:05 executing program 1: r0 = socket(0x18, 0x0, 0x2) socketpair(0x7, 0x0, 0x9, &(0x7f0000fda000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000001000-0x50)={0x1, 0xffffffffffffffc1, 0x40, 0x0, 0x12, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000003000-0x4)=0x0) 2018/01/26 10:31:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00006d8000)='/dev/audio\x00', 0x14000, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x9) 2018/01/26 10:31:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000f28000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 212.985639] binder_alloc: binder_alloc_mmap_handler: 1130 20000000-20002000 already mapped failed -16 [ 212.988280] binder: 1112:1129 transaction failed 29189/-22, size 0-0 line 2788 [ 212.988415] binder: BINDER_SET_CONTEXT_MGR already set [ 212.988424] binder: 1130:1132 ioctl 40046207 0 returned -16 [ 212.989736] binder_alloc: 1130: binder_alloc_buf, no vma [ 212.989763] binder: 1130:1137 transaction failed 29189/-3, size 40-8 line 2903 [ 212.996696] binder: 1133:1138 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 212.996709] binder: 1133:1138 BC_INCREFS_DONE node 401 has no pending increfs request [ 212.996725] binder: 1133:1138 ioctl c0306201 2000efd0 returned -11 [ 212.998061] binder: undelivered TRANSACTION_ERROR: 29189 [ 212.998184] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.011727] binder: BINDER_SET_CONTEXT_MGR already set [ 213.011747] binder: 1133:1141 ioctl 40046207 0 returned -16 [ 213.014402] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.014514] binder: release 1130:1132 transaction 395 out, still active [ 213.014553] binder: send failed reply for transaction 395, target dead [ 213.046122] binder_alloc: 1133: binder_alloc_buf, no vma [ 213.046145] binder: 1139:1142 transaction failed 29189/-3, size 0-0 line 2903 [ 213.050672] binder: 1133:1141 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 213.050682] binder: 1133:1141 BC_INCREFS_DONE u0000000000000000 no match [ 213.060129] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.082430] binder: 1149:1153 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 213.082440] binder: 1149:1153 BC_INCREFS_DONE node 403 has no pending increfs request [ 213.082452] binder: 1149:1153 ioctl c0306201 2000efd0 returned -11 [ 213.085119] binder: BINDER_SET_CONTEXT_MGR already set [ 213.085133] binder: 1149:1156 ioctl 40046207 0 returned -16 [ 213.086187] binder_alloc: 1149: binder_alloc_buf, no vma [ 213.086208] binder: 1150:1154 transaction failed 29189/-3, size 0-0 line 2903 [ 213.088060] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.091230] binder: 1149:1153 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:05 executing program 2: mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000022000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000023000-0x10)='/dev/sequencer2\x00', 0x8a000, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x24, 0x21, 0xaff, 0xffffffffffffffff, 0xffffffffffffffff, {0x4, 0x0, 0x0}, [@nested={0x10, 0x1, [@typed={0xc, 0x1, @fd=0xffffffffffffffff}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x0}, 0x0) setitimer(0x3, &(0x7f0000007000)={{0x0, 0x2710}, {0x0, 0x0}}, &(0x7f000001b000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) mmap(&(0x7f0000022000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$netlink(r1, &(0x7f000000c000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000023000-0x4)=0xc) 2018/01/26 10:31:05 executing program 7: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000ee2000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000f74000-0x6)={0x0, 0x21b}, &(0x7f0000099000-0x4)=0x6) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000039d000)={r1, 0x46ff}, &(0x7f0000a96000-0x4)=0x8) syslog(0xd, &(0x7f00003ba000)=""/248, 0x5cb5999f) removexattr(&(0x7f0000f5c000-0x8)='./file0\x00', &(0x7f000090c000)=@random={'trusted.', "757365722476626f786e65743176626f786e6574316370757365746d643573756d6e6f646576297d656d3021a400"}) 2018/01/26 10:31:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000731000-0x41)="fee055ca1d6a9ed1041f8eaae3ae2ab3edecde08d4ade97aa57e36c515fdb2b9739e0009fd8f2a45bea67e7b91d47a9efb0d1e7a4122766aacf7294fcefe9f9596", 0x41) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000a90000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c02000)="e90165acdc2b96c7e0891f63d3b3092f9e51b4896029c085f85d1e5bf9bdb4844a00f6ff70c8e79ff3dbe6bdfc48c1ceaad333564a5519b3cc31301424b848a3095539812fa42d98518f5f02d5a93b9c3fce559cd8383fb393b79887ce510ca36ef50ab82b508210be2a09716d57c94e7793eedb9b6471d2ffe77ea59f40982a772f14d1cda41d3300f2d0f61511ffd2cfd058bae87fc84a04a9043e73618a68ec3715ce2549ca2e21390591ada6f705a7439c87c330aba52bb98cca680226a92fee", 0xc2) r2 = syz_open_dev$dspn(&(0x7f0000e4e000)='/dev/dsp#\x00', 0x2c, 0x40000) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f00008c1000)=0x0) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000dfc000)={0x0, 0xfffffffffffffff8}) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0xfffffffffffffffd}], 0x0, 0x0, &(0x7f0000002000)=""}) getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000c47000-0x4)=0xffff, &(0x7f00005c8000-0x4)=0x4) 2018/01/26 10:31:05 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b78000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000d80000)='/dev/input/mice\x00', 0x0, 0x8041) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f00009d2000)={""/1024}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x7) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) 2018/01/26 10:31:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00009d9000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:05 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x8020400000000802, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000ea000)={@common='bpq0\x00', 0x0}) bind(r0, &(0x7f0000ed7000-0x80)=@generic={0x11, "0000010000000000080044944eeba71a496ae252922cb18f722e2ada000000012e0b3836005404b0e00100000014f26effffffffffffff67b100800000000000000101013c5804459e15775027ecce66fd792bbf0e5bf5ff1b080000dad11c000100fff6000000004974000000030000000000000000076d3a09ffc2c654"}, 0x80) sendmsg$key(r0, &(0x7f000009e000)={0x0, 0x0, &(0x7f0000251000-0x10)={&(0x7f00007d2000)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:05 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f000025e000-0xb)='/dev/hwrng\x00', 0x0, 0x0) inotify_add_watch(r2, &(0x7f00003d1000)='./file0\x00', 0x2000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 213.091239] binder: 1149:1153 BC_INCREFS_DONE u0000000000000000 no match [ 213.095450] binder_alloc: 1149: binder_alloc_buf, no vma [ 213.095471] binder: 1150:1158 transaction failed 29189/-3, size 0-0 line 2903 [ 213.107169] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.279910] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.285427] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:05 executing program 7: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000059000-0xb)='/dev/hwrng\x00', 0x400, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000000)={0x8, 0x0, 0x10001, 0x8001}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40086437, &(0x7f0000001000)={r1, 0xbc}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xc2, "b8d7595e8d683fafc5d38f8cbcf5e60b3720c098445a3ce87e1e1982ecce35eb67c072dfd165e06fafb814baf3e2cc68213f00e552a31808938847d88ea765180f2c27a95a0a6d8d713d91aaadfacbdcf02b4b5e6d7fcb050523f9b747e963b21e626a6df9feebefaf3bdb23f666f3ce6a36ac069aaa439cdb3d6ccb4048f85d4fec725a1023675d439ec9d98712f3a7f6755038d0c7b66ecf042a4bb93f3f268c10671fbb28ad93751d00580650de8773f798bfc2def270607eb6213c035726ab97"}, &(0x7f0000001000-0x4)=0xca) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000125000-0x8)=@assoc_value={r2, 0xcf}, 0x8) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0xb) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) [ 213.310617] binder: 1171:1176 transaction failed 29189/-22, size 0-0 line 2788 [ 213.313936] audit: type=1400 audit(1516962665.676:265): avc: denied { getattr } for pid=1163 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 213.318440] binder: 1169:1175 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:05 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) close(r0) 2018/01/26 10:31:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/26 10:31:05 executing program 7: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000114000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000fed000)='tls\x00', 0x4) syz_open_dev$mouse(&(0x7f00009c8000)='/dev/input/mouse#\x00', 0x7, 0x28840) syslog(0x9, &(0x7f0000001000-0xf8)=""/248, 0xb6) [ 213.318451] binder: 1169:1175 BC_INCREFS_DONE node 407 has no pending increfs request [ 213.318468] binder: 1169:1175 ioctl c0306201 2000efd0 returned -11 [ 213.350815] binder: BINDER_SET_CONTEXT_MGR already set [ 213.350833] binder: 1169:1183 ioctl 40046207 0 returned -16 [ 213.370325] binder_alloc: 1169: binder_alloc_buf, no vma 2018/01/26 10:31:05 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) r1 = creat(&(0x7f0000372000)='./file0\x00', 0x20) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000514000)=0x0, &(0x7f000025e000-0x4)=0x4) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000781000-0x10)={0xfffffffffffffd20, 0x7fffffff}) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:05 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = dup3(r0, r0, 0x80000) ioctl$TUNATTACHFILTER(r1, 0x400854d5, &(0x7f0000ebb000)={0x9, &(0x7f000040b000-0x48)=[{0x100000001, 0x1b, 0x800000010000000, 0x200}, {0x8001, 0x200, 0x1, 0x10000}, {0x0, 0xff, 0x6, 0x0}, {0x31a7, 0x5, 0x8, 0x0}, {0x10001, 0xcb, 0x3, 0x6}, {0x9, 0x101, 0x3, 0x9}, {0x81, 0xffffffff, 0x1f, 0x0}, {0x0, 0x6, 0x100000000, 0x8}, {0x2, 0x3, 0x9, 0x0}]}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000c1f000)='/dev/ppp\x00', 0x105000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$KDDISABIO(r2, 0x4b37) syz_open_dev$sndpcmc(&(0x7f0000883000)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x10000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000ee7000)=0x264, 0x8) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000695000-0x4)=0x0) io_setup(0x8001, &(0x7f0000f71000-0x4)=0x0) io_cancel(r4, &(0x7f0000aea000-0x40)={0x0, 0x0, 0x0, 0x1, 0x401, r0, &(0x7f0000617000)="0e7877b6cfc61b6b694825dda0f48de3b979954990b150da9bcef9b3a744003c11357ae8fd81ebdb09bd2a955209ed937cdb36732fcb10de83fb6e62a4e581faa97144d3017602541183f0e56c527ff3e843d35afce7bdbd", 0x58, 0x5, 0x0, 0x0, r3}, &(0x7f0000614000-0x20)={0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f000000f000-0x8)='./file0\x00', 0x2, 0x40) connect$ax25(r3, &(0x7f00000ca000-0x10)={0x3, {"16f932ebaeff66"}, 0x5}, 0x10) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(r5, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000817000)={&(0x7f0000e37000)={0x14, 0x0, 0x0, 0x7, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000ddf000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = dup3(r0, r0, 0x80000) write$selinux_context(r3, &(0x7f0000c64000)='system_u:object_r:usbmon_device_t:s0\x00', 0x25) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 213.370349] binder: 1162:1166 transaction failed 29189/-3, size 0-0 line 2903 [ 213.370393] binder: 1169:1175 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 213.370402] binder: 1169:1175 BC_INCREFS_DONE u0000000000000000 no match [ 213.397230] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.419087] binder: 1194:1197 transaction failed 29189/-22, size 0-0 line 2788 [ 213.419199] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:05 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0186416, &(0x7f0000944000-0x18)={0xfffffffffffffffe, 0xb1, 0x6, 0x1ff, 0x14, 0x1}) getsockopt$inet6_buf(r0, 0x29, 0xcd, &(0x7f0000004000-0x38)=""/56, &(0x7f0000003000-0x4)=0x6) [ 213.429354] binder: 1171:1199 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:05 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xffffffffffffff21) [ 213.429566] binder: 1194:1200 transaction failed 29189/-22, size 0-0 line 2788 [ 213.442227] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.506861] binder: 1203:1205 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 213.506872] binder: 1203:1205 BC_INCREFS_DONE node 412 has no pending increfs request 2018/01/26 10:31:05 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000-0x15)='/proc/self/net/pfkey\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000ad5000-0x1c)={&(0x7f0000ee2000-0x10)=@nfc={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000000)=""/147, 0x93}, {&(0x7f0000001000-0x6e)=""/110, 0x6e}, {&(0x7f0000001000-0x4d)=""/77, 0x4d}, {&(0x7f0000001000-0x95)=""/149, 0x95}, {&(0x7f00007ff000)=""/191, 0xbf}, {&(0x7f000056a000)=""/102, 0x66}, {&(0x7f000013c000-0xe2)=""/226, 0xe2}], 0x7, &(0x7f0000000000)=""/151, 0x97, 0x8395}, 0x40) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00001e5000-0x15)='/proc/self/net/pfkey\x00', 0x2100, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000805000)={0x2, 0x4, 0x1, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x20, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000014c000-0x9)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) utime(&(0x7f0000c4c000)='./file0\x00', &(0x7f0000a98000)={0xac3, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00006cf000)={0x10004, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) ioctl$KVM_SMI(r4, 0xaeb7) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00005a0000-0x10)={0x0, 0x10000, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000c9c000-0x138)={{0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x1f002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/01/26 10:31:05 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000f70000-0xc)='/dev/audio#\x00', 0x2, 0x400000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$alg(r0, &(0x7f0000001000-0x1c)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001000-0xd7)="d058c640f10493aa6eb6b446fd2f68ccfc96b56df557051cd535bad85c3a67f636cb6eb6b496165c8e4aac4716942154d598d3d3d518847e93f1fe11adf7253b5751b97730f5d74ff9fe309f50297fe1470f9de4002cc484da89c1c011c433e9253d21d9e36828416e94b8a1755007b9285aa7da9ffa0c76e93a24b2aca15b23c9e9971d3bf22fba60cf8691f7094d345bd5e497f5beefa888ea09d108e2a655807367644b4e79028bec702c92b776e292d5d472b0725a8bea2e8a1af562564f05e974939a6863ba81c6bb58ed1ac90dfe5a5469c3457d", 0xd7}, {&(0x7f0000001000-0x97)="ac643f71e50f915fcb40aa211020ae94b9a8ce10d80afb5c194ca617d89f3dd85e606af5f7efc18cb1d64663521ef71bb1534356453b57e39806b5858f4d6e7e8a20c60fb4db08a9b9d8ea456e788df6d7dd510f50332cc6fb82b5bb8ce7651fab43569efb3110c154ffe4f9a3f69fabe038853395912bccdd3d8cd5ef5b1d6c9b5643ec21d968f3f5108b3022c3f6eaec747ee2eb3e47", 0x97}, {&(0x7f0000001000-0x15)="5e501cb571e6f71bd2d9d02cdf706f26d6272f4c93", 0x15}, {&(0x7f0000d6e000)="889ea80b9c59e7e3f2e798c0628141fddd2bc12936041af22777e788d3c08030828a0b9d98a0814d89ec85e75b99f87aeb63889284b6a66593f0c5a768c587e9632da03f980ad3be58f514db158e96633e1482cd99c20db151971b94b770c2c020484ff358a8b3f3c2a41ecb9ec39c52093e6738163d65b129b7e2a0fd4a0a9f14f36bd88049a31c32fe943e582b463e463590c793c1146ee528ae626e84468b54ff7842bc4b295891cf0090f8ae5d5ab682ade7723f8a31a7c22242edbcab95", 0xc0}, {&(0x7f000042f000)="474d5a1167910c10558b5bd11cd071e8fb8ba3a11a9b04234082d7475e4afb2c6065dc9b5325536bb4ae59f4fc07c43caf5f0b98334a933acd", 0x39}, {&(0x7f0000804000-0x45)="64ef0218d439dd44b8e22422b237b993805b96581883431118a1a990dfe2dd5885ae108edbb3393b1a72f8fea20966f233de063439effe3c8ca083f49f558a5e95086df0cb", 0x45}, {&(0x7f0000a13000)="ae1e079f1fcffaf9d9594f4ffe611070637bfb34d2727522ac17825a79c1ea38e42a256c97c8f5e494231f545b94ae309970", 0x32}, {&(0x7f0000d6e000-0xc3)="006cf0cb1f1938ef03347e33af5bcf9201105f741f195d4c57859ba7097b0e12c0cfcf06928dedd45394d7eb1f3f2263cd6cd8ec4b77cea1d1b858b6d0cf53fe4adfc70a05238d37e5ab6d221d5269778b664575c2bad5635691e33f6a2386f77748fa222c3a6213d71c8a80013635409bd8f3d272307663bce8da20ef7ebd7fc997c52b4476a03235fec46701a52a5d93f8b77f1916caec77b64d7e15f620554bf175851f995504c383f9d2d7eee3b5d0d385c69fadbafd5d364513b74614493d5751", 0xc3}, {&(0x7f0000663000-0x73)="5dc4cc35fbcdbbdf952018abe65ff2c3f237bdafabbc29e2ddcc41e81061e2526e41a6bc5d09778f15d38e6ae24c826b6866b430092f6876321d10a43cb62ea7ab84d34d4c35776a66ffe091c682fe77ec97abd3eef3d966c0685488fb2eece3bbc4af2ad614d0207221662127445e9614b520", 0x73}, {&(0x7f0000000000)="2e7c0b1615923d23c1961d08e59164fb097feca521d74284c0608df5d3b31ba7984309011301a994d718d031b7470be62e23d08ea8e65963708af843f3816af36ac2d3032925c0169e5dced7f0fc0afb3e874d86645cddcb6a408a15de72abed0a1f1126261f77d3876a4f87de1be1ef938f2123bd96879bcb571dd21b441bad6ed9ebf3196eabb72a421b7b82c4a948ef8439f41f015c190a6b1299ebd0d3b3cffd5c64c98414752af05030065281fb600f5300b20b7331501fff420c19066b", 0xc0}], 0xa, &(0x7f0000000000)=[@iv={0x1010, 0x117, 0x2, 0x1000, "cca764e8369db0211c4c30dd3a2246010f32e255a368357f3f72b291b4ad96f437cba2e8edb3c010b853ea0b9f505eb6f8829c4b377c37f57bdfe3127d43c03921b702097c5f3be083d89fc5462cade87b47dfcbe6fe54c729982595240cc1b86fbb5c88d5c47a1bb75d674d6b87453ce193de447717dbedc0b0be62fc7a314f90ca1ba6c1ed43e0b639a2a4fbdd19cc6e2d21d53bdcd20544abdbbd49084aed8892f48c6ad8f063cdd9e7897db05a13f28dd57e5563db11bfca833795b2121bcc8e5313b61d0e80e10a6257d55786d81ac1d8fb4c5b6f7433fbd92654ff20810b103cf77fc98b33e9132651413a61f43fe771865243f6807fa8a805768e6c04280de3f8dced8b3168ba8382b27bc6202a12bbae258def9e810081d85097e713360bff9d3438884d2b26d1a454a7e453a4e287cccbca7f01f8c9b4cc5e0d910573568c13db4c50c65f5e2c657de6a9756a2be76b80af7d4b84bf8ecd6cf2b08135c87d57364dfd3559ef1b230c11a46d8b5eaf36ef952ccfa4b28b5330264bf566b8a8ae65e938410fe7f41df9102f5189a363e6be821cc0ebcc4f35e11f9fb0ea7613b33a37e551f1eaccb300cec9aa7b7d66a7a81170336dceede833128873e323441d8a3c91fee24d736a91f8229d141081d47eaa87d053e5348717ebf5e4a6f1b1d506479af7c1b95f35031f6a610c20eeaea36cd3aa450f3a46c814c2cc43c6c58c6841d686a2a2663e8d115ac322fb282713895c651d5cd4f22e6aa5083ca59580586e7c73d7761f82346aa15225d0f7d071e70886aa90ef56b8cad1d5a4d4e9d94ec62a8e54f97bbf3f8f5eb004b562a51946155d90e4b371e68a59761cce131e0930d09998b59cc9f0b3f4c0b3181d20bf6ccc3ca70b81d0d0a205db382e479ce9afa5e5228ebe2ba48fdd44780304e02b9cdeb321f2f97260ba4a51088cace045f9629f988b9296618f081bf7c942fab18efe0eea167ff1bfc1863866d7063b6c222d2890d51c5870784e6a06c167bc35652952aea1b06fe5c247b2682fb742c2c18b3e0af6892f6530b86312c8c7ecb2d84cdea29c77a83e4e0df2f401ad598693d0a1832c99b7f72327b45a19451bf04353965026dafbf1a02c2751750fdf4422093e6f7fb3a949b542bfc915a1e1dbc7e2b06fb19c748255ecad6262c87699fc1bf19ad1e130901abe11bc155b3b1d4546aa37fdfff24eab9387bee8ad3f93a5787e18146665ecacab8389d87d39abf8ce519a198eed61d7c72acbb3b6515948baf76279afd677b5f6a9bebffa126668b09eaed75b1c393594509a0416df2c7c633d124e5877580a2fb47cf0f82c8fc244e75f2759ff8912113ee375207847afc357fe053a8c02632e1197150df6d098f2d2db1c294d7fbb6eb522af6fcca56da73839a3bfa9801513d156cb1675c4de81770b5a2b6b4f05e0a2da257c012497293ec86f4f777607f988705aa8556af7c73e707115ccca80960ad79f37cf57824235e4c4906bf3143d4137d3498d8accf35d23a407cb953f99e9b17beaa72876bea469cee7a094ecb6f8ce51106be36da76001d418a94552e602d781a1c37cf4cbe84d9d3c8c03a86fb582e70fc1c8f00b95dbed0695d091b5e7291f59d5a7286ca6c8ba9cc3580329edfbc284273961ce648752cf67a0488a9a7ea79848d891f705982a969aac98e69906fcaa302642daf322c5bf3e02b1814c83900e015c5f5cdd9cfbf04ab27dd2c5560195e0e414ec6b637fd50b2f083f663fdeb1f7a5767e14609a47cddd5cffe6b8278f9b698421c82b33162063cb661c5d03ab5b6f277d19039df08dfa5721d86b1c1f2d9022a5145548600f38fc405f6077951578982058148dc9854518ea9dcc3f5b6c3481d4f1d79434752d3bc6a670ef160b4e160afd53acd36dfc4da3acb278689c7f75546041e17725efa1deaaf97baa97feb30e2b8c9a8c10cd6c07401c1d9d9207cf8a1c0f27992e2d30cfc12b92c654e3d22e7a158e96504a13517efcca01359d89d8db58642e1e1844b08c4fc4391d245452693668835f825e5947b0dae3b58d1f3b2e03971ce4463f1fa481b43b3dd69ec1f307882babebad340b2500c9bafa2bb1f6f62be951217aa89e790c53ee289f0c4fe512554dc025b2fd263af1185f56152decbbb6810371ad9aeacf07bc17ccc2331783ab6e2b937fe30c56303b1eb40edc405d9c799f0c95054d8c9567dd547aa41a8fd46273670ed7746e6d66ad6a6afb753ddb4840b4ce0d4d3c0c00dadcba0e95963eb48b400c1d718664dbe9d08e15577f172373dcef7dd12e7a8c34a9b31dcf9058ee2ce82a4f05a2d1158fc6f27f9ca16756906477dfe053ecf5144a056fe09f928c426a710794741f5121d730511f1c592c8fe4fc03fae77129ab5b2e42aa3f05c20acf3c7edd602f1c8bccb5533d4f12c8b2686131c9529d5fa9590888cc4024208db6f5a28b9175042de1349ce00d1efb3da0955e2a7ed670e266d279b092ee41544b67a361fd348c50f70394a1b47af6954bc031a5be82c9a9565bad5782566319e90bb49795002dfff2bfe4f8d6c2ad20ace003731b578d9a7a91abd831a74ff672d1ec06e36c7a7bc9c0dd24f09b036ab2cd4db6266512dc2c7fcb95bd0bb8a5409a8634ddd77685fba4e542abb7a280f15c6a201de2d40267ea91b3480c127a94b55a9af15c0bafdabe096630a091eb6d478ac69ab74aaeaf1e060c6627ad6f7a02431f3bc02177e83bdd031515bfc80810e2f6aa806e682bd484fef28a55793390af7c6284f19fffbc6f232264f464e97a36fa88f72ed09af741eeca5fe035baa97d4e66e4a52f347517af656e52505d77203452e559d75c5c492b775e680e8f1e92282bb473fabb422adedfb0068505d8b6679a1a59e1a3603afc2414fc54ee92700b887410e8e4855f4574679da2388e8d68d2d2d6ccc0e5c76d2382ad5b55b805043cd552b94c7187d6c282c8c99f104af959d294198718a5f07a3d5c291cb0f387a73ec569f1596b874c3e0e2a53da85563b99ef43472ebc69ed1ae23500d569c05159018811432aef50c2ac1f109903e63058395f2a7ed8993a9213f8f944bcf9330065b418aa9343e7ae68613d88507f2b3c9afd31f7d17442c9a000d52682695b866a3ef6412c031616fd3268b062ddf7eeb89b531d8c007b1091dc8e387fd8cc9d87f4c21993e35521ef45ac9989d13b5cf8ef35a356b641f2b0bcc2640c9553a4063008ad7b6684a3ee4d0b92197a9a555fcf28fded69e3a2bbd5c284b61697b6a62596f79e890fecc765b6205bc2a9e81d69f06d519f6a94f55398da191eded700b8015dc5d58b1fbf4df1b3e284dbadb8b88cc5211ac403d714304371472de6228b1d1bba596b70d2a7e94d55b20a71e81cc59fb1eedeaf57f73507711a566999e1032b26922c9b3b8f1503488518def37c19bc1c5b969fb91ef0fda0e653aad4031f08a2c8343efdc6c647fbe35f46dd9233e440504e9f54a8fcc4bc2d57a2c195a217397d2be44a925d3f47a04c2f88d22888f47510299191e8c34a5339029e93595c83bca00cfcfe2419ff1990164b3613c926f90b03906a47f0b8c5925dd3e12b12a76bcb01bab9cda55bb716c10c32058cac6ef0da1d21ddba0e7bfe8cf55f8b98200fced706a54ff87e3e0ec686401cd8e668e9f022810f336ec2a74e1852df071cb70dbce552cbb80f6c0438af5c144a883d33f42d4e6c83dc0e384ea873fbb6a401cbcb89ddece7ab0c6287c8c6ec5818de6e68c5c13a5a59dd261a59cda124e425557b529085c37044ed2d355ac7ca984a14daf691471b08855a6b9740eda193dede5f69582e3bf6fab8e7c45c1bc5f81c0590671a76bacfa32224afcfeb9f6c8c8f5dcaa883811af7c746e508c45e8127980d1a4a67c60098f94db89a1653774437bc48a12bebaa7aab7362c81132f5be4fb405f543e113321af6cb64e1a70c0da87364cef29770e4022c5a04d9fc86e9356c018fdf500fb73d810003743290c284ed0d86d23f98056ab728487c17989c205fb495deced14bdc95ba495ab0bc3b8ad835ce1a9905aa1ea03e4df536be5ea9be79a7b6d74e62100a69b80a90b10de0224139e185fd7763971dd170e82087a387a14b61a2fe42c208ac5fbd8ae128cb35cd7be1961d02c544844a3af3c44fb94acfea6b9fe14f1ceee537b78c9f2369d427e7442aa0e333122423060fbb58e2b6739a9ba08324e0db73e178d61f648dd8385168cb6cd9140a41746e9c8d4a3ce654ffb0f59c70616028e934eaf1adc2d39d304db04c1976edc9d15732af0de4f1da399fcbd2fd25807682d0b4fb2afc4c7acb3d3ec47279f788fe4921f85badfd1b6092afc4c786c3c2fd1c1279b1ce7ffe5ecf27f05be7c553298b69a8a0eb157ff5491d93d107084b82a500d438a91c5dd9afdde8616128cbce1280aac73f1a437dbfd35e9707f182695f9ca18a606477474d128e64241d3d6f45b6fea1e8fd431ff4ef01fc0458f7a96991f7ee5faa2cf143e0e10c084949c937a3f3ca19edb7ddaf5058c451de97645157aad10b9e9d9ba37a0be587cc4af98140c9d3179722946b2138d831db861fdaaa1086236b93608146ace5aba9a2603a91b58dcc529a72abc1a893f46dd7e29853c1e3c68e77dac3203a899d97bbefb4cc340587b964e44c5536a7850e2db772ea108d6c4d49097495c58be5e9dc9247c9d101ba6466f0850ce1e69728c6739eb5ae87b877a59fe2aca78c0e6ccc865c9d3912bfe8c96625d0bfe9a99f5f697c03addf5d34b7aae1f4983e456ad15cb49bbe23ecae12a0bac21002572c8cad751f8d533aa3e935142fb760c461f65b66e686d7f662f457975cc9cbe62420b1a1d579828ff684165f8cf56cb42ca173c1012d174e143f0bc0152bbda1c393a37af4df7ea34fbcd276b4fa77648f2b8c9a10b5549084465472f2dd1cf0f0845589324eaaf559d0041a69989c704facf607fb31b30ec5b6f5027f896fee58085feb1bba81c39acd7b09c8c46ed879b812d65ca27b2e9679e279a470567782ce737c53f09ed9afa0a90eec3969baa93233c62d43f244e0e7e5a9f8baa66658cb5468662d5ed9f3b6cfbbf2e6f5f1d89d34102b00eb6e0d7755947e1d08ec365500714d4bfce55c19171772ea36d67370b79c2b1092d1376d5676b4f2bdbfbbeca111afc5bb70677a4fde7e3489f9df2bd6cf6d7b3a5056047be5d9f73d24865f136ddf975456f5c0c47e87b8b091394eac1a497665980eebce33f25efd74ffae4674953ad734abedefe9a8768de56d91a52425bc1f98e6cc7ca5d54b0169e6f98a293b9a16b808cb9466015701392d5fc90b88d437a83978c5f31c669cf567f81587ffea915e3ab6fad5e48b91b938214003dee6d36f7a777ccc618d164c6fdd0969812eae19cb311c5c858af723c27c50b346270735fc440ccb46c56a4540c80cddd6b4665ed840692b56de655008b805e61df4fab0736562916486db63c9bb3588d20fc779e5e73a76ce08ba9fa8260acda653d3b54a40656d4e196f44042ae2a1acb97de01a40e2ec3c3fd7a79b4d336ae3b18020d757ff5cc065cbb2bf53ca8c7ef534b2f6f5e6288c6606aaf10dbbb1a7f2573d205ce6943e71624ff1a3caafc829d39950b9cdc2cb31a367455c63e133b92686464ca7b1f9aaceba721b07c5b278f6c3811ce1ac5c360f6360415f70af129078ac5f63f130cc3d2659df019f840b632d2c4fd751e9881ac996dbb917b51638a59e46761001a12d554cdc9c34e35d8a222c4dee31c6d9"}], 0x1010, 0x81}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00007cd000)='}@/cgroup)-\x00', 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000804000-0x18)={r0, &(0x7f00001f6000-0x5f)="7564e335baf136d0080f8ac22b14cd43e8b4c6ccbe5868a321a09eb7947eef6f2b55d35e541bdb91922b4d3d5ef3c761dee6257f3d6d1ba25dbd442d8356f44f51a6b7d3197637f110e49ffd5ec8ffeadaa6e3a63073f0b69a97418a73d6a6", &(0x7f0000610000-0xa4)=""/164}, 0x18) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f000015f000)={0x2, [0x3, 0x0]}, &(0x7f00003a4000)=0x8) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000498000)={&(0x7f0000c7f000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00008b8000-0x10)={&(0x7f0000921000-0x12b0)={0x2c, 0x5, 0x6, 0x800000001, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@typed={0x18, 0x1, @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:05 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 213.506887] binder: 1203:1205 ioctl c0306201 2000efd0 returned -11 [ 213.525715] binder_alloc: 1203: binder_alloc_buf, no vma [ 213.525741] binder: 1206:1211 transaction failed 29189/-3, size 0-0 line 2903 [ 213.541529] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.541620] binder: BINDER_SET_CONTEXT_MGR already set [ 213.541644] binder: 1203:1205 ioctl 40046207 0 returned -16 [ 213.576764] binder: 1203:1216 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 213.576776] binder: 1203:1216 BC_INCREFS_DONE u0000000000000000 no match [ 213.601301] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 213.604453] binder: 1221:1223 transaction failed 29189/-22, size 0-0 line 2788 [ 213.604652] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.624652] binder: 1221:1226 transaction failed 29189/-22, size 0-0 line 2788 [ 213.637915] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.650292] netlink: 'syz-executor1': attribute type 1 has an invalid length. [ 213.712545] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.725179] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000548000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$usbmon(&(0x7f000044a000)='/dev/usbmon#\x00', 0x100000000, 0x88880) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x4c, 0x0, &(0x7f0000452000-0x4c)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x10, &(0x7f0000b5a000)=[@ptr={0x70742a85, 0x0, &(0x7f000061d000)=0x0, 0x1, 0x0, 0x0}, @ptr={0x70742a85, 0x1, &(0x7f0000e97000-0x1)=0x0, 0x1, 0x0, 0x0}], &(0x7f0000788000-0x20)=[0x0, 0x28]}, 0x1000}}], 0x0, 0x0, &(0x7f0000f03000)=""}) 2018/01/26 10:31:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x1) r2 = syz_open_dev$sndmidi(&(0x7f0000f03000)='/dev/snd/midiC#D#\x00', 0x8, 0x202) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f000050d000-0x4)=0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:06 executing program 1: mmap(&(0x7f0000000000/0x1e000)=nil, 0x1e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000013000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006000)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_filter={0x4d, 0x1a, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f000001e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f000000f000-0x9)='/dev/dsp\x00', 0x200000, 0x0) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000020000-0xc)={0x3, r0, 0x0}) mmap(&(0x7f000001e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f000000c000)=0x0) ioprio_get$pid(0x1, r3) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40086410, &(0x7f0000019000)={0xa0, &(0x7f0000020000-0xa0)="e8fde20fa32774467f05e0986c8208730e320cfbbbd1b86c20ce31254412c1d96708901024e669de4842babdcee884c57a29c862bf961611fc13e18315c7c54bfdd69e312b40b80c33afe979d6d48e91f2fed9393777781d1a1f5f857d360454e3482963c3586d0034fb630abf255cd05822f4bca5c171efb94c00a24aecaf3e3b154cea936cc08d318cac875151c4270f00e500f2eb8bb1356401b0d4686a74"}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f000001f000-0xc)={@empty=0x0, @broadcast=0x0, 0x0}, &(0x7f000001f000-0x4)=0xc) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000020000-0xc)={0x0, 0x58, &(0x7f0000019000-0x58)=[@in={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x200, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7}, @in={0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x4, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x3}]}, &(0x7f000000a000)=0xc) mmap(&(0x7f000001f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f000001f000)={r4, 0x40, 0x1, 0x6, 0x10, 0x5}, 0x14) 2018/01/26 10:31:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) connect$inet(r0, &(0x7f0000736000)={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f00002f7000/0x4000)=nil, 0x4000, 0x200000a, 0x1010, r0, 0x0) r3 = accept4$packet(0xffffffffffffff9c, &(0x7f00006ce000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000b19000-0x4)=0x14, 0x800) setsockopt$packet_buf(r3, 0x107, 0x2173ed74644994c2, &(0x7f0000171000)="7399e5337ff535a11630fc9c1f013f42781437a45eb4351f55f24febee9da56b6905706378f3ed27de692333ff9503f52b3fcb0cc6fd31c25ac79250d26f36f23167940e6613276dbfe8c0516492e6675502469dcc2d8a71a1eff1ebf615dcb35504c0b5cf9ae39580f0c55c9960a4c1d5f826fae248ff743820d05b53d2fccc3984", 0x82) r4 = getpid() r5 = syz_open_dev$admmidi(&(0x7f0000873000-0xe)='/dev/admmidi#\x00', 0x400, 0x490008) kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, r1, &(0x7f00009bd000-0xc)={r5, r1, 0x800000000000000}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, r2, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r6, 0x0, 0x61, &(0x7f0000001000-0x1e)=""/30, &(0x7f0000000000)=0x3a6) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00001c1000)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$EVIOCGVERSION(r7, 0x80044501, &(0x7f000092e000-0x47)=""/71) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r8 = memfd_create(&(0x7f00005b4000-0x10)='/dev/sequencer2\x00', 0x1) ioctl$GIO_SCRNMAP(r8, 0x4b40, &(0x7f0000bf4000)=""/185) 2018/01/26 10:31:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000081000)='./file0\x00', 0x2140, 0x40) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:06 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) r0 = syz_open_dev$audion(&(0x7f0000d18000)='/dev/audio#\x00', 0x5, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 2018/01/26 10:31:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) readv(r0, &(0x7f000083b000-0x10)=[{&(0x7f0000ec9000-0xfd)=""/253, 0x1d0}, {&(0x7f00009b9000-0x16)=""/22, 0x16}], 0x2) 2018/01/26 10:31:06 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x40000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000912000-0x4)=@assoc_id=0x0, &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001000-0x8)={r1, 0xffffffffffffff99}, &(0x7f0000121000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f0000001000)=""/248, 0xf8) [ 213.813847] binder: 1231:1239 transaction failed 29189/-22, size 0-0 line 2788 [ 213.829731] binder: 1237:1242 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 213.829743] binder: 1237:1242 BC_INCREFS_DONE node 417 has no pending increfs request 2018/01/26 10:31:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000671000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb0d000)=nil, 0xb0d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000742000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000960000)={0x1, 0x0, [{0x202, 0x0, 0x202}]}) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) pwrite64(r3, &(0x7f00006b4000)="65a9c8ddd763a87b138c8f5661a732048d8a4c1d494a33c3bed86e2e098e199a51c403d961d6dce232c597fd9e153077d09580a7d4acda6a21033c4ff0fe3690e5e44f0afa45a62e8598dbc3d095ded7b18d1fbea28fe24dca7d72a905825bca6e9a0a8fb0134f8dff6625cbbca71e1f6d7b9ae8d83e01f00a7249ba07bb5bbc7ca276f25207146213ab5ad791b52f29b059566770888cdce2", 0x99, 0x13) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) syz_open_dev$mice(&(0x7f0000372000-0x10)='/dev/input/mice\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0xd55, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f0000de0000)='/dev/audio#\x00', 0x7, 0x800) bind$rds(r1, &(0x7f000037d000)={0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x14}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x1) readv(r2, &(0x7f0000dc0000)=[{&(0x7f000094a000)=""/4096, 0x1000}], 0x1) vmsplice(r2, &(0x7f0000bbb000-0x80)=[{&(0x7f0000423000)="bd", 0x1}], 0x1, 0x0) writev(r3, &(0x7f000000b000)=[{&(0x7f0000c03000-0x106a)="2c267e242481c30c666d158d944f0d89d0b24c02deea35d5f9772f8dae1cd41446cde1fbd5331eb8ac66abe4cabe3d1e42910a6a97054224ebde680a2c55c3eb196263fff503b9a83e01ec52bb3c81701958db38fabf47e496cf0a9432989b7476733757dc1062021181e6ac4f656a7b7be4ace9d1d96fb9cf322fa1916986285493f75f8787212d0ccbd4c3fa28fda762b68fbf35cc9e334d419c9d9fab1b0a5fd501e429ef862e908502d31b442c89b8e728b222c35ef07ca658b0c27225da062e195f29b1b2ba25d4099813dcd2f613c79466432b6c36fa3b2e7822aa51458c4d5cea7abdba8e2f129daff37f27487e477a5c5ba0f214c0ba7845e146c8689525e3a923e35014b6ddb9b85e35ad7590abaf67c006c4b1feb963d9eab378801359edbcdd410f113b39b11b5f7a420a080df102df54c169372e0e045640619942d91cf198369418515e484ee19965db6d9ff1b76561d8b60216afb1b236d5b56cbdfe8a3166c2cb934bd953d7d4989e899f871d0892bc9cebe86962d59c65881ebf3edcfb52180ff5795d2b5abefefbc7d122a20dc5b32465da34213a0c623d7a9b2f3339fa63ddc561a45ac96a68c4f21423a05ea2235b6df0ed19019d07d9b0e9cda2f58709b494a46ebe64722863d67a846b829f3e3ce4c9f0ce5a37d93fb1d07a420bde1c678ab8ad546c5a1f295baf92e543c4da2dabfb9b15b89e2875c06d7dfcb2994a68fefbdfa07991c1222403482c5b09928214d1d4369ab817d15838538566a0176cc12e72bdac913ea4ad953e4ef72e338c9abb074e45389d831d29eb0c2147ccf7cd404c7c71e77fa9e44a1dcd4bb893211bfd9a2c25214e9202ebc41539286e3f2417a34400bfbfa668b8c0dc75673bbb42c3d88870ace8de6b6b9b5d51264a690396cc342012bba7192829d5e13d7603ed5e8489811daa185e2ad017a5c66df226512cef5ebc7d7b9556d42af281defaadcff6d6f264dedf38296b00b0c1a534dc539c3c7f6b1882be5cd29f7c6541d9efc446ff28ea9a7cf7ced90bf2a3cd4b08b98debf758df3bf64090af0fa91269a827554d0088657fff5d93bcd5c9f26ab2aeceb659e427e05ce81fa0bf118ac60e56aca2129e6bc8513e6372de0ec4b7561d69e7126daf2a98ed9f96b0d3d611a8f0a69468fed7caf20980b80cb2bd629e376aface6d811ccb978546ac135b8cb146862ec33a4f14cec8f340b09bcc49fed4b5f861d397de3eb153841bfeda6cf888f18df77940d2ff55759d1e7c7976f5f4de3803b3b6f1eb5d6e7bb1138f8198119a237482acfe813619c20b7656c76236ad6622e6f917b74fe13679677d7008d603de253372e93994e10590b44c71468723cdaa8a0368c04773926d5d901d46b671d9e5f43641fd39cef19474375343f0a0be26e5614d1970e7d1a6c832253cdbc7f859955ad62674c9a97287d7cb4d811fb7694d579322fdf25ff824605aa0c8cf5460bed8ca2a8b1527c9c51f6b7c1510143b024142d6a9e5111c4aa98147ecc41febad60fb132faa75cc3b61ca564412ef8827327a85efc37ce6df695d394c2399f6e24189499438e0f77b598891e6ffbf855d741817f44f4a431ee11ad30a50b178a5ef179137ba24336b9b9a6a459d1f361eed683da46ccc51081331fc422471a136d31ad7698fc27d0a5cc2e48d0c0af32c91489e03647a9e9771c4fc62d3877079fb037b641a5fe7bda287ab1a049ee5dadaa2f971566dcb708e351e0f937993696fd31a1d999addd76127e97ad684948d0d5e6bd21b0b68986295d7cc71be683e448b1e3016ae3e98ee83512c398376d52bb0ab50674a886d34a7c123748396498581ff22aeb3052d01b3f6dc473b6ce27d359dc9077a68a2abe4b17c3dfbaeb7f90f1be19c89de6753620f33e31cfe27a3a18b333e548836e38920a3459b5407268f0d41c58c6f5091172cf0a508c1d73f2aa9e953496bbe8ab03533f89e2b4dafb37b89d25e0efb75ff84bb1cbd60a33dddb627e88efb44138b40ffad9bf70111f7e8f6b01e89b3a74b9cf71191f2bd026ba01e16a21d0abca2491351475a08fb593cdfb40047e896457af4c3a61f4fb7ad570080193954b62a7839127ddfb8d93018978fd3e642658213571246308454cc4195cead295f6f72c10def5930930e44782edd916230fa99423def58b780f6936d55aa952baea0c58630526df65f0ebf91b0e01c97f9b3bbca8fceff87ffc945c972b51b11954a476967b52c2fa3247a6e6bba9cef9ff5efd4523a64e11005128003b34251108d8f3dd62c3db158fec915546db1db5f02300b3f5baee8ac9a498d00a1bdb1cfab31dffc4506c799a269b6be101c0e8a2907c5464733a06d8f855c619befa9b77cbceb48da086ac09e510c609cb5c95d0f69d053ef35c32a7b96e6ab7297fdf211e198bf90087433474bffd8fe0d1e77934d8848d2d6a5ce21124e8c2af71e28026950caa63c4b0f6648e41225b384d5ee21701659489ccc2017d48463e0dcf97361c538c8b47d049f2b36d0584cb786215400ce18e285c1dbad47dda87c28d3f5f7fb15c560d1b28472f787b4915300364ce08acf3747d0020731e81dac8c252ed2cb5e096268f6d3e363620d92f272bd34c240eb4aba3d01904d897723345234ccbc4610a3a2259b244397b1f1db4094dfbc765aa212dd09a9197c9ff51e0f07c3547fc3f2f86e2d996b3bb4a6ebb282a10e2738b1e945ce3f33bd3979bfba6edb830341f6eb997cab67f9eb7a57fc1a8bf0ce64d9300e622a144bb424ecace72f0d16ef443de9ba89d8ac38e2e88f0a3ed23ec851dfb45df034532169cca827c88081e7fd2354819d9c20ea39f2932787246d8806e089ec1c70cca020f898602f211eb2504aadc3090d85a3ec9483451058d6caba71806f3f494d73755774296a67511572eb801b188dfbddf065be196febbfbce5af895fdc7278a1ede609f9af86f208aeef20001a9fc0bc04eef1a84229dda539e6bcc31479321036f162e57f41b1991cddc88179be2b1ada532eeb770aab9ec82399b80879ed2cdda07b061b0f0ee35002209d9b5afa9836efd2cad153227f4af2c1b4f60c21573c35faec09c45467540dbf3cabee5a2918b4a9432ebe672306f1acfdae1a3c3d8be48c58621c0b16312ed7777f81fc9084eeddf26e68c5d7f0d83347897a69e9b293c1e93b17448fea811d13af456f30f4f5b0ed0ec8b5876ab2dadeff381093f16f5013cfff76f2c77fdaf87d0d82697e070131831054757ac544aab5801ca1dfa665ded0e9de3eedb8cb6f17485a92eceac1b2b33927bb410c9369a4b7f3fc186828693a92fc07f415d244ee972b25c2d42b69c5e03ba57a1037d59f02a098fe62536e7af192233d86e8fae5d17fc7bd13b6e54d59941edeb975c85667a743ad4825e68cd00c707ba80bb0902d7f7fabd7c8e6a6df462b210528ce8378a6255c1da496305c84e741c5a5175919b44938f969bc2cf50e0ea4569e0dc523118e7b4d8165893f610a49a215f0945f0c177d1fc348cfbdbe1ef33bd8f1f41f761b9f8bb23172315bbd451d729f823d20559b3535d01173c92dd4b8c151d1e9be2eeb62d133f050bea021e75e41d8eab2678f0bfb40e134d8a60029a9ee4332316e1665360f477255915f344e1c56ed620431e9e4371c983abef24ba800c239b2273b14b342339a374a0fc3aa30898ef0e69040ef4dd6c298dc90e03242118eb824bd23044c87783085533e19445b43ef341c4372ac4545ac03a3adc532475947d63ce67e1e3763cc7f9ff9d103c434570c02c7b811a648b5bbfadb847d29311b6589a4864fd8af8e354b221fc78e407c95160460cd74d5966ba405da1f496950a6ac1e79ab6dc511ecd726d05d38e0fd65bd66c58c11280785a302aa00ddc03cad93833bd357b30ec13e91d632ec8d5565ed6a5d0554f17b4d7efa147fc0d9035d8a96213e9465da1d3b94f56d3f2b12d7e394a5fff25873c591cee50c5c14273d4b1c645d5ded4a0ad5d8a1296f40c2b65cf457a5780c4a4569927bd896c0d71498f2d31f4f61282540105f5845326aa61ceb01c10be922a2fdeaa1a9689922e255e053be4c4cb45f5c6bd8af4f93f8362bbf54875ddbedab4b97e8cec478e4ceda8121439523839abb6e1cdc7ba2eb34c1fe9931585e1e0d8c326276bab83170752a30f2a3a250aad1cc1f72155457dd3ab40e4c2f1454084683f8bfc92fd87af76a73dbbf06f8d4f18dffbff0c8310eb96303c60401e4efa54def27c4e023aaaee24d525d1d98822eaeb33bbc5d40e8845b6ae1b29ede30c6675f5aab93b2b28391008e62d9d9bd1224116d9874233c57f3524e34a2737f74daa1bb9051ba8e2564fa2f3e5462bd67a7be796c682ba55d0f64331b1c0c3e45aec99548e65b61420f25cad6d3ca9063db31fe16b7157249cdc2e592188efddd0161314104615509ee1ff212c98a448a5b2b7a931b01b1ed502135f324f3b58906591ce181010e9c62ce9cfab26d4ddf9ab43fbc277d15b8bfb93edbcfe276e5646fde162dc926487440cdcc90a92ed03662ec04ab9ec1b1647707b43c7fe18a030e3001cd7915013e0196c4609aa8475fc85302b963f4be6a16b8206b099c81b6bf4619389f6df538813a2ad08183e97750b35b1ced267166f4f39b13d9925db22bdc6dd7c3ca8d0aab439040d42952e62eee9a2728c9b7e45f7463f8447ec2ec435bd7e91bd05ad09ec013468f4ba54437da9b8db677f4eaf10c5746da05bf12359b3aa915be2999e2bce629dd4ad01ce0b6229e4b49cca0157abb5221488a785af2d71a149f096b0c564a6d36ca92d36ea15c54dc44eaafed114a858f1c126f68888eba594dcd52ae7f233e2ec88d2a2fc95da3385e02f30746a844f8d6e05b724aff933c15088cde099f04f4228745bdb51180d4e6114a364cb6ef32a71872dfcb86278df4a20423c354699cdb4c63b35dc4fa04a5d456c65e72b20be53f302e8ccbe6873e76e0adabdca405c50a9d933be9046c616c8e6ada9949de0db64bed0b6c8c8d6250a2589896ebbdaa5e7d254130c4b5fd7e9b57da57e5491aad4aa5f81d73a220332abf1e7a5ccc360bc1ac342408f8d5335e97a3c2f8353498946bfbbabf386459423c4e2af0c908b4724df1f97b92991a937a955ac45aa3b130768c49d550cfdacd2e7753950f336d9ce6f367fb566c935bb940f9beedaaa4348efff216e201a9e5de2c65ac43f6c3d0e8d5f0b960b65c3285c99b2f7d747657bf77afb9057a6d28bede1a72d45cb2125a8902150685e3ca7171212e01d224e876feb972d5ded4313c48164034bc0244ec73e687d87b44c33a16e8471e25e1a58094dfc509a007a3f2c010dfffeb80f36febb448fc40fe301e897bbe1aeb2a7a7ca968b22bb5d5ad5b366a4377ae441937f2b60a4e3ec6c8a90dd415cc47ae6dad270eaadab63c7f321b3af28d9079759da8b18167608a4ae2e08a84f84eeccb08c56cc476ed0db598c174437c1eace848c717a7e5aaca4e35d861038326bae04ebac9bc451fa4c5d60bd52eeeac89e01e11b3719f07b33a4192709713d120b0f7bddd82cbb13c321ccd87880993eedb0e2a8ca88dd7ec9af1367240b20209f96c237e067889503fee6bf3787a4d90570de215fb02d11a82a379303bbb5ed40d0432a317b50ff1ef21bcdf57f894a6938ad35396b6bf8dc24287cea55c472b6bcd7a2e3fd4a6cdf3435e54170fac4f116fdd3817240c940fea9b0509b5e047f23e6f7ef05d04ccdd39bd8d70e1a130e72fdf6c1e", 0x1001}], 0x1) [ 213.829757] binder: 1237:1242 ioctl c0306201 2000efd0 returned -11 [ 213.835941] binder: BINDER_SET_CONTEXT_MGR already set [ 213.835959] binder: 1237:1247 ioctl 40046207 0 returned -16 [ 213.838883] binder: 1236:1241 got transaction to invalid handle [ 213.838892] binder: 1236:1241 transaction failed 29201/-22, size 0-0 line 2788 [ 213.841936] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.847153] binder: 1237:1247 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 213.847163] binder: 1237:1247 BC_INCREFS_DONE u0000000000000000 no match [ 213.890274] binder: 1236:1252 got transaction to invalid handle [ 213.890284] binder: 1236:1252 transaction failed 29201/-22, size 0-0 line 2788 [ 213.892640] binder: BINDER_SET_CONTEXT_MGR already set [ 213.892649] binder: 1253:1254 ioctl 40046207 0 returned -16 [ 213.901104] binder_alloc: 1257: binder_alloc_buf, no vma [ 213.901127] binder: 1231:1251 transaction failed 29189/-3, size 0-0 line 2903 [ 213.904131] binder_alloc: 1257: binder_alloc_buf, no vma [ 213.904154] binder: 1253:1254 transaction failed 29189/-3, size 80-16 line 2903 [ 213.906903] binder_alloc: binder_alloc_mmap_handler: 1253 20000000-20002000 already mapped failed -16 [ 213.908237] binder: BINDER_SET_CONTEXT_MGR already set [ 213.908245] binder: 1253:1254 ioctl 40046207 0 returned -16 [ 213.918364] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.929956] binder: 1257:1259 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 213.929969] binder: 1257:1259 BC_INCREFS_DONE node 420 has no pending increfs request [ 213.929984] binder: 1257:1259 ioctl c0306201 2000efd0 returned -11 [ 213.939767] binder: undelivered TRANSACTION_ERROR: 29189 [ 213.942391] binder: BINDER_SET_CONTEXT_MGR already set [ 213.942404] binder: 1257:1264 ioctl 40046207 0 returned -16 2018/01/26 10:31:06 executing program 7: r0 = syz_open_dev$sndpcmc(&(0x7f000045f000)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x6100) ioctl$sock_proto_private(r0, 0x89e9, &(0x7f00004d7000-0x46)="82df8a5334bbdf625252f783d9ae02719589b3ceb38e90b508ac46ee7816a5679947d13336cd494d298967c1269f88935ea6f2428c83910a127acf008900f910eb7569b9ad5e") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000001000-0x8)=0x3) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00005c4000-0x10)={0x0, 0x0, &(0x7f000051a000-0x58)=[]}, &(0x7f0000f92000-0x4)=0xfffffffffffffd2f) bpf$PROG_LOAD(0x5, &(0x7f00001a3000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@alu={0x1, 0x0, 0x6, 0x0, 0x1, 0x20, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f000073f000-0xa)="73597a6b618f6c65000d", 0x8000, 0x1000, &(0x7f0000b6d000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) 2018/01/26 10:31:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000157000-0x11)='/dev/vga_arbiter\x00', 0x131002, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f00005da000)={0x38b, 0xef}) 2018/01/26 10:31:06 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000027e000-0xa)='schedstat\x00') clock_getres(0x1, &(0x7f000011a000-0x8)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000720000)=""/96, 0x60, 0x0, &(0x7f0000010000-0x8)={0x77359400, r1}) mknod$loop(&(0x7f0000a83000-0x8)='./file0\x00', 0x1, 0x1) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000866000)={0x9, 0x0, [{0x4000000f, 0x4, 0x7, 0x5c74, 0x3, 0x6fdddb1f, 0x7, [0x0, 0x0, 0x0]}, {0xd, 0x5, 0x0, 0x6, 0x4f, 0x4, 0x7, [0x0, 0x0, 0x0]}, {0x80000007, 0xfff, 0x3, 0x6, 0x80, 0x5, 0x0, [0x0, 0x0, 0x0]}, {0x4000000f, 0x0, 0x2, 0x7ff, 0x8, 0x7, 0x81, [0x0, 0x0, 0x0]}, {0x40000001, 0x5, 0x1, 0xfffffffffffffffb, 0x8, 0x401, 0x7ff, [0x0, 0x0, 0x0]}, {0x40000000, 0x6, 0x0, 0x8, 0x4, 0x8000, 0x40, [0x0, 0x0, 0x0]}, {0xc000001f, 0xa6, 0x1, 0x7fff, 0x7, 0x3f, 0xda, [0x0, 0x0, 0x0]}, {0xd, 0x2, 0x2, 0x9, 0x5, 0x7, 0x8ea, [0x0, 0x0, 0x0]}, {0x2, 0x8, 0x1, 0x8, 0x2, 0xff, 0x200, [0x0, 0x0, 0x0]}]}) get_thread_area(&(0x7f00002fe000)={0x1, 0xffffffff, 0x4000, 0x9, 0x5, 0x431, 0x4, 0xdbf, 0x2, 0x4d6e}) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000a76000)={@loopback={0x0, 0x0}, 0x0}, &(0x7f00000d3000)=0x14) recvmsg$netrom(r0, &(0x7f0000c94000)={&(0x7f00002af000)=@full={{0x3, {"32d47540425bdc"}, 0x10001}, [{"84a309745f08bf"}, {"6d6fa4dae7c94f"}, {"bf27b0dca70619"}, {"f568db80d35150"}, {"3e4a36cc478f78"}, {"62d3ef26cd7067"}, {"315f1f99aeebb1"}, {"8f58d14b89fb8b"}]}, 0x48, &(0x7f00001c7000-0x38)=[{&(0x7f000065d000)="d73a3d1095282759c1426c9880895bd9ae93570ce16abf604e2312878ade58a5ac4e5ec6e0b3627d87d5c464155f78aa0a8f8b33568b9b4698638eff4f3ff110ebc9d5749baebd179e3151cc35d2fa51b4defad7811958aef5361afcabcf8ca02fe2cd99374379ed7abc7900c6c51b88b1380a9cccdd9f23814659cf0f34359d2d2859c1cb493856d7b0c88acd3ed51d03b44d1802e92c06bb47a6be73923d70e0725e2428a663253e77d4e150ea606d6d0777894d5d21c3cd7cea040fd1", 0xbe}, {&(0x7f000011b000-0x15)="a61ae8e92c891d1abfb364e3a19ebb15aff333950d", 0x15}, {&(0x7f0000ace000)="0d9aa943999c26dd692b7effa4cbff317681cbaf9b34abd16921345f0bd99f59e981fb2889970c6393ee76968ec483e19a68e588a7896807302faf57f94c55dd694b10305ea881282a765858c3089e25bd134383b8267dd1b5ee70dde4f8b60cff5c31e7ce15cf9f5f4e619cdb174be0e9502a6cc2225fae68f772f32c64489bacf214748993f87f1272d3772e90b175b60dcffec7298a91c33c0774d77bfb4f326e166d40246b96fc4315f6371793ea702d53eafed6598b634c3acbb45b0d48081510eba5", 0xc5}, {&(0x7f00009ec000-0xc6)="38975fefedc3ef547f8ff8c20e9899a31e033acf5dbda3e2e8f7ddf8945659513aa27c1f60a0b78d2a926f33c080f498e228f04c79e2317b24c606edbf0937ff65e0700c89b26a06fd0b48776dc7652ae23832d69f7572b8dca7f088e85d37cb824599455d43635de103e8ec7c59d10293517e58139e1d64270c3883316f203a6f294c6127d5b0ba9c7dfaace6cb5ef6bee8d08994ba8891026a50288eeee4ee1fcffd7da6a2be1063a07626e71b295adac2b138d9ce9fc18a687c574b8608293ade8baceea4", 0xc6}, {&(0x7f00000cf000)="fdb8df6095e5feb86f091a635b2dc5a8dded0f4b12ccd8eddb74f93cfea2a097b006dc94a7a4f6875785fa5cf6295e998516a3017d8c98ea2e0799bdf30ac22621e75ab7fd52940abe79631f374c2830058785145f970300947945551bf393aad5337adb9793718b53953d", 0x6b}, {&(0x7f0000da9000)="", 0x0}, {&(0x7f000028d000-0xaa)="b2be8b4fff352f71de09d7eb0ff2470c9ee49fc6224b785c2f701ed0eca4a2b61983c000e2e0bf54303de60a2105476c49a91742c3664bf6a902d565855a20ad1031bdf63fbc203dbb2bb6c67cfe0818e4fd26356f5afd3619208950f7dcf662b3d0bb0a3b54409e9efbfaf810184e2ba89dd79024b939ed38828a7a09a0f16886341a7336844931f1e55f7bb6b781332be08a57ef858ce3140193282e38b959ee9ddd2c1d5ee6145442", 0xaa}], 0x7, 0x0, 0x0, 0x0}, 0x10000) sendmsg$nl_route(r0, &(0x7f0000f4c000-0x1c)={&(0x7f0000108000-0xc)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00001d4000-0x8)={&(0x7f00005e3000)=@newlink={0x48, 0x10, 0x320, 0x1, 0x1, {0x0, 0x0, 0x0, r2, 0x1000, 0x4000}, [@IFLA_PROTO_DOWN={0x8, 0x27, 0xfffffffffffff801}, @IFLA_IF_NETNSID={0x8, 0x2e, 0x80}, @IFLA_LINKMODE={0x8, 0x11, 0x200}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_OPERSTATE={0x8, 0x10, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x890}, 0x48010) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000038000)="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") 2018/01/26 10:31:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000b26000-0x4)={0xff}, 0x4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000e17000-0x11)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) write$selinux_user(r1, &(0x7f0000a54000-0x32)={'system_u:object_r:usbtty_device_t:s0', 0x20, 'unconfined_u\x00'}, 0x32) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x2, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000179000)={0x1, 'c'}, 0x2) 2018/01/26 10:31:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00004f0000-0x8)=0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = fcntl$dupfd(r1, 0x406, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00002d1000)={{{@in=@loopback=0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @local={0x0, 0x0, 0xffffffffffffffff, 0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @dev={0x0, 0x0, 0xffffffffffffffff, 0x0}}, 0xffffffffffffffff, 0x0}, 0x0, @in=@broadcast=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00005ef000-0x4)=0xe8) bind$can_raw(r2, &(0x7f00001d2000-0x10)={0x1d, r3, 0x0, 0x0}, 0x10) 2018/01/26 10:31:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000f41000-0xd)='/dev/binder#\x00', 0x0, 0x2) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:06 executing program 2: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) r1 = dup2(r0, r0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013000)=0xffffffffffffffbd, 0x4) r3 = dup2(r2, r2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000001000-0x10)={0x101, 0xcb, 0x7, 0x80}) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000001000-0xf0)=""/240, &(0x7f0000002000)=0xf0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000004000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000004000)=0x8) mmap(&(0x7f0000000000/0x22000)=nil, 0x22000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000022000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, &(0x7f0000023000-0xf6)=""/246) close(r1) [ 213.963354] binder: 1257:1264 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 213.963365] binder: 1257:1264 BC_INCREFS_DONE u0000000000000000 no match [ 214.080450] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.085975] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) 2018/01/26 10:31:06 executing program 7: syslog(0x0, &(0x7f0000001000-0xf8)=""/248, 0x69) 2018/01/26 10:31:06 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000001000-0xb)='/dev/hwrng\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000313000-0x8)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000002c000)='./file0\x00', &(0x7f000002d000-0x6)='ramfs\x00', 0x0, &(0x7f000000a000)="") creat(&(0x7f0000f67000-0xc)='./file0/bus\x00', 0x0) truncate(&(0x7f0000308000)='./file0/bus\x00', 0x2794) r0 = open$dir(&(0x7f00004ba000-0xc)='./file0/bus\x00', 0x0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x1, 0x100000000a012, r0, 0x0) listxattr(&(0x7f00004d6000-0x8)='./file0\x00', &(0x7f0000d22000-0xb6)=""/182, 0xb6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 214.118511] binder: 1271:1273 transaction failed 29189/-22, size 0-0 line 2788 [ 214.121818] binder: 1270:1279 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:06 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000001000-0x5)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000860000)='eth0\x00') close(r0) clock_gettime(0x0, &(0x7f0000a0f000)={0x0, 0x0}) nanosleep(&(0x7f000060e000)={r1, r2+30000000}, 0x0) syslog(0x5, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000013000-0x6)={0x2, 0x80000001, 0xa4}) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00008dd000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000028e000-0xd)='/dev/binder#\x00', 0x0, 0x1fffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00005af000-0x30)={0xffffffffffffff8a, 0x0, &(0x7f0000006000-0x2c)=[], 0xffffffffffffff6b, 0x0, &(0x7f0000946000-0x1)="a9"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 214.121894] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.126967] binder: 1270:1280 transaction failed 29189/-22, size 0-0 line 2788 [ 214.142142] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.150493] binder: 1272:1277 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f000050c000)={0x10, 0x0, 0x0, 0x0}, 0xfffffffffffffdd4, &(0x7f0000016000-0x10)={&(0x7f0000d36000)={0x14, 0x0, 0x0, 0x4, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0xffffffffffffff3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 214.150505] binder: 1272:1277 BC_INCREFS_DONE node 426 has no pending increfs request [ 214.150520] binder: 1272:1277 ioctl c0306201 2000efd0 returned -11 [ 214.156710] binder_alloc: 1272: binder_alloc_buf, no vma [ 214.156732] binder: 1288:1290 transaction failed 29189/-3, size 0-0 line 2903 [ 214.156820] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.160132] binder: BINDER_SET_CONTEXT_MGR already set [ 214.160154] binder: 1272:1291 ioctl 40046207 0 returned -16 [ 214.166502] binder_alloc: 1272: binder_alloc_buf, no vma [ 214.166527] binder: 1288:1293 transaction failed 29189/-3, size 0-0 line 2903 [ 214.174612] binder: 1272:1291 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 214.174622] binder: 1272:1291 BC_INCREFS_DONE u0000000000000000 no match [ 214.183973] binder: 1271:1287 transaction failed 29189/-22, size 0-0 line 2788 [ 214.194953] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.200336] audit: type=1400 audit(1516962666.565:266): avc: denied { map } for pid=1295 comm="syz-executor1" path="/1241/file0/bus" dev="ramfs" ino=82455 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 [ 214.217000] binder: 1299:1303 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 214.217054] binder: 1299:1303 BC_INCREFS_DONE node 430 has no pending increfs request [ 214.217071] binder: 1299:1303 ioctl c0306201 2000efd0 returned -11 [ 214.226900] binder: BINDER_SET_CONTEXT_MGR already set [ 214.226919] binder: 1299:1307 ioctl 40046207 0 returned -16 [ 214.237403] binder: 1299:1307 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 214.237415] binder: 1299:1307 BC_INCREFS_DONE u0000000000000000 no match [ 214.272982] binder: 1312:1315 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 214.272993] binder: 1312:1315 BC_INCREFS_DONE node 431 has no pending increfs request 2018/01/26 10:31:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000a9b000-0x8)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00005e8000-0x15)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f000088e000)=0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KDENABIO(r2, 0x4b36) ioctl$TUNSETNOCSUM(r1, 0x400454c8, &(0x7f000012f000-0x4)=0x6fdf4f2a) setxattr(&(0x7f0000543000-0x8)='./file0\x00', &(0x7f00000ae000)=@known='com.apple.system.Security\x00', &(0x7f000018f000)='/proc/self/net/pfkey\x00', 0x15, 0x1) 2018/01/26 10:31:06 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00006d4000)='/dev/vcs\x00', 0x400200, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00009ab000-0x4)=0x3, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000fc8000-0x9)='/dev/rtc\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000001000-0x8)={0x0, 0x0}, &(0x7f0000001000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={r2, 0x0}, &(0x7f000005a000)=0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000988000)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000a08000-0x4)=0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000dd7000-0x9)='/dev/kvm\x00', 0x400004, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) tgkill(r5, 0x0, 0x21) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000000)={0x0, 0x13ffd, 0x0}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0e05403, &(0x7f0000311000)={{0xffffffffffffffff, 0x3, 0xef, 0x2, 0x9}, 0x4, 0x400, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x80, 0x0, 0x7e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000862000-0xc)={0x0, 0x0, 0x0}, &(0x7f00000c9000-0x4)=0xc) dup2(r6, r3) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r6, 0xaeb7) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000ec7000-0x4)=0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000860000-0x9)='/dev/rtc\x00', 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/01/26 10:31:06 executing program 1: mmap(&(0x7f0000000000/0x70000)=nil, 0x70000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = epoll_create1(0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x8001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f000000f000-0xc)={0x0, 0x0}) epoll_wait(r1, &(0x7f000000b000-0x5)=[{0x0, 0x0}], 0x1, 0xfffffffffffffef7) shutdown(r0, 0x1) poll(&(0x7f000006e000)=[{r1, 0x0, 0x0}, {r0, 0x0, 0x0}], 0x2, 0x400) shutdown(r0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f000001b000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f000005a000)={0xfffffffffffffff7, 0xffffffffffffff9f, 0x8, 0x2, 0x4, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 10:31:06 executing program 5: mmap(&(0x7f0000000000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000025000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000026000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000026000)='/dev/hwrng\x00', 0x8000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f000001e000-0x3c)={@pptp={0x18, 0x2, {0x2, @remote={0xac, 0x14, 0x0, 0xbb}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {&(0x7f0000015000-0xd3)=""/211, 0xd3}, &(0x7f0000019000)=0x0, 0x8}, 0x3c) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000025000)='/dev/cuse\x00', 0x80000, 0x0) mmap(&(0x7f0000026000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000026000)=""/133, &(0x7f000000d000-0x4)=0x85) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000009000)={0x0, 0x0}) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000024000-0x20)={0x3001, 0xf000, 0x401, 0x7fffffff800000, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_generic(r0, &(0x7f0000003000)={&(0x7f0000015000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000012000-0x10)={&(0x7f0000010000)={0xffffffffffffffe1, 0x1b, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x20001, 0x0, 0x0}, [@nested={0x4, 0x99, []}]}, 0x18}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) get_robust_list(0x0, &(0x7f000091f000)=&(0x7f0000d28000-0xc)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f00002b8000-0x4)=0xc) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:06 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x400, 0x10) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000001000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000613000-0x8)={r1, 0x0}) 2018/01/26 10:31:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000312000-0x16)='/selinux/checkreqprot\x00', 0x200000, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f000097c000)=@req={0x3, 0x8, 0x88, 0x1}, 0x10) getsockopt$inet_buf(r1, 0x0, 0x2b, &(0x7f00004fd000-0xf9)=""/249, &(0x7f000026b000)=0xf9) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000806000)='./file0\x00', 0xfffffffffffffffc, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 214.273052] binder: 1312:1315 ioctl c0306201 2000efd0 returned -11 [ 214.277606] binder: BINDER_SET_CONTEXT_MGR already set [ 214.277641] binder: 1312:1317 ioctl 40046207 0 returned -16 [ 214.291383] binder: 1312:1315 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 214.291393] binder: 1312:1315 BC_INCREFS_DONE u0000000000000000 no match [ 214.452301] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.461484] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000070000-0xd)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:06 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000486000-0x8)=0x3) close(r0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0186416, &(0x7f000062f000-0x18)={0xfffffffffffff001, 0x200, 0x80000000, 0x3f, 0x0, 0x401}) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f000085d000)='/dev/autofs\x00', 0x20080, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000c0f000-0x4)=0x81, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = open(&(0x7f000052d000-0x8)='./file0\x00', 0x0, 0x2) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f000084c000)=""/30) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f000071f000)={{0x101, 0x100000001}, {0x9, 0x8}, 0x6b, 0x3, 0x5b, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) prctl$setmm(0x23, 0x7, &(0x7f00003a8000/0x2000)=nil) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000867000-0x8c)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) [ 214.480061] binder: 1325:1328 transaction failed 29189/-22, size 0-0 line 2788 [ 214.482105] binder: 1319:1326 transaction failed 29189/-22, size 0-0 line 2788 [ 214.482213] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:06 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) personality(0x4000009) r0 = syz_open_dev$audion(&(0x7f00004ca000)='/dev/audio#\x00', 0x9, 0x40200) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000c79000-0x43)=""/67) 2018/01/26 10:31:06 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)={&(0x7f0000001000-0x8)='./file0\x00', 0x0, 0x8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000bbd000)={0x0, 0x0}) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = dup(r0) stat(&(0x7f000038e000-0x8)='./file0\x00', &(0x7f0000e93000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000d57000-0x8a)={0x0, 0x82, "33fb4676863f20bf81cb023833614001ef9c06b246730a72ac225c875e52c6d1d35ba19b2accc8a45fa8a7ac226f4e68aeaa9fc8ba558b26b075027afef83918b646bb6e1d7e314429c59269b3f261568217ce8396822e13fe1d7e09d87a86e81e533348cdac6463065b7d996ce52be48be8a0888c7df3ad714488c83cf7f236b212"}, &(0x7f0000000000)=0x8a) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000000)={r2, @in={{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r3) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000eed000-0x8)={r2, 0x1}, 0x8) [ 214.489518] binder: 1329:1333 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 214.489528] binder: 1329:1333 BC_INCREFS_DONE node 434 has no pending increfs request [ 214.489543] binder: 1329:1333 ioctl c0306201 2000efd0 returned -11 2018/01/26 10:31:06 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) syz_open_dev$dmmidi(&(0x7f0000d3b000)='/dev/dmmidi#\x00', 0x5, 0xa2a00) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000c7c000-0x11)='/selinux/enforce\x00', 0x280000, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000519000-0x8b)=""/139) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00005c0000-0x12)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x80}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000762000)={0x3, 0x7, 0x0}) 2018/01/26 10:31:06 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000001000)='/dev/snd/seq\x00', 0x0, 0x1) syslog(0xf, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:06 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f00007f0000-0xc)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) mkdir(&(0x7f0000819000-0x8)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mlock2(&(0x7f0000e49000/0x2000)=nil, 0x2000, 0x1) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f000057f000-0x78)={0x7, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) r1 = openat(0xffffffffffffff9c, &(0x7f000060d000-0x8)='./file0\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x402, 0xffffffffffffffff) 2018/01/26 10:31:06 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$audion(&(0x7f0000555000)='/dev/audio#\x00', 0x7, 0x42000) bind$bt_l2cap(r1, &(0x7f0000c48000-0xe)={0x1f, 0x8000, {0x2, 0x200, 0x8, 0x9, 0x0, 0xffffffffffffffff}, 0x100, 0x3f}, 0xe) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:06 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0xfffffffffffffffd}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 214.493287] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.496567] binder: BINDER_SET_CONTEXT_MGR already set [ 214.496578] binder: 1329:1335 ioctl 40046207 0 returned -16 [ 214.505248] binder_alloc: 1329: binder_alloc_buf, no vma [ 214.505272] binder: 1325:1328 transaction failed 29189/-3, size 0-0 line 2903 [ 214.507186] binder_alloc: 1329: binder_alloc_buf, no vma [ 214.507209] binder: 1319:1326 transaction failed 29189/-3, size 0-0 line 2903 [ 214.508452] binder: 1329:1335 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 214.508463] binder: 1329:1335 BC_INCREFS_DONE u0000000000000000 no match [ 214.544361] binder: 1345:1347 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 214.544374] binder: 1345:1347 BC_INCREFS_DONE node 437 has no pending increfs request [ 214.544390] binder: 1345:1347 ioctl c0306201 2000efd0 returned -11 [ 214.548526] binder_alloc: 1329: binder_alloc_buf, no vma [ 214.548548] binder: 1343:1349 transaction failed 29189/-3, size 0-0 line 2903 [ 214.548685] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.556396] binder: BINDER_SET_CONTEXT_MGR already set [ 214.556416] binder: 1345:1351 ioctl 40046207 0 returned -16 [ 214.560847] binder_alloc: 1329: binder_alloc_buf, no vma [ 214.560872] binder: 1348:1350 transaction failed 29189/-3, size 0-0 line 2903 [ 214.561822] binder: 1348:1350 ioctl c0505350 2071f000 returned -22 [ 214.561877] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.561979] binder: 1348:1350 ioctl 4c03 20866f74 returned -22 [ 214.568441] binder: 1345:1347 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 214.568450] binder: 1345:1347 BC_INCREFS_DONE u0000000000000000 no match [ 214.594388] binder_alloc: 1329: binder_alloc_buf, no vma [ 214.594413] binder: 1348:1355 transaction failed 29189/-3, size 0-0 line 2903 [ 214.610936] binder: 1348:1350 ioctl c0505350 2071f000 returned -22 [ 214.611163] binder: 1348:1350 ioctl 4c03 20866f74 returned -22 [ 214.618787] binder: BINDER_SET_CONTEXT_MGR already set [ 214.618796] binder: 1361:1363 ioctl 40046207 0 returned -16 [ 214.622605] binder_alloc: 1329: binder_alloc_buf, no vma [ 214.622684] binder: 1356:1359 transaction failed 29189/-3, size 0-0 line 2903 [ 214.625768] binder: 1361:1363 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 214.625777] binder: 1361:1363 BC_INCREFS_DONE u0000000000000000 no match [ 214.625788] binder: 1361:1363 ioctl c0306201 2000efd0 returned -11 [ 214.642309] audit: type=1326 audit(1516962667.007:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=1367 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5c79 code=0x7ffc0000 [ 214.644734] audit: type=1326 audit(1516962667.010:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=1367 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf7fe5c79 code=0x7ffc0000 [ 214.645352] audit: type=1326 audit(1516962667.010:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=1367 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5c79 code=0x7ffc0000 [ 214.650808] binder: BINDER_SET_CONTEXT_MGR already set [ 214.650818] binder: 1361:1363 ioctl 40046207 0 returned -16 [ 214.651570] audit: type=1326 audit(1516962667.017:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=1367 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe5c79 code=0x7ffc0000 [ 214.656556] audit: type=1326 audit(1516962667.019:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=1367 comm="syz-executor1" exe="/root/syz-executor1" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe5c79 code=0x7ffc0000 [ 214.657387] binder_alloc: 1329: binder_alloc_buf, no vma [ 214.657409] binder: 1371:1375 transaction failed 29189/-3, size 0-0 line 2903 [ 214.657570] binder: undelivered TRANSACTION_ERROR: 29189 [ 214.665563] binder: 1361:1363 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 214.665572] binder: 1361:1363 BC_INCREFS_DONE u0000000000000000 no match [ 214.665585] binder: 1361:1363 ioctl c0306201 2000efd0 returned -11 [ 214.668392] binder_alloc: 1329: binder_alloc_buf, no vma [ 214.668416] binder: 1371:1377 transaction failed 29189/-3, size 0-0 line 2903 [ 215.056307] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.061882] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.067378] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.073138] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.078720] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:07 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f0000000000)=""/248, 0x45f) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) bind$vsock_dgram(r0, &(0x7f0000001000-0x10)={0x28, 0x0, 0x2710, @reserved=0x1, 0x0}, 0x10) 2018/01/26 10:31:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000db0000-0xc)='/dev/autofs\x00', 0x80040, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f000043b000-0x12)='/dev/snd/midiC#D#\x00', 0x5, 0x14000) accept4$inet(r2, &(0x7f0000dee000-0x10)={0x0, 0xffffffffffffffff, @local={0x0, 0x0, 0xffffffffffffffff, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000c1000)=0x10, 0x80800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) getsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000dbf000)=0x0, &(0x7f0000f85000)=0x4) r2 = socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r3 = dup2(r0, r2) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f000008e000-0x8)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f000022c000-0x8)={0x77359400, 0x0}, 0x8) 2018/01/26 10:31:07 executing program 1: mmap(&(0x7f0000000000/0x93d000)=nil, 0x93d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000093d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000093e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000642000-0x8)=@buf={0x45, &(0x7f000093f000-0x45)="083084f1b32e8bad9c031536c43a4f67bda57c6222e9934f9ae6a7f8f234a1e256845965a661d2ceb6c80ccc146a2274e7443e248721fa091399c256788590a5e1f0f85934"}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000598000)={@common='lo\x00', &(0x7f000093e000-0x5)=@ethtool_perm_addr={0x20, 0x0, ""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 10:31:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000957000)='/dev/vga_arbiter\x00', 0x10480, 0x0) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000949000-0x20)={{&(0x7f0000840000)=""/153, 0x99}, &(0x7f0000975000)=0x0, 0x0}, 0x20) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000d64000)={[{0x1000, 0x8001, 0x2, 0x3f, 0x8, 0x7fff, 0x1f, 0x2, 0xffffffff, 0x8, 0x2, 0x3, 0xc5}, {0x98, 0x4, 0x3554, 0x0, 0x9, 0x4, 0x7ff, 0xeb3a, 0x8, 0xc5c, 0x4, 0xffffffffffffff01, 0x981a96d}, {0xb8a6, 0x8, 0x7ff, 0x12, 0x8, 0x2, 0x4, 0x5, 0x1000, 0xfffffffffffffffd, 0x7, 0x20, 0x7fff}], 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockname$netrom(r0, &(0x7f000096d000-0x10)=@ax25={0x0, {""/7}, 0x0}, &(0x7f0000c6e000)=0x10) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) recvfrom$inet(r0, &(0x7f000066b000-0x6f)=""/111, 0x6f, 0x60, &(0x7f00000f9000)={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) openat(r0, &(0x7f00009e7000)='./file0\x00', 0x800, 0x8) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f000025f000)='/dev/ppp\x00', 0x10000, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000c9f000-0x104)={0x0, 0xfc, "3e06ec645086fd56cfc97ebcb78a8ba544eedb1ceb2f9e4dfbca9c57e11e045fd85b4fd7faca1be0dd0737bfed3aeddbebc792f07da44d6b6ce02ac5f49d8010a78998282a0ef9219b8d35c07a00d98246aea05d180d3c38d39207ac7a7b3e6dd8d62380cef2fdb0ae1732499a4c13c3f4d4a34560d63d83039515b1165d71bcbe92f157e71184c22cc169e69a45a3c281dfc02a35f24ad8de711539300579f4e55df4d9d85571c1bbadaeea01f973e5b41cdc7b522ba4effde4994a0a0588a63a6c14807457211c13adaa86c96cc38bfdbefc90ad0f613e862746e799d3fd70f78f001c040a4d669bf8400a03a7fde80325c5f003b31465d728d589"}, &(0x7f0000f33000-0x4)=0x104) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00009af000)={r2, 0xc, 0x80000000000000fa, []}, &(0x7f0000de7000)=0xffffffffffffffd3) getsockname$inet6(r1, &(0x7f00000df000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f0000100000-0x4)=0x1c) 2018/01/26 10:31:07 executing program 2: perf_event_open(&(0x7f0000940000)={0x7, 0x78, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000003, 0x0, 0x0, 0x50ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f000064f000)='/dev/cuse\x00', 0x40, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x1) 2018/01/26 10:31:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80000, 0x8010000000000086) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000f29000)={0x0, 0x30, &(0x7f000071a000)=[@in={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000df4000)=0xc) 2018/01/26 10:31:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$audion(&(0x7f0000555000)='/dev/audio#\x00', 0x7, 0x42000) bind$bt_l2cap(r1, &(0x7f0000c48000-0xe)={0x1f, 0x8000, {0x2, 0x200, 0x8, 0x9, 0x0, 0xffffffffffffffff}, 0x100, 0x3f}, 0xe) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:07 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00008e6000)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000061f000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_pts(r1, 0x0) read(r2, &(0x7f000007d000-0x1)=""/1, 0x1) fcntl$setstatus(r2, 0x4, 0x40800) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000edf000)={@generic="9ab8cd9159991494c79028a123ccb756", @ifru_flags=0x100}) readv(r2, &(0x7f00003fb000-0x20)=[{&(0x7f00008b0000-0xb4)=""/180, 0xb4}], 0x1) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000db5000-0x17)={0x7, 0x1, 0x1c00000000000000, 0x686, 0x2, 0xa94c}) 2018/01/26 10:31:07 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_mempolicy(&(0x7f0000001000-0x4)=0x0, &(0x7f0000000000)=0x0, 0xc, &(0x7f0000af2000/0x3000)=nil, 0x2) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) r0 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000001000)=0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001000)={0x0, 0x81, 0x30, 0x7, 0x664}, &(0x7f0000001000)=0x18) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000003000-0x14)={r1, 0x6ab, 0x3, 0x8, 0x6, 0x9}, 0x14) splice(r0, &(0x7f0000001000)=0x0, r0, &(0x7f0000003000-0x8)=0x0, 0x66, 0x0) 2018/01/26 10:31:07 executing program 4: r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) r2 = getpid() mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r1, &(0x7f0000e2e000-0x1c)={&(0x7f0000322000-0xc)={0x10, 0x0, 0x0, 0x10002}, 0xc, &(0x7f0000b8d000-0x8)={&(0x7f0000000000)={0xfc, 0x2e, 0x338, 0x2, 0x0, {0x6, 0x0, 0x0}, [@generic="65f25dcbe7c2159f35702170576cd42b0d8e3d2cd09ed2aa8726c2d7b7764dce5d94b472250f95062f5df197cffe4cc59a33e1171dc58f0705a08c0ba22aeab742b634cf0ddc1278171272834c85ef81792bb558a3dddaab594884401d6528d03f1ae06bcfcae726b3a93fe1bfd4", @generic="4d7b2bea2fd4c57f9098abd327d757e56bad45f63defbb52689141818c0ec34b60f2e95e6e4c01302d32012faaf316d93d4ed806505198e87b1663487657146e3eab40011a805ca07a83e4df92137a7a", @generic="6bfdd820a6", @typed={0x24, 0x8e, @str='vboxnet1-nodevcgroupppp1\x00'}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040}, 0x4000014) syz_open_procfs(r2, &(0x7f0000dca000-0x7)='ns/mnt\x00') sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) exit(0x3) [ 215.139517] binder: 1383:1390 transaction failed 29189/-22, size 0-0 line 2788 [ 215.152213] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.162733] binder: 1382:1393 transaction failed 29189/-22, size 0-0 line 2788 [ 215.176233] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000c7b000-0x12)='/dev/snd/midiC#D#\x00', 0x3, 0x8600) openat$vnet(0xffffffffffffff9c, &(0x7f0000eb1000)='/dev/vhost-net\x00', 0x2, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 215.192576] binder: 1383:1400 transaction failed 29189/-22, size 0-0 line 2788 [ 215.215545] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.223439] binder: 1382:1393 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000cee000-0xd)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = syz_open_dev$mouse(&(0x7f0000a15000-0x12)='/dev/input/mouse#\x00', 0x4ca8, 0x200) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xd1, &(0x7f0000001000-0x4)=0xfffffffffffffffe, 0x4) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00004c4000-0xb)={0x3, 0xa1, 0x100, 0x9, 0x4b3, 0x4, 0x0, 0x77a0, 0x9, 0x101, 0x81}, 0xb) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$audion(&(0x7f0000555000)='/dev/audio#\x00', 0x7, 0x42000) bind$bt_l2cap(r1, &(0x7f0000c48000-0xe)={0x1f, 0x8000, {0x2, 0x200, 0x8, 0x9, 0x0, 0xffffffffffffffff}, 0x100, 0x3f}, 0xe) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:07 executing program 7: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000a79000)='/dev/qat_adf_ctl\x00', 0x220080, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwrite64(r0, &(0x7f0000001000-0xae)="414d0a2bc74d8af588436aad3332c1ee10090a427068d5e446524528ecd44364b2c0011f84ad771b1f29ceaa028c778b1424f5834c22c1063cf47d9eec56bfff85ab1e7227febba05ed7de4b5413603f6172065902f7d82f5c1a83589c6920c1039d3fac50b7f708895b767bb2ee1bcd7c4e0df8ccb76dee08fc130129ba22595ea3539b722367f0e85e4cecb667cb1025d2bb81beed38f4293ecb6819fb9141544dcb20ac437a41242197ed594b", 0xae, 0xfffffffffffffffe) dup(r0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000000)=""/112) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000002000)='/dev/snd/pcmC#D#c\x00', 0x8000000004, 0x8000) openat$vsock(0xffffffffffffff9c, &(0x7f0000001000)='/dev/vhost-vsock\x00', 0x2, 0x0) 2018/01/26 10:31:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2002, 0xefe7) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r2 = socket$packet(0x11, 0x400000002, 0x300) r3 = fcntl$dupfd(r1, 0x406, r2) ioctl$TCSETS(r3, 0x5402, &(0x7f00004ee000-0x24)={0x6, 0x4, 0x5, 0x0, 0x7, 0x7f4, 0x48cd, 0x10000, 0x7, 0x200, 0x8, 0x2}) socket$packet(0x11, 0x3, 0x300) ioctl$UFFDIO_WAKE(r3, 0x8010aa02, &(0x7f000014b000)={&(0x7f0000105000/0x2000)=nil, 0x2000}) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000a62000)={0x6, 0xe9ee}) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 215.249462] binder: 1415:1419 transaction failed 29189/-22, size 0-0 line 2788 [ 215.249528] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.280140] binder: 1423:1430 transaction failed 29189/-22, size 0-0 line 2788 [ 215.294357] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:07 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() prctl$setptracer(0x59616d61, r0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r0, 0x2a, &(0x7f0000386000)={0x2c, 0x8, 0x3, 0x100}) vmsplice(0xffffffffffffffff, &(0x7f00005d3000)=[], 0x0, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000d81000)={0x0, 0x0}) prctl$setptracer(0x59616d61, 0x0) 2018/01/26 10:31:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x315, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) connect$netrom(r1, &(0x7f0000678000)=@ax25={0x3, {"45b378508ce1e8"}, 0x3}, 0x10) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00005bf000-0x20)={r2, 0x7f, 0x388000, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000241000)=0x0, &(0x7f000071d000)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:07 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) sysfs$2(0x2, 0x76, &(0x7f0000e54000)=""/4) [ 215.301840] binder: 1415:1428 transaction failed 29189/-22, size 0-0 line 2788 [ 215.334746] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.349359] binder: 1444:1446 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 215.352639] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.366617] binder: 1444:1446 BC_INCREFS_DONE node 451 has no pending increfs request [ 215.375257] binder: 1444:1446 ioctl c0306201 2000efd0 returned -11 [ 215.386599] binder: BINDER_SET_CONTEXT_MGR already set [ 215.392058] binder: 1444:1450 ioctl 40046207 0 returned -16 2018/01/26 10:31:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(0xffffffffffffffff, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:07 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000b98000-0x5)='user\x00', &(0x7f00006de000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000951000-0xc0)="04054d925fd15ad012ce9b81785bab0138f191002b21c64895636e8b440873128fcfbd3ffa18832328a8e6205c0c3d548693acfbf7e5c7c40a352bdc2a88f445d99a5b7f6fb02eb8ea683b6cb171dc5520aca9880906869490fd11a751663ad95950fea5bc89666f540a723fa785796da32b78941d33454cc62f946b84796cf3beb43aef0f9110c12b39195017221e4f51a9f7d54f858d84734f180438d730ea97e934cec4112973cf7a83fd000362152584e32cdc182a3fff750b38a01317cc", 0xc0, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r0) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) prctl$setendian(0x14, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:07 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000fc3000-0xb)='/dev/audio\x00', 0x200000, 0x0) setsockopt$ax25_int(r1, 0x101, 0xc, &(0x7f00009da000)=0x3f, 0x4) ioctl$TIOCPKT(r0, 0x5420, &(0x7f000060f000-0x4)=0x401) ioctl$TCSETSF(r0, 0x5404, &(0x7f00003af000-0x24)={0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETA(r0, 0x5406, &(0x7f0000984000-0x14)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}) 2018/01/26 10:31:07 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) readv(r0, &(0x7f0000629000)=[{&(0x7f0000137000)=""/33, 0x21}], 0x1) write$evdev(r0, &(0x7f0000b5e000-0x78)=[{{0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x60) 2018/01/26 10:31:07 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) read(r0, &(0x7f0000003000)=""/201, 0xc9) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000005000-0x9)='/dev/rtc\x00', 0x2400, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000005000-0x11)='/dev/qat_adf_ctl\x00', 0x883, 0x0) signalfd4(r1, &(0x7f0000005000-0x8)={0x100000000}, 0x8, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000000)={0x9, {{0x2, 0x2, @dev={0xac, 0x14, 0x0, 0xb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x8, [{{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @dev={0xac, 0x14, 0x0, 0x13}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @rand_addr=0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x0, @rand_addr=0x7fffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x4d8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000003000-0xb)='/dev/mixer\x00', 0x0, 0x0) fcntl$addseals(r2, 0x409, 0x6) 2018/01/26 10:31:07 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f00005c6000-0xf8)=""/248, 0x546002cebca70875) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000002000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000002000-0x4)=0x0, &(0x7f0000002000-0x4)=0x4) 2018/01/26 10:31:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000ff5000)='/dev/cuse\x00', 0x2004, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xf7) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00005e6000-0x4)=0x0) link(&(0x7f0000be5000-0x8)='./file0\x00', &(0x7f00007a0000-0x8)='./file0\x00') ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f0000f03000-0x4)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:07 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) syz_open_dev$midi(&(0x7f00003c2000)='/dev/midi#\x00', 0x10000, 0x204200) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 215.402792] binder: 1444:1450 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 215.410381] binder: 1444:1450 BC_INCREFS_DONE u0000000000000000 no match 2018/01/26 10:31:07 executing program 7: syslog(0x9, &(0x7f0000001000-0xf8)=""/248, 0xf8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001000-0x8)='./file0\x00', 0x1, 0x80) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001000)={r1, @in={{0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000001000-0x4)=0x8c) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000525000)=0x4b0) 2018/01/26 10:31:07 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000de3000-0x8c)={0x7, 0x9, 0xad, 'queue1\x00', 0x100, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:07 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000b97000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000086d000/0x18000)=nil, &(0x7f00003ef000-0xc)=[@text64={0x40, &(0x7f0000001000-0x54)="66baf80cb86c51478def66bafc0ced460f0138c481f9c5de003e47340c8f0860ed572e000fc71966baf80cb85f541b84ef66bafc0cb05ceeb97e030000b88b000000ba000000000f30f30f09f0812c09ff840000", 0x54}], 0x1, 0x44, &(0x7f0000f34000-0x10)=[@cstype0={0x4, 0x2}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000cc8000)={0x0, 0x0, &(0x7f000080f000-0x10)={&(0x7f0000f98000-0xb0)={0x2, 0x7, 0x0, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000f8b000)={{{@in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@dev={0xac, 0x14, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0}, {{@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x6c}, 0x0, @in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) connect$inet6(r4, &(0x7f000088c000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x9}, 0x1c) close(r2) r5 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$adsp(&(0x7f0000c98000-0xb)='/dev/adsp#\x00', 0xcf, 0x200) ioctl$LOOP_SET_DIRECT_IO(r6, 0x4c08, 0x3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) timer_create(0x6, &(0x7f0000eff000+0x192)={0x0, 0x4, 0x2, @tid=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000640000)=0x0) socket$kcm(0x29, 0x2, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000565000)='/selinux/enforce\x00', 0x40000, 0x0) timer_gettime(r7, &(0x7f00007f1000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) syz_open_dev$usbmon(&(0x7f0000627000-0xd)='/dev/usbmon#\x00', 0x8, 0x200400) ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) 2018/01/26 10:31:07 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000058000)='/selinux/checkreqprot\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00009de000)={0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000274000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000ae000)='stat\x00') syz_open_dev$adsp(&(0x7f0000abf000-0xb)='/dev/adsp#\x00', 0x9, 0x420000) sendfile(r2, r3, &(0x7f0000237000)=0x0, 0xfffb) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000169000)={0x1, 0x1e, 0x2887, "4e1e225aeacb", "517e16ac649e009da7f17086c7f04699"}) 2018/01/26 10:31:07 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000dcc000)={0x0, 0x8, 0x8, 0x8, 0x3, 0xed, 0x3, 0xa0, {0x0, @in={{0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0xfff, 0x5, 0x2, 0x0}}, &(0x7f0000e92000-0x4)=0xb8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00009ea000-0x8c)={r2, @in6={{0xa, 0x2, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) socket$packet(0x11, 0x203, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 215.456895] binder: 1452:1457 transaction failed 29189/-22, size 0-0 line 2788 [ 215.461098] binder: 1456:1459 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 215.461109] binder: 1456:1459 BC_INCREFS_DONE node 453 has no pending increfs request [ 215.461124] binder: 1456:1459 ioctl c0306201 2000efd0 returned -11 [ 215.462694] binder_alloc: 1456: binder_alloc_buf, no vma [ 215.462716] binder: 1454:1460 transaction failed 29189/-3, size 0-0 line 2903 [ 215.463765] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.478119] binder: BINDER_SET_CONTEXT_MGR already set [ 215.478128] binder: 1456:1472 ioctl 40046207 0 returned -16 [ 215.484409] binder_alloc: 1456: binder_alloc_buf, no vma [ 215.484439] binder: 1454:1471 transaction failed 29189/-3, size 0-0 line 2903 [ 215.488234] binder: 1456:1459 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 215.488245] binder: 1456:1459 BC_INCREFS_DONE u0000000000000000 no match [ 215.518318] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.536695] binder: 1482:1483 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 215.536707] binder: 1482:1483 BC_INCREFS_DONE node 456 has no pending increfs request [ 215.536723] binder: 1482:1483 ioctl c0306201 2000efd0 returned -11 [ 215.541926] binder: BINDER_SET_CONTEXT_MGR already set [ 215.541942] binder: 1482:1490 ioctl 40046207 0 returned -16 [ 215.547276] binder_alloc: 1482: binder_alloc_buf, no vma [ 215.547300] binder: 1452:1475 transaction failed 29189/-3, size 0-0 line 2903 [ 215.548557] binder: 1482:1490 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 215.548566] binder: 1482:1490 BC_INCREFS_DONE u0000000000000000 no match [ 215.627634] binder: 1485:1498 transaction failed 29189/-22, size 0-0 line 2788 [ 215.642192] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:08 executing program 7: syslog(0xffffffff, &(0x7f000077c000)=""/248, 0xf8) 2018/01/26 10:31:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = eventfd(0x1) r1 = dup(r0) perf_event_open(&(0x7f000047d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000b3c000)={0x0, 0x0}) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000606000-0x18)={0x1, 0x8, 0x0}) syz_emit_ethernet(0x4e, &(0x7f0000542000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0x0}, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x40, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0xffffffffffffffff, 0x0}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[@ssrr={0x89, 0xb, 0x3f, [@loopback=0x7f000001, @multicast1=0xe0000001]}, @rr={0x7, 0x3, 0x0, []}]}}, @icmp=@dest_unreach={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @broadcast=0xffffffff, @multicast1=0xe0000001, {[]}}, ""}}}}}, &(0x7f0000782000-0x8)={0x0, 0x0, []}) 2018/01/26 10:31:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000696000)='/dev/rfkill\x00', 0x40, 0x0) write$selinux_create(r1, &(0x7f0000b5b000-0x3c)=@objname={'system_u:object_r:mount_tmp_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x38, 0x38, 0x20, './file0\x00'}, 0x3c) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x2) readv(r0, &(0x7f0000629000)=[{&(0x7f0000137000)=""/33, 0x21}], 0x1) write$evdev(r0, &(0x7f0000b5e000-0x78)=[{{0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x0, 0x0}, 0x0, 0x0, 0x0}, {{0x77359400, 0x0}, 0x0, 0x0, 0x0}], 0x60) 2018/01/26 10:31:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f000049e000-0xc)='/dev/autofs\x00', 0x2100, 0x0) setsockopt(r0, 0x6, 0x0, &(0x7f000021a000-0x39)="ebab1bc3e300f46246d816ac3243ce438312662f19c70a7d578799128e5edcbf2aab9a5a6628636d59e3af8625ebc2003bcf13caca2320249f", 0x39) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00002cf000-0x8c)={0x100, 0x100, 0x2, 'queue1\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000ac9000-0x11)='/selinux/enforce\x00', 0x80c00, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x791c0275) 2018/01/26 10:31:08 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000d5e000-0xa)='/dev/dsp#\x00', 0x7, 0xa800) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000d8000)=0x4) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000acc000)={[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000002b000)={0x0, @multicast1=0x0, @multicast2=0x0}, &(0x7f0000000000)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast2=0x0, @broadcast=0x0}, &(0x7f0000abd000-0x4)=0xc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000001000-0x1c)={&(0x7f00003cf000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000038b000)={&(0x7f0000507000-0x44)=@ipv4_getnetconf={0x44, 0x52, 0xe00, 0x1, 0x1, {0x2}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_FORWARDING={0x8, 0x2, 0x9}, @NETCONFA_FORWARDING={0x8, 0x2, 0x37}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x1}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x8000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0xcca5e353a79c5e36) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001000-0x18)={0x0, 0xffffffffffffffff, 0x30, 0x1, 0xfffffffeffffffff}, &(0x7f0000001000)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001000-0x8)={r3, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001000)=@int=0xf2, 0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001000)={r3, 0x6, 0xffff, 0x1}, &(0x7f0000003000-0x4)=0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000004000-0x108)={0x1f, {{0xa, 0x0, 0x9, @loopback={0x0, 0x1}, 0xffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x2, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xfff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r3, 0x2, 0x20}, &(0x7f0000001000-0x4)=0xc) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000004000)={r3, 0x220, 0x30}, 0xc) setsockopt$sock_int(r0, 0x1, 0x3, &(0x7f0000002000)=0x10001, 0x4) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x9) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000006000-0x4)=0x0, 0x1ff) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={@generic="da832bc86f7380adc332488b0e697191", @ifru_data=&(0x7f0000005000)="7dbaebebd6c3aefb60e25f78dd775a912d8c97a0160ca8d4256941cca2f227b6"}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001000-0x10)={0x1, 0x8, 0x7, 0xffffffffffffff80, r3}, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000004000)={r3, 0x497}, 0x8) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000007000-0x20)={0x0, 0x6, 0x6, 0xf2a, 0x7, 0x200, 0x4, 0x401, r4}, &(0x7f0000004000-0x4)=0x20) bind$llc(r0, &(0x7f0000001000-0x10)={0x1a, 0xf5, 0x0, 0xffffffff, 0x1000, 0x7ff, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, [0x0, 0x0]}, 0x10) 2018/01/26 10:31:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000c6a000-0xd)='/dev/binder#\x00', 0x0, 0x100000000000803) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00009f3000-0x4)={0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000d74000-0x4)={0x10000}, 0x4) [ 215.691124] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.704791] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:08 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) r0 = syz_open_dev$vcsa(&(0x7f000063c000-0xb)='/dev/vcsa#\x00', 0xfffffffffffffb1a, 0x80000) ioctl$TIOCSTI(r0, 0x5412, 0xc2d) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000)=0x200, 0x4) 2018/01/26 10:31:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00004b1000)={0x8, 0x3, &(0x7f0000487000-0x98)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [], {0x95, 0x0, 0x0, 0x0}}, &(0x7f00003aa000)='GPL\x00', 0xb4c3, 0x1000, &(0x7f00006ac000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) mmap(&(0x7f0000000000/0xb17000)=nil, 0xb17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b17000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000b17000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000002f000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x3000)=nil, 0x3000, 0x0, 0x51, r1, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000b18000-0x10)='/selinux/member\x00', 0x2, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000fe1000-0x9)='/dev/rtc\x00', 0x40, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xb96) remap_file_pages(&(0x7f0000029000/0x2000)=nil, 0x2000, 0x0, 0x4, 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f000049b000-0xc)='/dev/autofs\x00', 0xa0100, 0x0) dup3(r0, r3, 0x80000) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00003a3000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000214000)={r4, r0}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000fac000-0x28)={r0, 0x0, 0xe, 0x6f, &(0x7f0000b76000)="934d837bd84e637d68f68411a19d", &(0x7f0000569000-0x6f)=""/111, 0x0, 0x0}, 0x28) r5 = syz_open_dev$sndseq(&(0x7f0000abb000-0xd)='/dev/snd/seq\x00', 0x0, 0x400000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a45352, &(0x7f00006f8000)={{0x3, 0x4}, 'port0\x00', 0xc, 0x0, 0x80000000, 0xa54c, 0x6, 0x8, 0x0, 0x0, 0x4, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 215.745081] binder: 1527:1532 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 215.759124] binder: 1529:1530 transaction failed 29189/-22, size 0-0 line 2788 [ 215.760435] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.775603] binder_alloc: 1527: binder_alloc_buf, no vma 2018/01/26 10:31:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000b12000)='/dev/sg#\x00', 0x1, 0x80) setsockopt$inet6_dccp_buf(r0, 0x21, 0xc, &(0x7f0000b06000-0xda)="acfc7964161fe483c5330f4d9290f5d2e4478ddd1d4d34f8bae93f9c5376069284eae3ed4556450cebb6fed8189930fe6c81fbfa8df5d108b5be042b10c238783e19b8cf5eb4d41812c38468d9ee905f9dd1802289b6f5f6cfc8a0e605b1cb66eae879a56c18ec49fa71ff6bead32378e3a95d1e744bac51a962fb7ebb7543836bab5b58e9f283de922ac173f738e396c10eac0ca8f6d9911f662f7de47c59a90a35981b0b2615aa543f25943b0bbebc9997ba17191e8c3160a1deb520a6cb0e70fdc595ac94aab3a9711b37c9c5aa861faae4e876140568e5ce", 0xda) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = syz_open_dev$admmidi(&(0x7f0000f6b000)='/dev/admmidi#\x00', 0x7f, 0x400000) ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f00009cb000)={0x7f, 0x2, 0x800, 0x0, 0x80}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 215.775626] binder: 1536:1543 transaction failed 29189/-3, size 0-0 line 2903 [ 215.775760] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.781520] binder_alloc: 1527: binder_alloc_buf, no vma [ 215.781542] binder: 1529:1546 transaction failed 29189/-3, size 0-0 line 2903 2018/01/26 10:31:08 executing program 7: r0 = open(&(0x7f0000daa000)='./file0\x00', 0x8000, 0x80) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000001000-0xc)={{0x100000001, 0x3, 0x1c, 0x100000001, 0x6, 0x1}, 0x7}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001000)=0x0, &(0x7f0000002000-0x4)=0x4) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000001000)={0x16, 0x9e, &(0x7f0000002000)="5e08b689a26f6983dd1d7cc360d1a72e473666dec8473ae6a452fb0ae49fd58934f2586f9cbfd946dd138196042c3a16cf053d60b027263d8bfc3cbfdd44c1738e734c3aae9636e8da99726fcb90d673c0803612d4e8f675b31cc1a7d91ed39c6fe80c90df2fc4c6d3662769b1d4590487206f3625508ffab23405626f49f3a97175b561181bea728f43d542bffe7931b3b10ae80f3e354a9270973e8878"}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$netlink(r0, &(0x7f0000004000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000006000-0x4)=0xc) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000004000-0x8)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000005000-0x4)=0x8) 2018/01/26 10:31:08 executing program 1: mmap(&(0x7f0000000000/0x44b000)=nil, 0x44b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x6ef000) memfd_create(&(0x7f0000000000)='lo-cpusetbdev\'#lo\x00', 0x2) [ 215.798255] binder_alloc: 1527: binder_alloc_buf, no vma [ 215.798282] binder: 1536:1548 transaction failed 29189/-3, size 0-0 line 2903 [ 215.809605] binder: BINDER_SET_CONTEXT_MGR already set [ 215.809615] binder: 1527:1556 ioctl 40046207 0 returned -16 2018/01/26 10:31:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$vcsn(&(0x7f0000d68000-0xa)='/dev/vcs#\x00', 0x3, 0x10800) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00004e7000)={r1, 0x28, &(0x7f000012f000-0x28)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16}}, 0x10) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 215.819941] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.826175] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.838289] binder: 1527:1547 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 215.838300] binder: 1527:1547 BC_INCREFS_DONE u0000000000000000 no match [ 215.874534] binder_alloc: 1527: binder_alloc_buf, no vma [ 215.874562] binder: 1559:1563 transaction failed 29189/-3, size 0-0 line 2903 [ 215.874729] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.879373] binder_alloc: 1527: binder_alloc_buf, no vma [ 215.879398] binder: 1562:1566 transaction failed 29189/-3, size 0-0 line 2903 [ 215.880885] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.891383] binder_alloc: 1527: binder_alloc_buf, no vma [ 215.891409] binder: 1559:1569 transaction failed 29189/-3, size 0-0 line 2903 [ 215.903626] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.903911] binder_alloc: 1527: binder_alloc_buf, no vma [ 215.903935] binder: 1562:1570 transaction failed 29189/-3, size 0-0 line 2903 [ 215.912112] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.927569] binder_alloc: 1527: binder_alloc_buf, no vma [ 215.927593] binder: 1575:1576 transaction failed 29189/-3, size 0-0 line 2903 [ 215.927722] binder: undelivered TRANSACTION_ERROR: 29189 [ 215.938457] binder_alloc: 1527: binder_alloc_buf, no vma [ 215.938482] binder: 1575:1579 transaction failed 29189/-3, size 0-0 line 2903 [ 215.943952] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000b48000)='net/psched\x00') getsockname$unix(r1, &(0x7f0000a38000)=@file={0x0, ""/4096}, &(0x7f0000c65000-0x4)=0x1002) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00005e3000)={0x0, 0x0}, &(0x7f0000d03000)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000514000-0x8)={r2, 0x4}, &(0x7f0000e4a000-0x4)=0x8) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2018/01/26 10:31:08 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000001000-0xd)='/dev/dmmidi#\x00', 0x6, 0x400) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000477000)={0x2, 0xfffffffffffff800}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000002000-0x18)=@get={0x1, &(0x7f0000002000-0x8f)=""/143, 0xffffffff}) 2018/01/26 10:31:08 executing program 1: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f00005ad000-0x10)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000fe6000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002f000-0x10)={0x2, &(0x7f0000e9d000)=[{0x28, 0x0, 0x0, 0xfffffffffffff008}, {0x80000006, 0x0, 0x0, 0x0}]}, 0x8) write(r0, &(0x7f0000fe4000)="", 0xfde0) 2018/01/26 10:31:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f00007c7000)='/dev/input/mice\x00', 0x0, 0x20000) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000a94000)={0x0, 0xdd1}, &(0x7f0000efc000)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00005ce000-0x8)={r3, 0x0, 0x1}, &(0x7f0000dc3000-0x4)=0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000a4f000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00004b9000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000f61000)=0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000c21000)='/dev/mixer\x00', 0x80, 0x0) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000535000-0x20)={0xbf665fbc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fcntl$lock(r0, 0x100000000000024, &(0x7f0000a4f000-0x10)={0x0, 0x0, 0x0, 0x7fff, r1}) 2018/01/26 10:31:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000fc5000)='/dev/dsp#\x00', 0x4, 0x20100) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000572000)={0x7f, 0x33, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) 2018/01/26 10:31:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) 2018/01/26 10:31:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) pipe(&(0x7f000073c000)={0x0, 0x0}) ioctl$TIOCCBRK(r1, 0x5428) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000af6000)={0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) preadv(r1, &(0x7f0000854000)=[{&(0x7f0000e8a000)=""/89, 0x59}, {&(0x7f0000068000-0xd7)=""/215, 0xd7}, {&(0x7f0000658000-0x36)=""/54, 0x36}, {&(0x7f0000cfc000)=""/117, 0x75}, {&(0x7f0000dce000)=""/76, 0x4c}, {&(0x7f0000063000-0xcd)=""/205, 0xcd}, {&(0x7f0000b96000)=""/60, 0x3c}], 0x7, 0x1a) r2 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000fc6000)={0x44, {{0xa, 0x3, 0x3, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11}, 0x400}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x8, [{{0xa, 0x3, 0x1, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xfffffffffffffff7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0xff, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x5}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x1, 0x3ff, @loopback={0x0, 0x1}, 0x7fff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x3f, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x101}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x3, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0x1, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x1f, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x7, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x10000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x490) [ 216.048903] binder: 1527:1532 BC_INCREFS_DONE node 459 has no pending increfs request [ 216.056892] binder: 1527:1532 ioctl c0306201 2000efd0 returned -11 2018/01/26 10:31:08 executing program 1: mmap(&(0x7f0000000000/0x26000)=nil, 0x26000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000022000-0x50)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_mtu=0x0}) mmap(&(0x7f0000026000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000026000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f000000c000)={{0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4, {0x2, 0x3, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='bcsh0\x00'}) [ 216.102231] binder: 1589:1593 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 216.103701] binder_alloc: 1589: binder_alloc_buf, no vma [ 216.103725] binder: 1584:1590 transaction failed 29189/-3, size 0-0 line 2903 [ 216.103862] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f000028b000-0xd)='/dev/binder#\x00', 0x0, 0x800) r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x0, 0x0, 0x0}}, 0x2e) connect$l2tp(r0, &(0x7f00008ae000-0x2e)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x0, 0x0, 0x0}}, 0x2e) 2018/01/26 10:31:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00002be000)=0x5, 0x4) 2018/01/26 10:31:08 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x4, 0x6, 0x2, 0x0, 0xf4, 0x8, 0x3, 0x400, 0x5, 0x4}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$selinux_context(r0, &(0x7f0000001000-0x22)='system_u:object_r:inetd_exec_t:s0\x00', 0x22) 2018/01/26 10:31:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r2 = socket$packet(0x11, 0x400000002, 0x300) r3 = openat(0xffffffffffffffff, &(0x7f0000c0f000)='./file0\x00', 0x200, 0x180) fcntl$getownex(r2, 0x10, &(0x7f0000959000)={0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000e98000-0xc)={0x0, 0x0, 0x0}, &(0x7f000059b000-0x4)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000465000)={0x0, 0x0, 0x0}, &(0x7f0000b8a000-0x4)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f000088a000)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000995000-0xe8)={{{@in=@rand_addr=0x0, @in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000d9c000-0x4)=0xe8) fstat(r2, &(0x7f0000320000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000638000)={0x0, 0x0}) r11 = geteuid() r12 = getegid() r13 = getpid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000321000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbmon(&(0x7f000014a000)='/dev/usbmon#\x00', 0x0, 0x3) pselect6(0x40, &(0x7f00000ac000-0x40)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000768000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00007fc000-0x40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000554000-0x8)={0x0}, 0x8}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000d9a000-0xe8)={{{@in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00008e7000-0x4)=0xe8) r15 = getegid() r16 = getpgid(0xffffffffffffffff) sched_setparam(r16, &(0x7f0000f13000-0x4)=0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000f1000)={{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @loopback=0x0}, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @rand_addr=0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000407000)=0xe8) fstat(r1, &(0x7f0000678000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r3, &(0x7f0000dc3000)={&(0x7f000086c000)=@proc={0x10, 0x0, 0x1, 0x110802}, 0xc, &(0x7f000046b000)=[{&(0x7f000004a000)={0x100, 0x40, 0x420, 0x6, 0x2, "", [@generic="58a2a13659495fa59a78bce2f11f0b64b2f03163b75d9b6609c6c97024509c35413fc477251316f7253c3ac43b45c21a0b35fb3950c82d5da9b9b7ec1f9bd9b64afb7267891d3f8fb8b5fdadf984e516d99c6c981c33e016bb3e7e27d9a61861b1e4292c3a966c3a53fa7ecb715247785b76d2b57cafea30cd38c05e0c9b891472f7d90db66d722ccdef0be6442236485ee701f1b5b15c6c369b66a2cc7553575dd0780901682c3b9bbd112b4f663e82a398effabc94f795cc1b60075d7f34121e5f4fd98757d1c87bc86205", @typed={0x18, 0x7f, @ipv6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}}, @typed={0xc, 0x45, @fd=r2}]}, 0x100}, {&(0x7f0000cfd000-0x10)={0x10, 0x17, 0x100, 0x3, 0x3, "", []}, 0x10}], 0x2, &(0x7f000076f000)=[@cred={0x18, 0x1, 0x2, r4, r5, r6}, @cred={0x18, 0x1, 0x2, r7, r8, r9}, @rights={0x18, 0x1, 0x1, [r2, r1, r2]}, @cred={0x18, 0x1, 0x2, r10, r11, r12}, @rights={0x24, 0x1, 0x1, [r0, r0, r1, r2, r1, r0]}, @cred={0x18, 0x1, 0x2, r13, r14, r15}, @rights={0x20, 0x1, 0x1, [r0, r1, r1, r0, r0]}, @cred={0x18, 0x1, 0x2, r16, r17, r18}], 0xd4, 0x8c0}, 0x8000) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:08 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x4000) ioctl$KDDISABIO(r0, 0x4b37) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000931000)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00009a2000-0x8)={0x0, 0x80000000, 0x1}, &(0x7f000026b000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00007bd000)={0x62, 0x37a, 0x4, 0x4, 0x7, 0x800000000000000, 0x80, 0x3, r3}, &(0x7f0000868000-0x4)=0x20) r4 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r4) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000144000-0x4)=0x0) sendto(r1, &(0x7f00007e1000)="fa0fd347", 0x4, 0x4000, &(0x7f0000e69000-0x10)=@ax25={0x3, {"e7fd4806b2df9f"}, 0x30}, 0x10) getsockopt$inet_mreqsrc(r1, 0x0, 0x2e, &(0x7f00000a3000)={@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, @multicast1=0x0, @multicast2=0x0}, &(0x7f0000cb1000-0x4)=0xc) getpeername$packet(r2, &(0x7f0000a84000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000f63000-0x4)=0x14) r5 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f00005b0000-0xa8)={{0x5, 0x0}, 'port1\x00', 0x84, 0x0, 0xfffffffffffffffb, 0x9, 0x0, 0x7, 0x3, 0x0, 0x4, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000c3c000-0x10)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00003c8000-0xcf)={r3, 0xc7, "ba8c3043d7de68cacc7355b89e93f85e1717a4b1b4ab03dbbb18648b4293c79374095dcbb68b3f4f3c6b422b63ccc6395377e7e6563e023c4b23dacb955a4db5c478d46f716620a601efea3afd6479cffd0617512a1cc361efeeddc5e8d0f388f460ae78df73ce7c68876d664bd40a6d8aa01304671d011035133ef2756d72a5b8198275d1d928fc3f484a36d8d065143c8e1853056b7d44d785d903fd345b3636c87dfdeb8720db9c12779425c27a5325b60edfc414285e4c0b82af1dcaa70f2cbeebc2ad343c"}, &(0x7f000020c000-0x4)=0xcf) ioctl$sock_bt(r1, 0xdd1f, &(0x7f0000af6000)="19ae457cc18d1e0b4901d4b5ca8f695fc91382b85973b84571d3b7b2a215121c50cade54f8957a445f7571688663c173c59bd52e6f890ba6a29a97bdc37d25688394af96e78106dcfdf34071ac93b4c5922dc3b4984ab5792194bf2a187abd360e36ca5b0873c77dde530b710c7428acdc070199b589211d4f3836e86a1b94aea6b3e16eb294e17d") ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) [ 216.127686] binder_alloc: 1589: binder_alloc_buf, no vma [ 216.127710] binder: 1584:1590 transaction failed 29189/-3, size 0-0 line 2903 2018/01/26 10:31:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000b7f000-0x20)={0x0, 0x12000, 0xffff, 0x0, 0x100000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$inet6(r0, &(0x7f0000fa9000-0x1c)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r0, &(0x7f0000ab5000-0x72)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r2 = dup(r0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f00000fc000-0x4)=0xffff, 0x4) recvmsg(r2, &(0x7f000014e000-0x38)={0x0, 0x0, &(0x7f00006b1000)=[], 0x0, &(0x7f0000474000-0x5d)=""/93, 0x5d, 0x0}, 0x0) 2018/01/26 10:31:08 executing program 2: mmap(&(0x7f0000000000/0xa16000)=nil, 0xa16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000a16000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a16000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000194000-0x20)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0}, 0x20) 2018/01/26 10:31:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000153000)='/dev/binder#\x00', 0xffffffffffffffff, 0x4000000000000802) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000846000)='/dev/qat_adf_ctl\x00', 0x105000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000850000)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000894000)={{0x9, 0x4, 0x1, 0x100, "0bbd74b3dee144cc11d49c8cdb25d0900fbed1545695b9c4de2800c51e7feecd1ca3b68a86c12488cbdbbf11", 0x3}, 0x0, 0x0, 0x4, r2, 0x7, 0x5, "1326b8aa67ddd4136b5944dd8efd4bb5f39d17247c3dfee36019f1c45a0757f9e518eeff2ecff2de9508f4d3a02796af1fd3eec35208157b6ce17f410b923486", &(0x7f000078d000-0x1)='\x00', 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x81, 0x5, 0x8, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) close(r0) socketpair$inet6(0xa, 0x4, 0x4, &(0x7f0000175000-0x8)={0x0, 0x0}) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000a70000-0xb)='/dev/mixer\x00', 0xc800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f0000791000-0x55)=""/85, &(0x7f00000a7000)=0x55) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000de5000)={0xaa, 0x10, 0x0}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f00000c4000)={0x2, 0x8, [0x5fe7, 0xfffffffffffffff8]}) 2018/01/26 10:31:08 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000000)="89eead672578dbdea7fd890729cd771006690432953f456c274f8ae97f2ea5496256c63831a6397e74f84030c96df7e189daeea8fa6e94e4585707bb1090b4282753353647a803de4c73cd42ac2b740a3ec39cfdee8425fe0b8f865d4c9fef7b1151fb3954505971b0", 0x69}, {&(0x7f0000001000-0x1000)="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", 0x1000}, {&(0x7f00005d6000)="29a3f635486e033e99e5e022f7cf23bca95f202389b3ee6ce8c88177eae14947917c60cfc9b4c08a1219100e2ed2f23d46fd1714c326c3c9d788160f43b3325a2a6d6d759b02168ada67f696686f5eecb5", 0x51}, {&(0x7f0000001000-0x50)="ab7933f510cc521532ec45f67e7dad802208349369c6cd5cb0056b16fc09fb69f321657af136ba1a89c5b006235a55e760e1d389f9d7011d022ab4c50cb607f29a28deeca1b189ee1644e8fa263b196f", 0x50}, {&(0x7f0000128000)="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", 0x1000}], 0x5, 0x2) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) [ 216.134229] binder_alloc: 1589: binder_alloc_buf, no vma [ 216.134256] binder: 1581:1595 transaction failed 29189/-3, size 0-0 line 2903 2018/01/26 10:31:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000016c000)='/dev/sequencer\x00', 0xa02, 0x0) write$sndseq(r0, &(0x7f0000cc2000)=[{0x81, 0x8, 0x0, 0x0, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @raw8={"1bfae7ec0e511da00de40cc5"}}], 0x1c) ioctl$ASHMEM_SET_SIZE(r0, 0x40047703, 0xbf) [ 216.159947] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.167274] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.177856] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/26 10:31:08 executing program 1: mmap(&(0x7f0000000000/0x29000)=nil, 0x29000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x13) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000029000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$selinux_user(r1, &(0x7f000002a000)={'system_u:object_r:sudo_exec_t:s0', 0x20, 'root\x00'}, 0x26) mmap(&(0x7f000002a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40047705, &(0x7f000002c000-0x8)={0x8, 0x100000000000000}) mmap(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000008000-0x18)={0x0, 0x20, 0x9, &(0x7f000002c000)=0x0}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000019000-0x15)='/proc/self/net/pfkey\x00', 0x400000, 0x0) mmap(&(0x7f000002b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000002c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f000002d000-0x4)=0x0, &(0x7f000000b000)=0x4) r3 = accept4$nfc_llcp(r2, &(0x7f0000010000-0x58)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/63, 0x0}, &(0x7f000002c000-0x4)=0x385, 0x80000) dup(r3) sendmsg$nl_route(r0, &(0x7f000002a000-0x1c)={&(0x7f000002a000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000b000)={&(0x7f0000024000-0x34)=@ipv4_delroute={0x1c, 0x19, 0xf11, 0xffffffffffffffff, 0xffffffffffffffff, {0x2, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000, 0x0}, []}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:08 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000462000)='/dev/loop#\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x7fffffff) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00001a6000-0x5)='/dev/ppp\x00', 0x20000, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000504000-0x8)={0x3, 0x8}) fadvise64(r0, 0x0, 0x0, 0x0) connect$inet6(r1, &(0x7f000062a000)={0xa, 0x1, 0x6, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast1=0xe0000001}, 0x80000001}, 0x1c) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000223000)='/selinux/status\x00', 0x0, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) 2018/01/26 10:31:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00002d7000)='./file0\x00', 0x40040, 0x2) connect$vsock_dgram(r0, &(0x7f0000e80000-0x10)={0x28, 0x0, 0x2710, @host=0x2, 0x0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000182000)={&(0x7f00009cc000-0xc)={0x10, 0x0, 0x0, 0x0}, 0x101, &(0x7f0000403000-0xe)={&(0x7f0000d5b000-0x20)={0x20, 0x7, 0x6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0xc, 0x1, [@typed={0x8, 0x0, @void=""}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x0}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) 2018/01/26 10:31:08 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000000000)=[{&(0x7f0000001000-0x68)="f4e58506614ba364cfb09b12965fedbc5efce036e6d809dccd548709ee2ac23422e4312f88e9db672bea8931003bd308efd80fe51957d2d1d12745b104073938a9e583ee39b26d43dd9c90d38f1506bdd3db1d4cbb55eb2bf1f914e5c56c6c8e806d9854bf1071ca", 0x68}, {&(0x7f000056b000)="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", 0x1000}, {&(0x7f0000001000-0xc)="ea47eecf1564f1d634be0a08", 0xc}, {&(0x7f0000000000)="3f44af660804556cc53d8646503f948eeb4ac405dea44b6dfa1ef2fa687965eeac001a7125ef595d66b3c8ff99f9ccc456a659b5d16cfd23d9f170ae59f41efd356608a1fc12385849dc6f616c2c0a446df4e69d317e2bba4bd9f9f3ad2c17d9a3607981110a1984a2a6cede241e851a032e9a3f81ed48a6022d34f3", 0x7c}, {&(0x7f0000000000)="", 0x0}, {&(0x7f00004ef000-0x89)="0156c250f6d0376a5d3740725485412001c594b36cc37c786890377ed9ec9b24774021088bd1cb1db725d206b296c975e6fca7e56b144fe9a7bd1e71ea3b4415b0d688af779285567e52cbf04b653a0d01e4e41ad3e33d179bcc8cf5e762544b9a72c5d8fe7988e92ef8c8333a231e4fa0c65b34aebcbd8922487f35596753a034b1d505d972cc2c18", 0x89}, {&(0x7f0000001000-0xbf)="7a71e79102dc532418da275225bdb5c9163ee0b2d2e3ce4a2dd44dd2d67c809c8c094db760f60669fe18a8e5c035226e4fe5a2762fa4bcb1198102a18d4ee3105d0c1db0352b7f900d032b13dda806d8cd41ab9c1534986280f191c0769e6daf1a0974d9d3cde5027e4cd9672ba3eca3b717ab3cea11894fb1ae3d52d4750a38da7ec67e55258d2a7481e01f6224d123422cc8906a2f28b266bc471592805d01b6d7fdfdb650b232ad6853cd614aaa1a270690a029bab3973d1802419e6b06", 0xbf}, {&(0x7f0000001000-0x8a)="19b440c9c29d05021a91e4d04b49af260c49d83bda0285af2c51e6946345d19b33997ddcfc5d51bf6db27887ef0107861209cf6e5cff90a3b28b842bacf97c22da5d2a8994609ad0abe1d846af3b58374cb70cb399e63e6089cd4bab0dc382dd132de0d96734ac7eb3301c53143c5ba9f72b5d659d1024922cae0438d340bcd63539ac011f184c7fe1d1", 0x8a}], 0x8, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) flistxattr(r1, &(0x7f0000ec4000-0x72)=""/114, 0x72) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) [ 216.185961] binder_alloc: 1589: binder_alloc_buf, no vma [ 216.185984] binder: 1608:1612 transaction failed 29189/-3, size 0-0 line 2903 [ 216.186145] binder: 1589:1605 ioctl 40046207 0 returned -16 [ 216.186276] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.206251] binder: 1589:1602 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 216.206262] binder: 1589:1602 BC_INCREFS_DONE u0000000000000000 no match [ 216.209076] binder_alloc: 1589: binder_alloc_buf, no vma [ 216.209104] binder: 1608:1618 transaction failed 29189/-3, size 0-0 line 2903 [ 216.222939] binder_alloc: 1589: binder_alloc_buf, no vma [ 216.222962] binder: 1617:1621 transaction failed 29189/-3, size 0-0 line 2903 [ 216.228058] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.243407] net_ratelimit: 9 callbacks suppressed [ 216.243412] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 216.250174] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 216.255678] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.308606] binder_alloc: 1589: binder_alloc_buf, no vma [ 216.308634] binder: 1617:1621 transaction failed 29189/-3, size 0-0 line 2903 [ 216.333782] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.379997] binder_alloc: 1589: binder_alloc_buf, no vma [ 216.380052] binder: 1629:1638 transaction failed 29189/-3, size 0-0 line 2903 [ 216.381647] binder_alloc: 1589: binder_alloc_buf, no vma [ 216.381668] binder: 1658:1660 transaction failed 29189/-3, size 0-0 line 2903 [ 216.381820] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.391090] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.415670] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 216.420854] binder_alloc: 1589: binder_alloc_buf, no vma [ 216.420878] binder: 1658:1663 transaction failed 29189/-3, size 0-0 line 2903 2018/01/26 10:31:08 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000ed5000-0x4)=0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00003e2000)=""/191) 2018/01/26 10:31:08 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000f7f000-0x16)='/selinux/checkreqprot\x00', 0x200, 0x0) timerfd_gettime(r3, &(0x7f0000cc1000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f000091a000)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0]}) sendmsg$netrom(r3, &(0x7f000067b000)={&(0x7f00006f9000-0x48)=@full={{0x3, {"9b773a681790bd"}, 0x7}, [{"67d9e4064ee8cf"}, {"6b8678dc9d2308"}, {"0440208b72dfec"}, {"78f0b57d047f37"}, {"b7198d4a64607a"}, {"b5cef05161d2b4"}, {"6ebef5ee29e999"}, {"b000ae8b96d570"}]}, 0x48, &(0x7f00008f9000)=[{&(0x7f0000dff000-0xe0)="30a90d5965a667ee8da053042d5e74bd31fa1d42d1d195eb9ab72780f1f9c72a36c0a9bd300b2ca6867e98b7e5d43d2ae920236f46124f65ae28c63c069e69ec4178b049bda160aa8e3d63a39b6f20518a2b5c1c5c18070938c1398667b1fce69e1da45ba85cab1cbd8445874bbf6e27de49058ebd32b3455eb52b6fd562e6d49f6628e6684d3daafb000a37ac725cdb1b02689fa0586a3da4bc99205f13172688120788672d108dc0ec5b158a91ddefb8af99a664ce47f8fde14f519986b95571a0a4d2e26e0207312f91b402349f69d26f968fd5c1dd36d84d6ea3f80be51c", 0xe0}, {&(0x7f00000ca000)="5cd32e17b9004616fa7df6f05bd931ddeba5c1fb4027da3d03e0624d2883068ea2a0a4dd743f50e25c408cd3d7ae21d2e1895d6abc0eb2330f9569cdc13e76e6c0d9f5aace59da57773f", 0x4a}, {&(0x7f0000008000-0x46)="4e1479696e935af5fa26d96ce59e6d64b78ae4de524113cf5bd52aa476ee41e66db126cec78315120b11849db326f330b38b2cf38b327223171af98e4a0b64be927128836590", 0x46}], 0x3, &(0x7f0000c53000)=[{0x100c, 0x100, 0x80, "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"}, {0xf8, 0x109, 0x487d, "81bc3544f5e168504a44a5b07b4183b676e1cc8697156fdee00013f030330d4120c6c8c68518a3e200bdc18297572c14169b5ea98c37117721a59fb1522d8dde680a924d68515d3a17ca3095e09e512d96fca5dcb19556890d323895c3b35539a58a970ffa93a1b378e6e2e13e92c199089d73ca8b7db815520ea520ad7548ed0c0efb98d6170619e4f3b0c75b8d27abbb8fe501459160edd22ee7c5ff22f26ea0ee0a3210defbe87e4053a1e61203be5c10fcd1851b9bcf81c74f943a6760b09601eb5ec6eeb8815ae5844806a646ae525f866432e74696faf2133ff9d04fe206fe13b021736c0a4bf4bc"}, {0xe0, 0x117, 0xeca, "f9470607accf4d466208f5cff5f15047b1da710aadc348b7e13f7b2dbdd3ae2ef3b70791cc1254154f20ceb1a1cfa9e272d3f75ec7e6601a626c3fddc7a67969e2c81a27e8579d07d6d09df79d3ec641d3235f2b65aa3bd8ecff6f44b9e62a531f633d690e82fcc334952e86bbd35419d035f1f2ba1f9a25a949e035bbe665b869390b88874e0c22816e5c96db19e0d8599f2cd8467aefe55d80ba4a736c4d0feb7d90f5759aee8285f6057c4a360516fbfea5b819f992f72985baa493aa396c2a0a88d512f3815f4535259a7e154d4fabe106"}], 0x11e4, 0x4000}, 0x44) 2018/01/26 10:31:08 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) acct(&(0x7f00004d4000)='./file0\x00') r1 = add_key$keyring(&(0x7f00008cf000-0x8)='keyring\x00', &(0x7f0000095000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f00008b2000-0x8)='trusted\x00', &(0x7f000047d000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000a7e000-0xd2)="bef7b53486abdcf2d5723643b8e75c9737bcd503810c30567fde3beda7bec385a8a54193189ce47f3e82828a4a1430e3c70bf6d5896d4eb0be2133912f36ec5a5573197a54aafcb2ade050184128ea6cf9cf5773b62f017d568b953491773a7be138e21d7a308b5ac6072109647bfcc21cb5a9d017e6728d42b92bbbb01a0c7aae97bcf8e3acf6885aeaabb10bfa79191b194493c028784f6326adf9764061026322d73aa165cc63e5eca0f6e84283f2c8b1d00f34ff13e20c76f048c5595da2d4f3b4eb3265e9dd81c0c8e81f08afe5280c", 0xd2, r1) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0x0, 0xffffffffffffffff, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:08 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001000-0x8)='./file0\x00', 0x200100, 0x7d) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x436b, 0x3ffc) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40000000, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$random(&(0x7f0000f48000)='/dev/random\x00', 0x0, 0x1) write(r2, &(0x7f0000276000)="26008000420747f1938d000000000000000050f1458dbfea2e5659266b7368800017c76e328a5c54be59a39992d9ae5cf704f856c461482947a59bdec4a054294096", 0x9c39d31837fd36c5) getgid() 2018/01/26 10:31:08 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f000072e000)='/dev/snd/midiC#D#\x00', 0x5b, 0x10000) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000b4a000-0xd8)=@pic={0x3, 0x2, 0x9, 0x13bd, 0x8, 0x34, 0x5c86, 0x2902, 0x9, 0x0, 0x9f8, 0x8, 0x3, 0x0, 0xea, 0x80000000}) pipe(&(0x7f0000cab000)={0x0, 0x0}) getsockname$inet6(r1, &(0x7f0000245000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f000007e000-0x4)=0x1c) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) setsockopt$inet_dccp_buf(r0, 0x21, 0xc0, &(0x7f0000fae000)="d52040a319c07cf1b8d0c794fc59bb8b29cf4a3e2de894ada4c869c214a2c8fb8058382ff57938ead492c4e4", 0x2c) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000006000-0x2c)=[], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f000002b000)=0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:08 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000138000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000032b000)=0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00002c6000-0xc)={r1, 0x9, 0x30}, &(0x7f0000248000)=0xc) r2 = syz_open_dev$mouse(&(0x7f00004fc000-0x12)='/dev/input/mouse#\x00', 0x7, 0x1) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f00005e7000)=0x0) getsockname$inet6(r2, &(0x7f0000192000)={0x0, 0xffffffffffffffff, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @loopback=0x0}, 0x0}, &(0x7f0000d00000-0x4)=0x1c) openat$vnet(0xffffffffffffff9c, &(0x7f0000997000-0xf)='/dev/vhost-net\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$ax25(r3, &(0x7f0000d9b000)={0x3, {"ed7280bfc53b1c"}, 0x0}, 0x10) r4 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendto$llc(r2, &(0x7f0000fcd000-0x9b)="93212f5871047bee6eeca8edf12658b916191d018dedd09adb83812b996de38107e72c8a1c101be5479320720a30f4244f66723447ec2297467f895bdc8cb5ca0760fce0b9d74e6cf4db988f57b4e9e688e68f5aeb9402a56c8416c1b0a806d81a8e829efd809178bb00f26565c998caa0089fbd77b4f1834998245efd647e546718cc2dfcec1344e822c0c3c845f094fc435dd8d2e1404c87179a", 0x9b, 0x4080, &(0x7f000046d000)={0x1a, 0xd, 0x2, 0x80000000, 0x1000, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x11}, [0x0, 0x0]}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000393000-0x4)=0x0, &(0x7f0000198000-0x4)=0x4) 2018/01/26 10:31:08 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000001000)='/dev/audio#\x00', 0x97b, 0x4000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000002000-0x18)={0x6000, 0x4000, 0x8, 0x8, 0x100}) syslog(0x3, &(0x7f00007f3000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:08 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330, 0x0}, &(0x7f0000002000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000000)={0x6, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8982, &(0x7f0000000000)="") stat(&(0x7f0000670000)='./file0\x00', &(0x7f000091f000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r1) [ 216.428035] netlink: 'syz-executor5': attribute type 1 has an invalid length. [ 216.435642] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.533824] binder: 1589:1593 BC_INCREFS_DONE node 470 has no pending increfs request [ 216.541812] binder: 1589:1593 ioctl c0306201 2000efd0 returned -11 2018/01/26 10:31:08 executing program 7: syslog(0x4, &(0x7f0000001000-0xf8)=""/248, 0xf8) [ 216.596640] binder: 1677:1680 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 216.614184] binder: 1677:1680 BC_INCREFS_DONE node 481 has no pending increfs request [ 216.622636] binder: 1677:1680 ioctl c0306201 2000efd0 returned -11 2018/01/26 10:31:09 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) exit_group(0xfffffffffffff000) 2018/01/26 10:31:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0x80, &(0x7f0000a63000-0x1000)="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", 0x1000) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00003a9000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) connect$can_bcm(r1, &(0x7f0000a4a000)={0x1d, 0x0, 0x0, 0x0}, 0x10) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00004a1000)='/dev/mixer\x00', 0x6200, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000c35000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000c63000)={r2, 0x2}) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000110000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f00006d8000)=0x9, 0x4) 2018/01/26 10:31:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f000079c000-0x12)='/dev/snd/midiC#D#\x00', 0xcc21, 0x880) getsockname$packet(0xffffffffffffff9c, &(0x7f0000414000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f00007b9000-0x4)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00009a3000)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14}, 0x8, r1}) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000711000)='net/tcp6\x00') ioctl$EVIOCSABS3F(r3, 0x401845ff, &(0x7f0000796000-0x18)={0x3, 0xc93b, 0x6c2cbf33, 0x5, 0x7, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 216.650577] binder: BINDER_SET_CONTEXT_MGR already set [ 216.665468] binder_alloc: 1677: binder_alloc_buf, no vma [ 216.674579] binder: 1677:1687 ioctl 40046207 0 returned -16 [ 216.690993] binder: 1677:1680 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f00007d8000)={0x95, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$sndseq(0xffffffffffffffff, &(0x7f0000910000-0x54)=[{0x9, 0x2, 0x4, 0x5, @tick=0x8, {0x1, 0x5}, {0x8001, 0x6}, @result={0x0, 0x6}}, {0x0, 0x100, 0x91240b6, 0x2, @tick=0xffff, {0xd9a7, 0x5}, {0x35, 0x81}, @addr={0x5, 0x0}}, {0x4d11951, 0x7fff, 0x3, 0x6, @time={0x0, 0x0}, {0xffff, 0x1}, {0x2, 0x5}, @note={0x8001, 0x283, 0x1ff, 0xfffffffffffff800, 0x5}}], 0x54) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000d66000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendto(r0, &(0x7f0000e10000-0xd5)="1a7a85080e37895eb2245b3924260061ab9141da48fe5e6ccf139f7c2728241f2c0b5f16a2cc2d4d969f5307caea9412b9ba53a43b771d2399d26d940ea9d8365704a1fdd0f8e7efa2f2d200a37b7cea6cb24267658056e8636e27ee156c40837b77a8784866706e3a34abff8c595b94cf69a2cd7d8e30a69bbd336dc1fb21a4d6f7753e3954d889d50dcff338f52199568cee487ef2f4d34ce6e690168362eecdc819356c2f626c9756132a6c1e91b3d3d093ed83be460c8b75c19d514975f56dfeb1b55f9f1cae641bd70a1d7d1575b3b0e80ed0", 0xd5, 0x44080, &(0x7f0000ccf000-0x10)=@llc={0x1a, 0xff, 0x7, 0x1, 0x3ff8, 0xc3, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, [0x0, 0x0]}, 0x10) r1 = request_key(&(0x7f00000c0000-0x8)='big_key\x00', &(0x7f0000a1f000)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f000094c000)='\x00', 0x0) r2 = add_key$keyring(&(0x7f0000127000-0x8)='keyring\x00', &(0x7f00005b0000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x0) keyctl$unlink(0x9, r1, r2) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000fce000)={{0x6, 0xfffffffffffffff9, 0x49e, 0x1000, 0x80000000, 0xca21}, 0x4}) 2018/01/26 10:31:09 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) r0 = open(&(0x7f0000392000-0x8)='./file0\x00', 0x20000, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key$user(&(0x7f0000002000-0x5)='user\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000001000)="11bfb27a800811f2d064544d77d23bef5c6945ec9de1650a28accc409d2b12e2da18017a13530feab021eb8d74cc882933b8ccb9707c453f3c2aa71fc84f8548f0f198fe597658b182f401e4f57fe55ab1a946159a6bbcf4b1652b0940096bc85d2999c03e372eb3ca1fadd41acf919de7d77da9ae1c14dab2dc21b79bcfd5b95aa560b54a33c47161c42f9949cc9b149cf873994c76e96b843813455485e8", 0x9f, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) keyctl$get_security(0x11, r1, &(0x7f0000002000)=""/158, 0x9e) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x40) [ 216.691008] binder: 1677:1680 BC_INCREFS_DONE u0000000000000000 no match [ 216.718275] binder: 1693:1695 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:09 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x2, 0x2, &(0x7f00006df000)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000b78000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00000b2000-0x4)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000096000)={0x0, 0x0, 0x0}, &(0x7f00000a8000-0x4)=0xc) fchown(r0, r1, r2) r3 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000db5000-0x11)='/dev/qat_adf_ctl\x00', 0x0, 0x0) bind$bt_rfcomm(r4, &(0x7f0000b99000-0x9)={0x1f, {0x5, 0x8, 0x1d2, 0x6, 0x9, 0x3ff}, 0x10000}, 0x9) close(r3) r5 = syz_open_dev$mouse(&(0x7f00005fc000-0x12)='/dev/input/mouse#\x00', 0x3, 0x20000) mkdirat(r5, &(0x7f00002a3000-0x8)='./file0\x00', 0x1) r6 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r6, 0x40046208, 0x0) 2018/01/26 10:31:09 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) mlock(&(0x7f0000501000/0x1000)=nil, 0x1000) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000c38000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000844000-0x3)=0x3, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) r3 = pkey_alloc(0x0, 0x0) pkey_free(r3) fremovexattr(r1, &(0x7f000035d000-0x15)=@known='system.sockprotoname\x00') 2018/01/26 10:31:09 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0xffffffffffffffff, 0x4) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:09 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000975000-0x16)='/selinux/checkreqprot\x00', 0x400, 0x0) syz_open_dev$vcsn(&(0x7f0000a4b000-0xa)='/dev/vcs#\x00', 0x20, 0x10000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00001a2000-0x8)=0x801c) [ 216.718422] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.761122] binder: 1697:1702 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 216.761168] binder: 1697:1702 BC_INCREFS_DONE node 484 has no pending increfs request [ 216.761249] binder: 1697:1702 ioctl c0306201 2000efd0 returned -11 [ 216.778044] binder_alloc: 1697: binder_alloc_buf, no vma [ 216.778070] binder: 1693:1695 transaction failed 29189/-3, size 0-0 line 2903 [ 216.781940] binder: BINDER_SET_CONTEXT_MGR already set [ 216.781948] binder: 1697:1702 ioctl 40046207 0 returned -16 [ 216.798191] binder: 1697:1709 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 216.798200] binder: 1697:1709 BC_INCREFS_DONE u0000000000000000 no match [ 216.798896] binder: undelivered TRANSACTION_ERROR: 29189 [ 216.855419] binder: 1715:1718 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 216.855432] binder: 1715:1718 BC_INCREFS_DONE node 486 has no pending increfs request [ 216.855449] binder: 1715:1718 ioctl c0306201 2000efd0 returned -11 [ 216.877220] binder: BINDER_SET_CONTEXT_MGR already set [ 216.883888] binder: 1715:1726 ioctl 40046207 0 returned -16 [ 216.900465] binder: 1715:1726 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 216.900477] binder: 1715:1726 BC_INCREFS_DONE u0000000000000000 no match [ 217.022365] binder: 1674:1686 transaction failed 29189/-3, size 0-0 line 2903 [ 217.035523] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a9000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f000019b000)='/dev/rtc\x00', 0x100, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000f38000-0x18)={0x1, 0x0, [{0xc0000101, 0x0, 0x0}]}) 2018/01/26 10:31:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:10 executing program 7: syslog(0x9, &(0x7f0000001000-0xf8)=""/248, 0xfffffd97) 2018/01/26 10:31:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000b2a000-0xa)='net/route\x00') unshare(0x402) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) sync_file_range(r0, 0x0, 0x0, 0x0) 2018/01/26 10:31:10 executing program 1: mmap(&(0x7f0000000000/0xf57000)=nil, 0xf57000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x2, &(0x7f00000ba000)={0x0, 0x0, &(0x7f0000f56000)=@raw=[], &(0x7f0000f57000-0xa)='syzkaller\x00', 0x0, 0xfb, &(0x7f00001a8000-0xfb)=""/251, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) mmap(&(0x7f0000f57000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f58000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000f59000-0xd)='/dev/usbmon#\x00', 0x400, 0x800) r0 = syz_open_dev$sndmidi(&(0x7f0000f57000)='/dev/snd/midiC#D#\x00', 0x1000, 0x101000) mmap(&(0x7f0000f57000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f57000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000f58000-0x4)=0x0, &(0x7f0000f58000-0x4)=0x4) 2018/01/26 10:31:10 executing program 6: r0 = getpid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) writev(r1, &(0x7f00001df000)=[{&(0x7f0000fb4000)="2a6669a791c3dac048ea4d75dbe680fffa0f5c5da0a3d65bc325c6846d930efe0de5f1a972f5a9f0a91de98560690f481fcf482369fb69acc3915d0050f0", 0x3e}, {&(0x7f000056a000-0x78)="70ef9d7046191e65baa0a968b62cb41986946defc563e1f730da3be788d23b6c525e9f68ce44e8ba071cf480afa82f9fcf2ab72936aacb877847da1039e74f551965cac66dbcb835ba16d56c929927dd182fe95030e8440ebd80b88253daeee4c6753582bc994d4b909899d3dce9569d2cb51ed2ad96d6de", 0x78}, {&(0x7f0000374000)="acab73db0362ac60f500b55bf1215046aa978302a96e2f9bd82708f9d2aac0e445250ac45acd2e8e474eda340f2220508d389f50255de98803679305c38174a2e4be7daa8cd3b8249f02d51c026664a3613ed88fda5462cbb55073fc0aad6d94e8ebdbb1460771110ac47fc3bacc5c222e4cc5dad48ed6c5c95d8d9e21e60100f096dd1fc2b6f5d593db9c2d398555d0f33e3b8591666bc7725795b019e1528abe78fd4c0e77e25d06bd7e70aa67facd7f00eaf706c75118881168becfcb53f8d58575802c13ddbf97b11edc9676e766a34b55728768a8d593f8c43008a719", 0xdf}, {&(0x7f0000410000-0x19)="f51e62353a8940b035ea972a7d2eb03f7f27616025fe5e9105", 0x19}], 0x4) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(r0, &(0x7f000000e000-0x7)='fdinfo\x00') ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000432000)=0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f000000a000-0x18)={0x0, 0x0, 0x0, 0x0}) r4 = mmap$binder(&(0x7f000009f000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000c5d000-0x4)=0x0, &(0x7f0000b9d000-0x4)=0x4) bind$inet(r3, &(0x7f0000fda000-0xa)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000d4b000)=0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c06000-0x30)={0xffffffffffffff89, 0x0, &(0x7f0000006000-0x2c)=[@free_buffer={0x40086303, r4}], 0x15a, 0x0, &(0x7f0000589000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00002af000)='/dev/sequencer2\x00', 0x4000, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f00006ea000)={0x0, r1, 0x1}) 2018/01/26 10:31:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000013000)='net/xfrm_stat\x00') ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000c2d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000773000-0x18)={r0, &(0x7f0000dbf000)="1b01e0662ff6b92cbce36ccf26d4159f852d8085dd181bbdf45a69b227591f6a93315e3e6dfc61aa98272245e5188941e670bfae9ee9a6f11fda319b39b45e2d80d6c740b313", &(0x7f00008e5000)=""/125}, 0x18) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f00008c9000)=""/203) r2 = syz_open_dev$binder(&(0x7f0000e89000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000c99000-0x8)={0x0, 0x0}, &(0x7f0000037000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f000035a000)={r3, @in={{0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x100, 0x3}, 0x98) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r2 = fcntl$getown(r1, 0x9) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f000038a000)=r2) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 218.011650] binder: 1737:1740 transaction failed 29189/-22, size 0-0 line 2788 [ 218.024941] binder: BINDER_SET_CONTEXT_MGR already set [ 218.024950] binder: 1735:1741 ioctl 40046207 0 returned -16 [ 218.028438] binder: 1733:1742 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 218.028451] binder: 1733:1742 BC_INCREFS_DONE node 488 has no pending increfs request [ 218.028465] binder: 1733:1742 ioctl c0306201 2000efd0 returned -11 [ 218.034418] binder: BINDER_SET_CONTEXT_MGR already set [ 218.034428] binder: 1733:1749 ioctl 40046207 0 returned -16 [ 218.052940] binder: 1733:1749 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:10 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000134000)={@common='bridge0\x00', @ifru_addrs={0x2, 0x0, @rand_addr=0x800, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2018/01/26 10:31:10 executing program 1: openat$rfkill(0xffffffffffffff9c, &(0x7f0000136000)='/dev/rfkill\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1c) socket$netlink(0x10, 0x3, 0xb) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000868000-0x20)={r0, &(0x7f0000466000)='^', &(0x7f0000949000)="", 0x0}, 0x20) 2018/01/26 10:31:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x1, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:10 executing program 2: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x6037866757ac62f2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000004000-0x10)='/dev/input/mice\x00', 0x0, 0x20000) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001000)={{{@in=@multicast2=0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000003000)=0xe8) 2018/01/26 10:31:10 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000d8a000)={0x40, 0x8, 0x6, 0xd56, 0x0}, &(0x7f00006cd000+0x1de)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001000-0x20)={0x10000, 0x2, 0x8, 0x7, 0x40, 0x0, 0xfffffffffffffffa, 0x7f, r1}, &(0x7f0000722000)=0x20) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000ad0000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00004a5000)={0x0, 0x1c, &(0x7f0000d8b000-0x1c)=[@in6={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x9f}]}, &(0x7f0000f92000-0x4)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000c72000-0x40)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@ldst={0x2, 0x0, 0xb, 0x7a, 0x0, 0xfffffe30, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00004bb000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r4 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000c70000-0x4)=r3, 0x4e6b711c) write(r4, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db39e9ff4435eade", 0x26) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00009f4000-0x8)={r4, r4}) 2018/01/26 10:31:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000ef4000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000f22000)="", 0x0, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000139000-0xd)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) acct(&(0x7f0000b07000)='./file0\x00') rt_sigprocmask(0x3, &(0x7f0000d77000)={0x7}, &(0x7f0000864000-0x8)={0x0}, 0x8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000948000-0xc)='/dev/rfkill\x00', 0x2, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f00003e9000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f00009d8000)=0x14) clock_gettime(0x0, &(0x7f000092b000-0x8)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00004ad000-0x1c)={&(0x7f00008aa000)={0x1d, r3, 0x0, 0x0}, 0x10, &(0x7f0000043000-0x8)={&(0x7f0000eec000)={0x5, 0x200, 0x6133, {r4, r5/1000+10000}, {0x0, 0x2710}, {0x2, 0x1f, 0x7f, 0x6}, 0x1, @can={{0x2, 0x2, 0x6, 0x8001}, 0x8, 0x2, 0x0, 0x0, "a34ee5dedbcaa32c"}}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r6 = syz_open_dev$usbmon(&(0x7f0000310000-0xd)='/dev/usbmon#\x00', 0x20, 0x2) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000fba000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 218.052950] binder: 1733:1749 BC_INCREFS_DONE u0000000000000000 no match [ 218.095350] binder: 1737:1754 transaction failed 29189/-22, size 0-0 line 2788 [ 218.125483] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.131430] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00004ba000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000513000)={0xaa, 0x8, 0x0}) 2018/01/26 10:31:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00001f1000-0xd)='/dev/snd/seq\x00', 0x0, 0x294000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x939000)=nil, 0x939000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000540000-0x28)={@common='lo\x00', &(0x7f0000939000-0x5)=@ethtool_gfeatures={0x3a, 0x0, []}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000b2a000)='/selinux/mls\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000d37000)=0x0) [ 218.157582] binder: 1759:1761 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 218.179378] kauditd_printk_skb: 24 callbacks suppressed 2018/01/26 10:31:10 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0x1c1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getitimer(0x0, &(0x7f0000001000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) 2018/01/26 10:31:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000fc9000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000fb2000)={0x9, 0x9, 0xb4f}) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000c61000)=0x5, 0x4) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$PIO_FONTRESET(r2, 0x4b6d, 0x0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 218.179386] audit: type=1400 audit(1516962670.542:296): avc: denied { create } for pid=1762 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_connector_socket permissive=1 [ 218.220913] binder: 1759:1761 BC_INCREFS_DONE node 491 has no pending increfs request [ 218.234614] binder_alloc: 1759: binder_alloc_buf, no vma [ 218.235139] binder: 1759:1761 ioctl c0306201 2000efd0 returned -11 [ 218.248928] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/26 10:31:10 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) sendto$inet6(r0, &(0x7f0000002000-0x2)="", 0x3a4, 0x0, &(0x7f0000001000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/dsp\x00', 0x4a000, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) [ 218.248939] binder: 1759:1776 ioctl 40046207 0 returned -16 [ 218.266641] binder: 1779:1784 transaction failed 29189/-3, size 0-0 line 2903 [ 218.267196] binder_alloc: 1759: binder_alloc_buf, no vma [ 218.267217] binder: 1789:1790 transaction failed 29189/-3, size 0-0 line 2903 [ 218.267404] binder: 1759:1761 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 218.267414] binder: 1759:1761 BC_INCREFS_DONE u0000000000000000 no match [ 218.274238] binder: 1789:1790 ioctl 4b6d 0 returned -22 [ 218.274299] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.308982] binder: 1789:1790 transaction failed 29189/-22, size 0-0 line 2788 [ 218.311980] binder: 1789:1793 ioctl 4b6d 0 returned -22 [ 218.313285] binder: 1779:1797 transaction failed 29189/-22, size 0-0 line 2788 [ 218.318248] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:10 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/vcs\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000751000-0x4)={0x6}, 0x4) 2018/01/26 10:31:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f000017b000)={@generic="6959e4efa3e5a483927e19885ec17e3a", 0x1}) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndmidi(&(0x7f000019e000)='/dev/snd/midiC#D#\x00', 0x8, 0x40) 2018/01/26 10:31:10 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x252, 0x0, &(0x7f0000006000-0x2c)=[@enter_looper={0x630c}], 0x14, 0x0, &(0x7f00006cb000)="95f57ff6563f61fe6333ea4488610475d028427e"}) 2018/01/26 10:31:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f000028c000-0x12)='/dev/snd/pcmC#D#c\x00', 0xffff, 0x800) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000531000-0x8)={0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000617000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001000-0x38)={&(0x7f00003bc000-0xa)=@file={0x0, './file0\x00'}, 0xa, &(0x7f000082d000)=[], 0x0, &(0x7f0000001000-0x10)=[@rights={0x18, 0x1, 0x1, [0xffffffffffffffff]}], 0xfffffe85, 0x0}, 0x0) bind$unix(r2, &(0x7f0000c46000-0xa)=@file={0x1, './file0\x00'}, 0xa) pipe(&(0x7f0000c27000-0x8)={0x0, 0x0}) listen(r2, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00007f3000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mq_timedreceive(r4, &(0x7f00009cf000-0xb6)=""/182, 0xb6, 0x9, &(0x7f0000638000)={0x0, 0x989680}) connect(r1, &(0x7f000009f000)=@un=@file={0x1, './file0\x00'}, 0xa) r5 = syz_open_procfs(0x0, &(0x7f0000a93000-0x9)='net/unix\x00') sendfile(r1, r5, &(0x7f000097d000)=0x0, 0xff) 2018/01/26 10:31:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f000056c000)='/dev/usbmon#\x00', 0x6, 0x200000) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00004c0000-0x16)='/selinux/checkreqprot\x00', 0x20000, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$inet(0xffffffffffffffff, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000bdc000)=""/160) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000f6000)={r0, r0, 0x369, 0x5, &(0x7f0000d1a000)="c8804f4a5c84f43f04a68557a37f153e4b4d3191238f366803e5ba12575382139e5232d879d7e5cf276525d566344928b9a52dce4738ab2d0e3b37cefc96d236efbf1790c935a4ea62cc6cae076d1e457a7e2ea3f75f5086e9572703ba196d39542b117c944a878256", 0x3, 0x80000001, 0x0, 0x364, 0x15, 0x1f, 0xffffffffffffffc0, "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"}) ioctl$TCSETAF(r0, 0x5408, &(0x7f000051f000-0x14)={0x1, 0x0, 0x95de, 0x6, 0x7, 0x1, 0x2, 0x4, 0x5e, 0xff}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000799000-0x8c)={0x1, 0x5, 0x6, 'queue0\x00', 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 10:31:10 executing program 5: pipe(&(0x7f0000c67000-0x8)={0x0, 0x0}) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00009a3000-0x4)=0x0, &(0x7f0000254000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000c7d000-0x8)={0x0, 0x0}, &(0x7f0000618000)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00008b6000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000726000)=[{{&(0x7f0000cb0000-0xc)=@nl=@kern={0x0, 0x0, 0x0, 0x0}, 0xc, &(0x7f000072e000)=[], 0x0, 0x0, 0x0, 0x0}, 0x0}, {{&(0x7f00009c4000)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9, &(0x7f0000b63000)=[{&(0x7f00003cb000)=""/203, 0xcb}], 0x1, 0x0, 0x0, 0x0}, 0x0}], 0x2, 0x0, &(0x7f0000fd4000-0x8)={0x0, 0x1c9c380}) 2018/01/26 10:31:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000d6a000)='/dev/binder#\x00', 0x0, 0x2) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = syz_open_dev$midi(&(0x7f00003f0000)='/dev/midi#\x00', 0x9, 0x410000) ioctl$VT_RELDISP(r1, 0x5605) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000585000)={0x0, 0x0}, &(0x7f0000e9e000-0x4)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000dad000-0x8)=@assoc_value={0x0, 0x200}, 0x8) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000109000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f000098f000-0x4)=0x0, 0x4) accept4$ipx(r1, &(0x7f0000b99000)={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f0000e2b000-0x4)=0x10, 0x80800) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) writev(r0, &(0x7f00007f2000)=[{&(0x7f000036c000-0x1000)="b6b23ebe2094b6c296b7f43c2ff9cec9a414ac8ab00820fbde9a0f4a1bd2773a23ca881cb2b8f6f7676ec3e23411c9a7b90c0d98413505ae48a6f9680b3b1c7d9d2083981adb57cc49d7c44eb888269d5ddad8a8ece4937a8c1bd5f6d54eb2fee4344a60a71f21a02b71241caa5bfb30ef20735987815557dd0712275e1cab0562f6e71d00f07d832fff291844ad8c73a6b27652f46020e42eebd5fd185751187d8455017d6e42c6492f282d3fcea50ef7e26862684165a175a262d5fdb1562a9dd53028ed11564d449b40c3dc6e1500aff5eb7c7ac29b27bcac0249c746425160e164ce64e5180f5b19b180bfa5a14ff6d6bac621a1723ffe9dbd05f91bed6ffd9ba2ca0ea7f3eca738786c6cf9be08976ab48f5ce579d5053ef537ba15f9ca286ef7299567bf2b50512cba39ca22e4eafa46593dfb19b29e524a5e0b527f23c3fd666357e9b397f2e720146853c8a4e590b620fd4f0c83a6a0d626fbc2d018596b5bd8b2b9496d3a83f8760b1fb0a6ec9de29b146334717e8cab34996e8474bbde59447f2cc876096f80b10134ed5d69027a9cdd109de0d161003880d10536725ab38afdff82208b8ca05f7661bc482b841d815c35660d7f7b036d0426f3cbfcd1448782af41483936f20b09e239d53be9df805d1a4dced5167eb9b8c8c681451329adcea047a3a00461916692c523647ed2b81b39080417072cf26db77335331fd9d49b1bea2ba448e3e7822109d5a115c5da661c65193ae60923e37b8751d7f6eb2511fc9b55963fca553c0c6d065240b94c889af1781a8671ce4ec91744820d8c3905b2eafb38d909b45175801885e1a1059a9b3db85a95f2172947697e56244fd7b4b412a33b9adc061fca8c742d05f50ce0d2b4280749ce13488259d37074ba94540a5b9cdf426fdf4563163e81c9769b7a84db101c03d88cec1eb18b7ded9b957734dde7b896b0b9c1a76e63104a02a06e917a0e3b608276ad2860a17c76e5c5a07dd6917fa497adc8ff56e2ec6f2bcc09d8061f504c5d5128b4e89bcb2207df70db9d7cceff2fc266443b6d34bb651d0def84768f750279e8b8ab42a8ba7f4f265e0051333f346bc113c56b179b81421601bd60cd071ee198d84ca6abd13eb3ecbc6aaab47aaae592f97c3747c37266e8ad2358029989919b7f5dcee8b60e1d32a0a94d91cc073174ef180d1b3cd4aedb77f1e898f6df02cf3fe57db328abb0ac8d88e5f0d3015f10e74f00e90ab3acbd2e8917e130d2961b1895b5e3252e8a74a0fe0579330407de6a6644cdb7cef78f6ebdf9ef2aa07b32c587d93be72cce852d1ccdf83d1740e0b5c2971b340d98e584b883878ebcac7c91c0c7ce6c23b459b8feb49133d78e965ece4c3f5e11f929d5ef541e2ad8311c4c7412c045b4abf9d14e0f8fd1fd5f851511519e45bee4f00ebb6fddcf38b0936c7aaec7e846631d8f0f0f032fd578dba501d6c7c63bdc858c6c80cc37ac3992b4dec23d5c2304f15849f696bf1327c3d2ad87908a529bcd398b40c1323462ae597ac24b707041063050c35c632af02461a3c14cbb6f2a573aa4c154bebe75e8e8254c2df4106fcac6a295317cde6123d9148693790211cc12a7c3cbfaf7e5da983827f7d430c4a858842057ac860fa3891fe7f59c71b7256618198ceb0253d0f6afe9515af1d3a97a69f5d3f8def2f0b2dd0cbaddedc76ac3e57763ea544187493419bb6b0cc14df727f31e6395db760806edcdc37804870ee006fe60471f10f0313fc1f9f365038472cf978d091e94338af5dc37e12e30d4e16b13675eea7d36a18f3e39db3619cdf573058e89f95702cf8bf8ca88b4f4989e4a7086a682a13b477d4cac8bdb595c1eeb2463e57538e896ca3168292cdcf7779a43f4113bdbab6d78aa986ac2766bb55a40f0f59aa7eac6af7db18e7e308ba6df385fdd13a8cfa44b7bcc0b9688588bd80089298088ae533de7af3627718726709d4f5d773a6f80c058d22ceece37bd5b3e76e089de57cf80ea6a3b1972cbb086b9e03d228f0057089e04baa357cfb3a9e5941c7643e903ca252509cc4b9a6202ecb3faae31d6309135668d9a55f3a8d64b65496429d74a1d236f17c9f0d60f0924f1fab0f40bbde913fc4eeda486145a39026725897734fff68ff083d3c07e61f937093be31b0cc6dc", 0x601}], 0x1) mq_open(&(0x7f00009bc000-0x1)='\x00', 0x0, 0x1, &(0x7f0000f05000-0x20)={0xbe, 0x7fffffff, 0xb0, 0x0, 0x5e1, 0x6, 0x100000001, 0xfdd7513}) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f000081e000-0x12)=""/18, &(0x7f0000804000-0x4)=0x12) ioctl$int_out(r2, 0x5462, &(0x7f0000e22000-0x4)=0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000f05000-0xc)={&(0x7f0000165000-0x8)='./file0\x00', r1}, 0xc) read(r0, &(0x7f0000327000-0x5)=""/5, 0x5) [ 218.355877] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.361384] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.381630] binder: 1801:1806 unknown command 0 [ 218.387197] binder: 1803:1810 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000ea9000)={0x4, 0x5}, 0x2) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000fc1000)={&(0x7f0000c6f000-0x14)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0xfffffffffffffffe) 2018/01/26 10:31:10 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f000028f000)='/dev/vcsa#\x00', 0x5, 0x202000) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000477000-0x8)={0x3, 0xffff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 218.387210] binder: 1803:1810 BC_INCREFS_DONE node 496 has no pending increfs request [ 218.387226] binder: 1803:1810 ioctl c0306201 2000efd0 returned -11 [ 218.403398] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/26 10:31:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000014000-0x4)={r0}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000d37000)=0x0, &(0x7f00000ef000-0x4)=0x4) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000540000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000000000)=@ethtool_wolinfo={0x26, 0x40, 0x0, "35661b99c87d"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 10:31:10 executing program 1: restart_syscall() socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000dea000)='/dev/audio\x00', 0x800, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00008d6000-0x2c)={0x100a, 0x8, 0x4, 0x2009, 0x4, r0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xfffffffffffffef0) pwritev(r0, &(0x7f0000842000)=[{&(0x7f0000ebc000)="bf32a499af9c3514eae55cdf058dd40d3616ed4b4a40f1391aa7938d9f19b3c1afe9f00414dbab28d6ccff3c", 0x2c}, {&(0x7f0000fcb000-0xb5)="9363c227d6f2fa5fbbb2bf70ca1516f98cea68c968f60d686dbc6f62ce4a3f7ed67b947a31815f82ee09ab557f733a047bc9fa9d43f156f5a863c785335fd3837a69418fd92f5de480dbfeb130ceb2665ee2090811d7da111f220b132ace4927b43b6fcb68cfc1e8009a4c21d7656f128b4e3e2b955225d12a3841e89efccadc757affbb45194347db53889696367ca2f0f8e625cb9911eb72dec02312c82054ad8bc87d3f422f54f87d2e83785a4febf9f3fe5d5f", 0xb5}, {&(0x7f0000f52000-0xd7)="76e07a4d76edb14505ab55d66f8dfa467ea7bdab7cf0af4358430862a5fa214b29165d84af37eaae0067d29e5cc3012a587eb89257a2e53799f3cab587089f4d736c072ecbaac360baf819905a595de76f5a990f3bae503d32077081a280e6d09e180ed0121af4202d6e17a7bf47e6efe9db35f789fda32e540db06cbfa2cb273e735865b6cb5650ce3b45b0863d11b26247916648fc244d3fb6ed042913da22b2d95c928399bb1a9da9e2ee835615d3c4a0d6d531ceabaeaa1d5f4809f703d049666ee28758c9f213d326e0b08d92ed8b466dc54b0f35", 0xd7}, {&(0x7f0000240000-0x5c)="50990c61fe097ad0be1e3d523056059746d71e659622c371a99908806a67e5f9128cbf46c6d9600de7af91764a9e88bbb408c37d3a8fac56709df1169a0af533677342af787cc33796fca362aed0851023746cf0680c5cf692c54485", 0x5c}], 0x4, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000026000)=0x0) 2018/01/26 10:31:10 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x21, &(0x7f0000f8e000)=0x0, &(0x7f0000001000-0x4)=0x4) r1 = open(&(0x7f0000a40000-0x8)='./file0\x00', 0x10000, 0x15) ioctl$TIOCLINUX6(r1, 0x541c, &(0x7f0000163000)={0x6, 0x4}) [ 218.403410] binder: 1803:1814 ioctl 40046207 0 returned -16 [ 218.412702] binder_alloc: 1803: binder_alloc_buf, no vma [ 218.412727] binder: 1807:1812 transaction failed 29189/-3, size 0-0 line 2903 [ 218.412962] binder: 1803:1814 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 218.412972] binder: 1803:1814 BC_INCREFS_DONE u0000000000000000 no match 2018/01/26 10:31:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$packet_buf(r1, 0x107, 0x5, &(0x7f000013b000-0x22)=""/34, &(0x7f0000a15000-0x4)=0x22) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:10 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) rt_sigaction(0x5, &(0x7f0000acf000)={0x4, {0x101}, 0x40000000, 0x8001}, &(0x7f0000815000)={0x0, {0x0}, 0x0, 0x0}, 0x8, &(0x7f00005b7000)={0x0}) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:10 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x22) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r2 = socket$packet(0x11, 0x400000002, 0x300) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000976000)='/dev/autofs\x00', 0x80000, 0x0) sync_file_range(r1, 0xffff, 0xfff, 0x1) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e05411, &(0x7f00006f2000-0x99)=""/153) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00009be000)={r0, r3, 0x3, 0x1}, 0x10) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000dd3000-0x8)={0x100, 0x9}) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 218.413753] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.438270] binder_alloc: 1803: binder_alloc_buf, no vma [ 218.438297] binder: 1807:1819 transaction failed 29189/-3, size 0-0 line 2903 [ 218.456279] binder: 1801:1822 unknown command 0 [ 218.456291] binder: 1801:1822 ioctl c0306201 20007000 returned -22 [ 218.458558] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.470089] binder: 1824:1827 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 218.470100] binder: 1824:1827 BC_INCREFS_DONE node 499 has no pending increfs request [ 218.470116] binder: 1824:1827 ioctl c0306201 2000efd0 returned -11 [ 218.480363] binder_alloc: 1824: binder_alloc_buf, no vma [ 218.480388] binder: 1828:1830 transaction failed 29189/-3, size 0-0 line 2903 [ 218.480432] binder: BINDER_SET_CONTEXT_MGR already set [ 218.480450] binder: 1824:1831 ioctl 40046207 0 returned -16 [ 218.480517] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.499339] binder: 1824:1831 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 218.499351] binder: 1824:1831 BC_INCREFS_DONE u0000000000000000 no match [ 218.519608] binder_alloc: 1824: binder_alloc_buf, no vma [ 218.519636] binder: 1828:1834 transaction failed 29189/-3, size 0-0 line 2903 [ 218.529573] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.557794] binder_alloc: 1840: binder_alloc_buf, no vma [ 218.557821] binder: 1843:1847 transaction failed 29189/-3, size 0-0 line 2903 [ 218.558639] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.561502] binder: 1840:1844 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 218.561515] binder: 1840:1844 BC_INCREFS_DONE node 502 has no pending increfs request [ 218.561530] binder: 1840:1844 ioctl c0306201 2000efd0 returned -11 [ 218.566848] binder: BINDER_SET_CONTEXT_MGR already set [ 218.566864] binder: 1840:1854 ioctl 40046207 0 returned -16 [ 218.576993] binder: 1840:1854 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 218.577009] binder: 1840:1854 BC_INCREFS_DONE u0000000000000000 no match [ 218.577650] binder_alloc: 1840: binder_alloc_buf, no vma [ 218.577677] binder: 1843:1847 transaction failed 29189/-3, size 0-0 line 2903 [ 218.614340] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00009d1000-0xd)='/dev/binder#\x00', 0x0, 0x4000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000815000-0xf)='/dev/sequencer\x00', 0x40000, 0x0) bind$bt_sco(r1, &(0x7f00003e1000-0x8)={0x1f, {0x4, 0x1, 0xef26, 0x0, 0x6, 0x9}}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000c1d000)={0x0, 0x64, "89135c5dae96c2c22072457dabc7e94214280118977b2a14a1e4c65c2e0819b9e9e4a57941c18cec877fd5629203912943394cac631c3f7bdd9c1cdc5f13a7039f4c292f3d482c323928bb09318e52da740bf4f55a5b8e068d123d7b6a73cac169eda261"}, &(0x7f0000824000)=0x6c) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000c3e000)={r3, @in6={{0xa, 0x1, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x4, 0x1ff, 0x1, 0x7, 0x8358, 0x9, 0x5, 0x1, 0x3, 0x5, 0x472, 0x8, 0x6, 0x7fffffff, 0x4]}, &(0x7f0000b98000)=0x108) setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f000037f000-0x88)={0xffff, {{0xa, 0x2, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @empty=0x0}, 0x800}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) r4 = open(&(0x7f0000d02000-0x8)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$TTUNGETFILTER(r4, 0x800854db, &(0x7f00001ec000)=""/4096) lremovexattr(&(0x7f0000c5e000-0x8)='./file0\x00', &(0x7f0000b58000-0x11)=@random={'security.', "d86d643573756d00"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000a7b000-0xc8)={0x1, 0x8000, 0x1, 0x8000, 0x3, [{0x7ff, 0x7fff, 0xa6b, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0}, {0x1f, 0x1ff, 0x7fffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, {0x3f, 0x4, 0xfffffffffffffff9, 0x0, 0x0, 0x3104, 0x0, 0x0, 0x0}]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) fstat(r2, &(0x7f0000656000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pwritev(r0, &(0x7f0000d01000)=[{&(0x7f0000d7e000-0x7f)="70fd8b802cf5c30db143dbdcbac6c34ed460a9e1be806ad253596fcfc76d5e6fa33e19eb38e94a039b28479ba07be8dd21e3b1329cd0fa6eb840f17599c1b89472eadcbbe6e4a08b3cf499477c036d6ead729bc589355e248b559552f71dde0ef0675a9cdbbef1cae4960aed9d7ff6e598e6b811d0ac14dfc31e6b6e3030e3", 0x7f}], 0x1, 0x0) keyctl$session_to_parent(0x12) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000e32000)=0x200000000000000) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000bdc000-0xe8)={{{@in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000279000-0x4)=0xe8) write$selinux_user(r1, &(0x7f0000e99000)={'system_u:object_r:udev_var_run_t:s0', 0x20, 'unconfined_u\x00'}, 0x31) r7 = getpid() syz_open_procfs(r7, &(0x7f00007c2000)='limits\x00') syz_open_dev$tun(&(0x7f00005ca000-0xd)='/dev/net/tun\x00', 0x0, 0x1) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f000040a000)={0x3, 0x1, &(0x7f0000309000-0xed)=""/237, &(0x7f0000bfd000)=""/157, &(0x7f0000efd000)=""/198, 0x1000}) setreuid(r5, r6) 2018/01/26 10:31:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r4, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r7, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f00001a5000)="89c032cebbefb02b54d653777a066110472910b93324be6c4b5b00b0d47bbfc44f7a46e1ffba318f90e46cf135632a430036d24f26722a479523f7290c6da54b3370ac2a0fadc54e4bb456cd45d21e7fca8a1c2ff82a049bc58e7846286e3226a18a1e5974c94d6c8d3d67cc447bc7d99596fed4511e5ce86e0cf46f4921db7249026eb0a1020a24d700cb7b357cebbd3f219857d89c0c7ea639b8452a0e29db0ee56e5c36089b4fcee041f0720f49d725fb28df01a1dba306c5302aa0530f20536dd370553630d69d88cd297c8d0d064a6eb4537924cfe838") getsockopt$inet6_buf(r6, 0x29, 0xcc, &(0x7f0000004000-0x1e)=""/30, &(0x7f0000001000)=0x1e) fsetxattr(r2, &(0x7f0000ea1000-0xe)=@known='system.advise\x00', &(0x7f0000938000-0x1)='\x00', 0x1, 0x2) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00009b8000)=0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000539000-0x10)='/selinux/policy\x00', 0x0, 0x0) 2018/01/26 10:31:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000f51000)=0x0) mkdir(&(0x7f0000632000)='./file0\x00', 0x0) r1 = open(&(0x7f0000746000-0x8)='./file0\x00', 0x400406, 0x0) recvmmsg(r0, &(0x7f0000e39000-0xa0)=[{{0x0, 0x0, &(0x7f00002e7000-0x48)=[{&(0x7f0000049000-0x4f)=""/79, 0x4f}, {&(0x7f00006ca000-0x98)=""/152, 0x98}, {&(0x7f000075c000)=""/104, 0x68}, {&(0x7f0000059000)=""/223, 0xdf}, {&(0x7f00007f9000-0x90)=""/144, 0x90}, {&(0x7f000098c000)=""/232, 0xe8}, {&(0x7f0000254000)=""/94, 0x5e}, {&(0x7f00004a0000+0xe4f)=""/101, 0x65}, {&(0x7f00007b8000-0x2f)=""/47, 0x2f}], 0x9, &(0x7f0000cec000)=""/121, 0x79, 0x8}, 0x800}, {{0x0, 0x0, &(0x7f000046a000)=[{&(0x7f0000915000)=""/24, 0x18}, {&(0x7f0000684000)=""/4, 0x4}], 0x2, &(0x7f000086f000-0x26)=""/38, 0x26, 0x20}, 0x4f8}, {{&(0x7f00008cd000)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, 0x9, &(0x7f000029e000-0x8)=[{&(0x7f0000cb5000-0x87)=""/135, 0x87}], 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x80000001}, {{&(0x7f000077f000-0x2)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8, &(0x7f0000209000)=[{&(0x7f000079c000)=""/244, 0xf4}, {&(0x7f0000fd4000-0x8c)=""/140, 0x8c}, {&(0x7f000048e000-0x46)=""/70, 0x46}, {&(0x7f0000511000+0x363)=""/155, 0x9b}, {&(0x7f00008f2000-0x94)=""/148, 0x94}, {&(0x7f0000dc7000-0x2a)=""/42, 0x2a}], 0x6, &(0x7f00007c9000)=""/9, 0x9, 0x5}, 0x4}, {{&(0x7f000089e000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, 0x58, &(0x7f0000ba8000)=[{&(0x7f00000e6000-0x1000)=""/4096, 0x1000}, {&(0x7f0000917000-0x4f)=""/79, 0x4f}, {&(0x7f0000ed9000)=""/0, 0x0}, {&(0x7f0000140000)=""/243, 0xf3}, {&(0x7f0000a49000-0xe4)=""/228, 0xe4}, {&(0x7f0000fa3000)=""/155, 0x9b}, {&(0x7f00005ff000)=""/64, 0x40}, {&(0x7f0000bf8000)=""/94, 0x5e}], 0x8, &(0x7f00006e7000)=""/207, 0xcf, 0x2}, 0x6}], 0x5, 0x2, &(0x7f00004a6000-0x8)={0x0, 0x0}) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000143000)='./file0\x00', &(0x7f00007d1000)='ramfs\x00', 0x0, &(0x7f0000802000-0x1)="") mknod(&(0x7f0000eae000)='./file0\x00', 0x4, 0x9) ioctl$KDSETMODE(r1, 0x4b3a, 0x3) execveat(r1, &(0x7f0000fd5000)='./file0\x00', &(0x7f0000394000-0x38)=[], &(0x7f0000141000)=[&(0x7f0000fd5000)='net/sockstat6\x00'], 0x0) 2018/01/26 10:31:11 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000cf6000-0xc)='/dev/rfkill\x00', 0x10000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0086426, &(0x7f0000000000)={0x4, &(0x7f0000000000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000000)={r1, 0x1}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$unix(r0, &(0x7f0000002000-0x8)=@abs={0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000002000-0x4)=0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000001000-0x4)=0xff, 0x4) 2018/01/26 10:31:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f000073b000)='/dev/rtc\x00', 0x80, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000c53000-0x4)=0x1, 0x4) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:11 executing program 1: mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000b2c000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000df5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000df5000)='/dev/sg#\x00', 0x0, 0x0) readv(r3, &(0x7f000037e000)=[{&(0x7f000037f000-0xb)=""/1, 0x1}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f0000009000-0x8)=0x3f) mmap(&(0x7f0000000000/0x9d7000)=nil, 0x9d7000, 0x0, 0x55071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000df6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$llc_int(r3, 0x10c, 0x5, &(0x7f0000df7000-0x4)=0x3, 0x4) fcntl$setown(r1, 0x8, r0) fcntl$setsig(r1, 0xa, 0x12) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) r5 = fcntl$dupfd(r4, 0x0, r4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000d4d000-0x18)={0x0, 0x1, 0x30, 0x80, 0x0}, &(0x7f0000a49000-0x4)=0x18) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00005ba000)={{0x6, 0x300}, 0x20}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f00003c0000)={r6, 0xac, "35ecec5b25db27c96f6fb2f3f5f1617a046b22d16f593630de52d087f00ad9e5f51eb3307d216ffcbfbbf8eee4977eb888610a815a4383c7c4c196252626603eb5f597fdf4104e7d45cbcda81a01862c7ee5395fbca9191d2d3c8762a55c3907ca7b49c3a167b6a05c7569a0bcb93db940f405ed66b50b8f01dfc58f467f6b3450400df3ade2e039fbced3b3a0a2d7481f00b212078a63440abe76d96de90c912fddf54ae9f15395b353cda7"}, &(0x7f0000576000-0x4)=0xb4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f00001b9000-0x4)=0x2800000, 0x4) poll(&(0x7f0000b2c000)=[{r2, 0x0, 0x0}], 0x1, 0xfffffffffffffff8) dup2(r3, r2) tkill(r0, 0x16) 2018/01/26 10:31:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000040e000)='./file0\x00', 0x80c0, 0x10) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000b8e000)='/selinux/status\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e93000)={0xaa, 0x3, 0x0}) r2 = syz_open_dev$usbmon(&(0x7f00006bb000-0xd)='/dev/usbmon#\x00', 0x32a, 0x200) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000d71000)={r2, &(0x7f0000b98000)="d748231b7c3c4f3aabb3e05f23983a391fee4cbb9a5dddb991bcca5a64782c856f5548c8239d07b6cdf96e", &(0x7f0000eb3000)=""/4096}, 0x18) ppoll(&(0x7f00004c8000-0x50)=[], 0x0, &(0x7f0000000000)={0x1000000077359400, 0x0}, &(0x7f00004c7000)={0x0}, 0x8) r3 = syz_open_dev$sg(&(0x7f0000245000-0x9)='/dev/sg#\x00', 0x0, 0x0) r4 = syz_open_dev$mice(&(0x7f0000006000)='/dev/input/mice\x00', 0x0, 0x0) fstat(r4, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_bt_hci(r3, 0xc00448f3, &(0x7f000014b000-0x200)="01497da9161018c20e0701d209dc081d474933f1b789531ad69b4d0189bce251164b44c082df0a804194bbc99be0d46c05f0ccaded4c34c7ef193de40d3c33abac27d88b4b86da2450e6ea2bb23593baf09f2e0200000000000000262c5bbfb60478c1e6df23ea03cd499b9ba246d0676beb55c02a9623840bd9e500000000000100000e56f1bad3c6ed02cf77158b275705fe205c80072df2c3175e3d776ea37cf7c60ae2b5366c7a5cafd525fe83551c353dce4dad8f6559e7630c3657027d9aae04e3efab2831ab524de791adaa517fe6ece4d1edaa0401a75b4906209324f887e70700000000000000475428a2f28af05ac2072a150b3c5c63f90bc64f2807942dfe72580f270259f77520a9c39c92a53247279869a53f57484b3de9ffc50ff550c69c954d07272536902ad16c32117ba6879dbdd58c37aaa84f24915fc34840058dadf9789158969d35a0cfb23440116143c22a0061c0f9d8cc7941ca542991d56dbcba11508ca662cbd7d9a658414e3905c56e4108aa1b27372756a2876b2975ef50eaa4fca167aa618a17261cbb75e9befb41a09b14036d8222a61262981bcf79121afb43d0ba5c5e93aa3211cc57415c387cf0369bf65d1d3b08f3ec0e794750027e57b3694756cbcbff3d502e92992d81868d99a6a5cd793628aeb5bfe19cc08dabf24ab3000010004439e72a54446ac526e2ac86ac443d835ef6df") ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x4009, 0x0, 0x0, 0x200020000000}) ioctl(r3, 0x2285, &(0x7f0000007000)='S') openat$ptmx(0xffffffffffffff9c, &(0x7f0000dfe000-0xa)='/dev/ptmx\x00', 0x301080, 0x0) 2018/01/26 10:31:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000ccb000)=0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[], 0xfdec, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00002fd000-0x9)='/dev/vcs\x00', 0x900, 0x0) ioctl$TIOCCBRK(r2, 0x5428) timer_create(0x5, &(0x7f00004e8000)={0x0, 0xc, 0x6, @thr={&(0x7f0000b34000)="e3b7ed8a2b1d2f11f215c7953185115735ed90c1c6f821ddc4604303c5f2a4eeea9d62b2e5f570eba0091f2f27351754", &(0x7f0000f1d000)="2cbfa8bf303ddc2f6574b34496cc2ecb18f81d08a4aadc504b2eca2a4e2faf5f0d1ce251f33c132bbc59b558724a644661688987686802cc55ba010988eead12cc6bd68fa632c26bd6996205876fffad95fa5c3b51d96d83d0b6a68a4cf33a0c875db20512a87492ca482095ac579c60246a7481235fdc7cbd3ddab9c0e70a871e59debeed44f29fe462209e67aca46a84cd0f1553a261b037a7afe617dbec521ae0d78f8141454fa0b5041d02543d281b5bcd4b7d51b109c8328acc3cf2caba5df5a73e9e3c03739771bd21008f8c2461ed07e3f93dfc9bcd94d8c05ff344060597641369917ac18e2dff"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000f7e000)=0x0) fchdir(r1) timer_delete(r3) [ 218.767923] binder: 1801:1806 ioctl c0306201 20007000 returned -22 2018/01/26 10:31:11 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x53, 0x40) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000001000)={0x6, 0x20}) 2018/01/26 10:31:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndpcmp(&(0x7f0000e5c000-0x12)='/dev/snd/pcmC#D#p\x00', 0x4, 0x200000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000f90000)={0x0, @in6={{0xa, 0x1, 0x1, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x10000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x9, 0x81, 0x3, 0x8c4}, &(0x7f000030b000-0x4)=0xa0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00005b1000)={r1, 0x1c, "c31d9fcadd3e8c4a97978990f7dc8342fae513c6845b99e7562d38d5"}, &(0x7f0000389000-0x4)=0x24) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 218.811223] binder: 1859:1870 transaction failed 29189/-22, size 0-0 line 2788 [ 218.827545] binder: 1867:1871 unknown command 0 [ 218.836546] binder: 1867:1871 ioctl c0306201 20007000 returned -22 [ 218.851834] binder: undelivered TRANSACTION_ERROR: 29189 [ 218.891907] binder: 1867:1871 unknown command 0 [ 218.896914] binder: 1867:1871 ioctl c0306201 20007000 returned -22 [ 218.907223] binder: 1882:1884 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 218.916116] binder: 1882:1884 BC_INCREFS_DONE node 506 has no pending increfs request [ 218.924889] binder_alloc: 1882: binder_alloc_buf, no vma 2018/01/26 10:31:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000584000-0xe8)={{{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @broadcast=0x0}, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast1=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000a11000-0x4)=0xe8) ioprio_get$uid(0x3, r1) close(r0) syz_open_dev$sndmidi(&(0x7f0000a14000)='/dev/snd/midiC#D#\x00', 0x7, 0x10000) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r4 = openat(0xffffffffffffffff, &(0x7f0000853000)='./file0\x00', 0x400, 0x1e8) getsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000a0e000-0x5)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000ae0000)=0x5) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000df6000-0x9)='/dev/dsp\x00', 0x3, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000138000)=0x9, 0x4) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2018/01/26 10:31:11 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000a7e000)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000b4b000-0x118)={0x8, {{0x2, 0x1, @dev={0xac, 0x14, 0x0, 0x10}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000-0x50)={@generic="5fe5f6c5e3530785b1df236902c11adb", @ifru_settings={0x10001, 0x3, @fr_pvc_info=&(0x7f0000001000-0x14)={0x5, @syzn={0x73, 0x79, 0x7a, 0x0, 0x0}}}}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getpeername$packet(r0, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000002000-0x4)=0x14) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000002000)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, r1}, 0x14) openat$rtc(0xffffffffffffff9c, &(0x7f0000002000-0x9)='/dev/rtc\x00', 0x1, 0x0) 2018/01/26 10:31:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00006d9000-0x4)=0x7, 0xffffffffffffff88) r2 = dup3(r1, r0, 0x80000) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000141000)={""/1024}) socket$packet(0x11, 0x400000002, 0x300) socket$pppoe(0x18, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 218.925911] binder: 1882:1884 ioctl c0306201 2000efd0 returned -11 [ 218.951348] binder: 1859:1870 transaction failed 29189/-3, size 0-0 line 2903 [ 218.960634] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/26 10:31:11 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00004d4000-0xb)='/dev/mixer\x00', 0x1, 0x0) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f00008fb000-0x4)=0xbf9, 0xfffffffffffffe20) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000547000-0xa)='/dev/vcs#\x00', 0x35d, 0x40) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000fe9000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000e4a000-0x3)=0x28) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000480000-0x20)={0x4, 0x0, 0x1, 0x0, 0x0, 0x14000000000, 0x400, 0x7, r3}, &(0x7f0000d7c000-0x4)=0x20) syz_emit_ethernet(0x2a, &(0x7f00004a3000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x100000000000000, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x5e, 0x0, @rand_addr=0x0, @multicast1=0xe0000001, {[]}}, @igmp={0x12, 0x0, 0x0, @rand_addr=0x0, ""}}}}}, &(0x7f0000ea3000)={0x0, 0x1, [0x0]}) 2018/01/26 10:31:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 218.960643] binder: 1882:1890 ioctl 40046207 0 returned -16 [ 218.972672] binder: 1882:1890 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 218.972684] binder: 1882:1890 BC_INCREFS_DONE u0000000000000000 no match [ 219.011708] binder: 1906:1907 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x20000002) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00001b3000)={0x0, 0x0}) r3 = epoll_create1(0x80000) syz_emit_ethernet(0x2a, &(0x7f000080b000-0x2a)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @rand_addr=0x80000000, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @loopback=0x7f000001}}}}, &(0x7f0000738000-0x18)={0x1, 0x4, [0x644, 0x28b, 0xfb, 0x1e0]}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000dc0000)={0xffffffff80000013, 0x0}) fchmod(r1, 0xa7) set_robust_list(&(0x7f0000749000-0xc)={&(0x7f00001bc000/0x1000)=nil, 0x5, &(0x7f000024d000/0x4000)=nil}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000350000-0xc)={0x7, 0x0}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000b1f000-0xc)={0x1, 0x0}) close(r0) r4 = open(&(0x7f0000bb0000-0x8)='./file0\x00', 0x10000, 0xa) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000a97000-0x4)=0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r1, &(0x7f0000831000-0xc)={0x0, 0x0}) 2018/01/26 10:31:11 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002000-0xc)='/dev/autofs\x00', 0x200040, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000ec7000)=0x0, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'osx.', '/dev/autofs\x00'}) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000001000-0x18)={0xf000, &(0x7f0000000000)=0x0, 0x0, r0, 0x4}) syslog(0x3, &(0x7f0000000000)=""/248, 0x1ee) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000003000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) [ 219.011719] binder: 1906:1907 BC_INCREFS_DONE node 508 has no pending increfs request [ 219.011736] binder: 1906:1907 ioctl c0306201 2000efd0 returned -11 [ 219.021185] binder: BINDER_SET_CONTEXT_MGR already set [ 219.029646] binder: 1906:1909 ioctl 40046207 0 returned -16 [ 219.053469] binder: 1906:1909 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000a49000-0x4)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00007bf000)={0x97, 0x3, 0x591, 0x2}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvfrom$ax25(r0, &(0x7f0000021000)=""/0, 0x0, 0x0, &(0x7f00001a4000)={0x3, {"3ab85d6dcdfc76"}, 0x0}, 0x10) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000f4b000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}, &(0x7f00003cf000-0x4)=0x1c, 0x800) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000725000)={0x0, 0x401, 0x0}, &(0x7f00007b9000-0x4)=0xc) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00002ac000)={r2, 0x5, 0x20, 0x8, 0x7}, &(0x7f0000a5a000-0x4)=0x18) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14, 0x0, 0x0, 0x0], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001, {[]}}, @dccp={{0xffffffffffffffff, 0x1, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000e45000-0x4)=0x5, 0x4) sendto$inet(r0, &(0x7f00002cb000)="", 0x0, 0x0, &(0x7f0000265000-0x10)={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r4, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r7, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f00001a5000)="89c032cebbefb02b54d653777a066110472910b93324be6c4b5b00b0d47bbfc44f7a46e1ffba318f90e46cf135632a430036d24f26722a479523f7290c6da54b3370ac2a0fadc54e4bb456cd45d21e7fca8a1c2ff82a049bc58e7846286e3226a18a1e5974c94d6c8d3d67cc447bc7d99596fed4511e5ce86e0cf46f4921db7249026eb0a1020a24d700cb7b357cebbd3f219857d89c0c7ea639b8452a0e29db0ee56e5c36089b4fcee041f0720f49d725fb28df01a1dba306c5302aa0530f20536dd370553630d69d88cd297c8d0d064a6eb4537924cfe838") getsockopt$inet6_buf(r6, 0x29, 0xcc, &(0x7f0000004000-0x1e)=""/30, &(0x7f0000001000)=0x1e) fsetxattr(r2, &(0x7f0000ea1000-0xe)=@known='system.advise\x00', &(0x7f0000938000-0x1)='\x00', 0x1, 0x2) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00009b8000)=0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000539000-0x10)='/selinux/policy\x00', 0x0, 0x0) 2018/01/26 10:31:11 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x400000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0405405, &(0x7f0000000000)={{0xffffffffffffffff, 0x3, 0x0, 0x3, 0x6}, 0x1, 0x1, 0xad5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 10:31:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000e76000)=@sack_info={0x0, 0x3, 0x3}, &(0x7f0000e28000)=0xc) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000e74000)={r1, 0x7, "6aec4b6f5b22b4"}, &(0x7f000098f000)=0xf) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000452000)='attr/fscreate\x00') readv(r0, &(0x7f0000263000)=[{&(0x7f00007d9000)=""/204, 0xcc}], 0x1) getsockopt$ax25_int(r0, 0x101, 0x3, &(0x7f00003a6000)=0x0, &(0x7f000071d000-0x4)=0x4) 2018/01/26 10:31:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00009d3000-0x4)={0xffffffffffffff9c}) sendmmsg$alg(r0, &(0x7f000042b000-0x53)=[{0x0, 0x0, &(0x7f0000c2c000-0x30)=[{&(0x7f0000c75000-0x36)="25adc1e2a0a34eb4218887e3b85579aa88a4c2d5363f787127adc64b9efda3c1fb0c43593ed10f3b1b84364d69c2b25872d65c7a1a08", 0x36}, {&(0x7f00009d2000-0x89)="2223461787ead316e48a8c19cbc5ce48447bffa2aeba7a9ee6c835f8d95e02c4976f55f4d99edbe3a2337b8d824d31a9bd3ba69539b21a689a5190ca720f8d133ce5452e5f70b63d9239189b68038609559d2ffbaa734d6b21cd09ba3300e6c294ed9cc8607cc40ce6d239301a8535fae64288a28c888f54352048086c7cc14889a09045ec7b1aa18b", 0x89}, {&(0x7f0000143000)="d848a231a9fe634038c98527049ba122c50e4ad16539d0ce4d6b6576398d104ab22301c686fde60350abded602ebc59e5409acc283013c28ab470d81c96d83e0ba0341e060271135684e1399e837ab2000d30147aa19320ff6f5d92f950587e14be9e7c832d44e5be3071a7de0bcf3e82988cd9d28d7559fc256bd90c9f8b66cfe60b316316d93f0145f113b16f31a82c7869c2935e1b339138c0cfca8b19d9f4d6246c2eea468938d5c31f76363ab4c80daf24ea074f58e490aeedc", 0xbc}, {&(0x7f00009f6000)="9a66283d6291f3202b445838002c7af1f2a3a888c511b367b902cb7b6addb77e880685f554a369f36a71004939a9e7a355fd2a89b32cf05518c3a08ddb22c3004f1ac3fe89929c95982796e39436c051244a0fa85b9bf0368124c6e4e4589eab4e6d19d368b789a131151f7deaeffae9509e12681f83b8095131b0b8b16f8a76cd799527735d6aee5f539f395b9bbc6426b6bba236476331c2fe1e5cb0864eb196cbeee5b8d928a8f540cb4e63f7f331b4d824cfd4135f05380d677316832db5a64a9ae1a2228f222a3be806e4efc6645a", 0xd1}, {&(0x7f00004b5000)="7690b7aec65d9e7bfd3a1cff47b2d9a3897052047d245578e83d4b0608bdfbe7c1d25e6c6c13e89af9b6438c4bc077", 0x2f}, {&(0x7f00000df000-0x1000)="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", 0x1000}], 0x6, 0x0, 0x0, 0x0}, {0x0, 0x0, &(0x7f0000c0e000)=[{&(0x7f0000e61000)="10af2a14980295cf7d6df7c8545e76dcbe24be1ef4da0687c0299e73f6fd8de262d9ab23ac3aee738c399ebad21037cb7885ba8d1c5e9d67907b5c1f447d8c42b666622e7df7ac404f14939d32b857432eef0cf043a5dc346414d28e9fb760e8e2b596076121f87974796890d5922ce9fd501d2d2fd3d52a72dbc6a4d6688d92502292fa6fb03f44006035b8e2b11b545a4ea7a0bdee16257e5fbc1a42b7a057ea514f51203d21636405f1f77f1f24b3546518bb", 0xb4}, {&(0x7f0000f5a000)="b2be9c5bdcfa8d190f7c8c52d0968034fdce05d2f6e7ec589d7ce74a63cf77db9095d3d4d6d30d9e77c2ac03e3d397dbecee99834266ea38edbbc4c0eafbb10b3483c5f34d2adacb17b7a39cb7afcb6454fbd38d73fbaa65904e6d37ec8935d075fd7be31ba9250d6ef29e8113dd6c9395da66f484ee848d76ab8334d3323c98c2e3b1236e442cc1f2f5e152f08410ca31868dfe37", 0x95}, {&(0x7f0000b72000)="cd6b81b7babff0c7791661937f4625be09405e82e46062e75ae334a5e062ed8da5e10acc7c38ff9b3b518901c985b4f19bf3eb6d3d9d2dd1d7c74fc2fb610d36765019a6b407adbda281f5137fab83bbb42aeb57b3", 0x55}, {&(0x7f00008b6000)="e6f0e86b0bc960961051c3e5d7f6ec1851a8f34419d229cdf0784edc5142810dcde80363a1cec6c8e52c9dc75b10c9238f8c5229d3ff104c5a915417af4288df78425e33ecd87dcbc62bbec089f61602a95842d73d385ca6a06d4026d3a9df562533caaf9b8c858488fe36f139ceb82b5254469d5f73096b4213d064f0838e50494f8bcdc4fae3bd0dfd86c3c3197c4b361fd9c6680eb803d86b78a11f69beb1367ac0b144c78cbe2460e36ce1c123bc97eb141fe718edcf00513428b6b81bd88d3d52a40543b2e446e542", 0xcb}, {&(0x7f00006b2000-0x57)="701608ba0e1139dfcf7d59b6d6ba6d4c89557a4f40410efa9053fdb8f94d165453927861c43bb46efd59f5c89b4aef5ad839426eb873ff590720bcc78cff83062bced39e02122a828f8ac63c4d68cb7e453ba643624602", 0x57}, {&(0x7f0000098000)="f618ea9a603926f59c3d76072a2dfefd13f37a3fe4e6a1d074bdff627f0fb3d3c985407fd02cb0833df8baec2990c4b1817635265dada8f0f8f9c2353703f2e57005bb50b34cda2c27df551a093334bf3fa0af123fade31946be6c3ab9ef61fac357652356ee029071fec690a5d972b15d9cbfb22057c6822ccea2fe8977ac25e45d0cdb1145d868e764446df0c43767b44e96b84150a56e5550d9593521a925319c37", 0xa3}, {&(0x7f0000d12000-0x96)="a4c4c6c1b378d7e966ca6246f4a47e6592450d110c161b9987dddc90b5176d442193ff7ea11d2f3e874c4d58c44e7cb691a63625b719e690146151ee5880672dc1b45ddceb811eaee7e2b7ac0c31c02ba7f3344f0cc2c6d888b955800fc05a35fd39ed6ae0b819fb7abd68ad95c2465d6ced561cbc31dabba095e98dbe8f6a5c859fa856163a7f9722956b30683b3779e4d4090caf0e", 0x96}, {&(0x7f0000e86000)="19a1c67a19c5e93b83145434677dd3a45417eea8f2efc582b7d08e458862303b656881e3299318fd8fd19ea382a3d0a78289dbda0d3cc4f24f656269c85f4618f4f894fedfd36e0f3eaf4b56043b833fa6c0e165ed6cec43a4e1fe061fdfa0ebfedeaf1877c092ec299a112db482e5870d800fbc7961d2c447763cf165b100811fbb0c8d1d951e7889ad35855839145651665b34d0dfb85f620dfef06244e3386de33695a361a78759e0cf9eabecee8e40fc86abe0a5fb421ef981f48c3f52ceb5c640d16487c3b2a9c3988045d543abfb5e009b44f8ca416898b26611ce", 0xde}], 0x8, &(0x7f0000eb4000-0x84)=[@iv={0x24, 0x117, 0x2, 0x12, "85cc25abfa6d23d02d48dd5bdfa6c912ddc6"}, @iv={0x3c, 0x117, 0x2, 0x29, "c13a04063d4aa4666493d2ec5bd0861cdf03845d030d7d16680426acb74b4d511833dd7a0d8ae569f7"}, @op={0x10, 0x117, 0x3, 0x0}, @iv={0x14, 0x117, 0x2, 0x3, "a11522"}], 0x84, 0x40}, {0x0, 0x0, &(0x7f0000c0f000)=[{&(0x7f000046d000-0xa4)="6728c323a0d4320d18d3c828ee831417e3dffd86a3c59ce88cf8a208a6123194bb5cc08c368c81ed08444386f577d8a03da7cff2e098e1f8f6d7e4fb4cdb8b94d5841aa63b75101180ba40f2779dba28998d256321d8e53d395bbf93a7f036d31ae36515259c29cf4398144da8249a75b33ff8fc258912518be57dbadda80305013be36fa1d901922a70a666aebbf6e2e7bfee854772332bd2177299d0c8c45c205e2166", 0xa4}, {&(0x7f0000eca000-0x2f)="43776b5e97d73ab35e27d549a2ad182947ffa1c9f815e187fce9c5a3385b0a92b9bb914a308cad61d2d5cd6cc431e5", 0x2f}], 0x2, &(0x7f000058b000-0xb4)=[@assoc={0x10, 0x117, 0x4, 0xfff}, @iv={0x94, 0x117, 0x2, 0x81, "48bd40a73108b5feaef524d779773c86b4218b716e37219160a58c63be94497f0cd28cdac7fd94f38bdc0cacf1eddcd4d8fcebcfb57da7dca0458c170251e1dd8bba6765fb393064e04d7b2adff80ac63ec6051d29a0d70a584819c52189efe28a1d7a2e177854c228c550ea1fbd7e3341dcff23f0f9d43e581a6ce41d0ccacfd2"}, @assoc={0x10, 0x117, 0x4, 0x9}], 0xb4, 0x884}, {0x0, 0x0, &(0x7f00004d0000-0x30)=[{&(0x7f000019c000-0xa0)="9593e0e4fb04392bc94b7869e477ba30ba83206a7c22e9bd0b8c436aae25f7e74899bf6fa4027fc1496835ea237efd4ab5597378b75f1d9c7301e7a2d9795d88397e979794b87f38517ad0cf59819997c1ce768a29c12ae33baf8dfbd98bcc2519ecb3a08b94ac96966d028b5e33ee180abacd87984ec47ad7f911abeae170a7b8001ab024a57ca7e95361ec9939eeb11d69a544618eed6abf9d3b1291ea990b", 0xa0}, {&(0x7f0000862000-0x92)="1a575057516fa6c458bb56d15daa60fd49999419bae6043772b2b34d5263415b5b050f49f0f977f595a8562d41ec2c5e810f654a7f88efcdc2e257da9bf5965bd369bee7e56db656f3e303ee7f7704f402f8dcbf1571e203ebf6ea97e19d313dd486d301367acfca2b60476486c07dddfc3002ae47c5456f0c90b5d5295cdf8c3469784c7eba07694e91746efde1488a40b8", 0x92}, {&(0x7f0000d65000)="51172e1a6e9815e12f6035884f90c673ee11c8327bbc21a60a0b1ece34ae775c879ad2a43d18642b545454e2163bb6cf6eb3e40772fb12bec07fae0806d25323900e772c20c64a00f1e7a91a707d0a82b9aa5a1727effac65295", 0x5a}, {&(0x7f000023d000-0xb5)="914fcf3819526be899e9f7fc7858cc5dc277466cc7c78b3abcc30095290dc2c53f893d46326f4c6e3f904ae1fe9b03a444dfa3bb694c00596633d47d4bd0a41b026703e077bea191b8c240a4afc98c5b7ba88adfecce27d1a307c4569abbbe69a225a860aaca1fbc900b054abe9da02b4969e7301afcc2ebac67b37eddc77541d4e855001f6ede0997a21eb9f290d2e3bf9e24080a97522230775327f77fc097078d3e8a48ac55fbb56e5ec5e7d9ce3416e8296d94", 0xb5}, {&(0x7f0000a79000-0xec)="10bae0411ae81483a4a81776c05ad1d45796381825328d421ef30eba3a4de960e1974cc561aeb6b64ca47716fe918009e7e4f32a51516e4667eaa4d726679d64e991bc4af6680af328f1aebba879fea30fa100ac854e28109daea47c2d127d25a78974315829e7903320675220e7535a6d98b46cf6b35893f713ba089a33b96844f3aa85e414ec98a4d51970a5d60d1c28df3769de09b4846d85bc20307f2281dddfc25b76f4869d7b9dbac6b9ebfa571ca80a6283c25e7b7abd552b1d052a9f1f05a4a2d89dfc1d35827e3d1d46b277fd6fd73e6ad67d3e82410b9b3d8aa60869397a7f9fa6a1f6ffa4ff2e", 0xec}, {&(0x7f00000d0000)="6436178aea902d0ac0b049feae", 0xd}], 0x6, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000013000-0x30)=[{&(0x7f0000534000-0x67)="531943ed4635af0c46495be82b689454bc8ad4829e5c7e8731c24317484fee476eb761ac6052542faf3f2b254985bfa13e4a9d13e3c1ce84a2689c61d583b9b855c8d3ec382283bde579d325a4aecf62b2851d72434f78090ce9fbb4dbc708a78167d207bec52b", 0x67}, {&(0x7f00002c5000-0x1000)="1b7a11e0660162746b078f86c2cfbf17da04098b1a6382b570b5079ebe46afcbc51337f86bdd4d7be2edfa2dd9ec9dbff0a5ba19761ffa35ac201eed3bf3644229f5837deb9080296bcfa10c00a4aeea0ac36bae500b9eba0948e7b841b7868182d8a4501a30c3cd13f341d1da5db641e39d53ffcb4ab733c5d5fb473081e2ceccd0d1b5b9f0d0f6cbced93c334a3bf82a7d415503f809bb7b84053c083dedbd111d9ecf079821b5bb7784f49b497a5609722bf6db44c61370403e2656cb4dae9a711ebfc2de582c21e95bbceeca74d19f80750f9d1085ecb2f6e46dcbd63121ff024c2842d88ecc7a3c6cd1691e7b3d1b6e2a3487dcb3aa5c75aa964f08eec395015690e14869538426d9b77d29700fbc190c91e94ee6569ebc58fecd29b964ef006ca7f003f53fff671d1291e7385e876d8d369c7b7f4e27673c233d769b423b1eb8373e1ea86e670449057d6f13cb9449dcd7d7592834956183f9a0f7b869f2a5f6241694fe493fed5cd350e58d9ff228aeb16d420ffb36f2fcf55547e27362141c7681a829798e3cc982e4ac1e9d9585bccc0dd599da584e9037b8ae08902447836bf523feae5d542201593dbf6bfa2e6351460507f9f4264d01331e8b86f147fcd1fe447e409310e6df1c55704cdd4866b8f5fdebbc633874454d1bd53482e97f235bbbeadea78517f13f8c2463126756656c2f1ec37b8683b52d5149e4d16f2bb508097a1029e4a76cd966503db1dc700df18ea9bba8b3d519e3a273f6cf5d58562efc31a824235ec19b2efe3c1ea856347adc3b17c3bd4d97e5b78be62de92012530fbfcec63074261ef252624ae39f1f0a46dc6d9968ca27d215152f45a52943d83acd943c25e845c8600f926efb301088984a6fff478c1b1affb152b329211a8fbbbef2e8311fd5e2f307d3191c2d93957bded599ac29057549ee48931803a85d8dff04aafa5b90dc679813548ff6d47793dd07f7450c64b9dfbf42449e7f7e8109d21bec35f7285eea5f6f244546c71cb57744168e581761fe233c1daffe20a8c5f3b78a3c74a7908814ffb2c33e821b64766663adc2202e2d493681b1365efd8de4da3bff7b1efea8a85356fc6506f9ce1ceb51670afd382615ebafd09b33ec4abbcaa5036fc4e357731277446df566b4e8e49e08902a97cc4ffe3f6bd1980c08a9b5542f8fb6b560f4a754581da7ee07ba1b4471c7c32e0cb5e764a1738168749a6194732047514325d24851361391bf906c509523b56f82c5ff93daa221137dd849d71c591d02525d38c04060be950e0ae65925545d4c7e3543f2d1546cb23ee946dae3b2a774891482916fefda0186c294652ef3fc8894d08bb84ab40c6976dd1df554185c49477fb16bf250edc19104090de82b4d6f415ec18341bcc770462f0680e0103dc37f9cb8c1d97b0bf641a04c051b742d5699193847352f33a61a12d4ba86af1c5dee994464e4027c630586d8008901af3c8a2e999a53ce644b780fb0fb38472752a873f23415889130d8061e021949bcdfb88cf6fcf667c8b05192906ab6fad0b7bc30626596d03dc72bcc243cd7e4bc07fe45c517800d26b06918e300ebdea12a7e4a67c4d5af6510112f42146a8c03eac439f430a1a86510c367b590af56bee46dbfe3a7e90f1dfd4f949b0624b43fd58e388b21e053b4cd54ddd017ce4b73509ee0802692f05eb28fac83afa50a85bd89b85a28bbb3c815cf1affba4d74bc5c98273e86e95b3ca5b3e6dc65816f325cfb9a32da8c0cdfa87f83ed3a2dbe0e41771577deb0d451434e1cc9b3aae58686b2c82fd1c481d998f5464b4661ac5094efac6dc73d09a6c783210919c7ea69fc1c30dde3e46384863620720ef8b15f999cf952dfe01beb1ac3bc263e534fa82576e490a132363056238f915b77c1da45f4b83fb93a79832d27b8f53d2dd628fd00f2b1149cf5cecbac050724b7f5e364af529bc27c8707f4cd54694a0ae816c73f6af93760089cafcbdbd546842e705b5dd7b0389d970f19f9a806bd21d9ee8b346cff4e78811c25a605e9ca96da69a0c9368de33f8742bb87702142de92798006864522991359d24df040f6cfec5bc8e25b01ac5fcf4487a63b6a94dd03e33f2197bb19290a6fba7efcbdf9be9f7284ba335a733b4ba2edb265dd128f8a0a8c77ba0748321d87902c95f6ad6552590f9b355a9fc19f835f5b8aab7a3a5d35e4647a65b87c4a721da4a1175d322434b07ccd9bcf33d124158a3f2d5b3a4521a1f75e7c939ba88b314ac93c064f901327c22fa66a1d3d2c72f76f95adcfa417745f2dff74e86e1f9d40fc737bed49341696455795171858d3528505912566326d9349ecef91e1d27f047d50a191313bbe3b329e0fc0f13874b6eaddee90410d28e853d3a79f664861ab8912bcb8f290abbb96d2961fb64947f2cb42c0af52e268e58f4d0ef16638abd46a700c207fbcf8ca6d4a1ad1ff236a028f05aa83d3d72001d78ba255c4df08ef5bcc19eb9ce751ff053fa4284608bf4f1903e1adfd7400bd45553ac6ef18f6ca837cab5d02dba96df8e0993991d0163cb0449bb7ea0fe3c7f55d15528ab552795a44f9eef7b9cd0ca3014e13b9ef2503810699cd64802f4aaea828dc127aa399787a5b19488798b66e3c2c68edebda4d137ce6ecd517c6f0f1006bebf6d621b843b6f6591f390621cdf53d7e8f36a3bf4a163a665646514674283cf99b9f8ff3c594fd428500ce66e528cd0a7cfb963c2abca4f13957b2a3ccd4d145f1485b03484555af6b8602e1270d0e2023946f19a1c74093e0ef919e6cab6e8bed81f64dfaf0fab693b792ba8152ca95f95a05003db47bf43747fc62c4a5aa226daeef45d7d589d8f32f34f8b20f293964ded8b0f519edf3da271cbdfe53b826456cafc538e499bc169d3d364b2995c208aaa067ecc55b3ed782e12fb21a7aad92631d077da7138813b3f23ec8a1bde597125b8de3ee22fcd137db65c7bd2a5883736d22c07ac5383fe93a62a522e3737e002d09768a09e624d5fe52beb76f4aef7d186f44c0e23946e5b2fb4a90c20a6f5631ab64bdf1538e049e8186857187f1addb44d7a8485e9a07c21fe2435c0e1db12ace2120ce436326f82de279c47596ad455f79300b3405611ae14936f20e716440cb99f514f9c6dfe62fe19cf67d3fc0d46c8c1db589c7f786d6f602c287e3c1d47c538b1661e8014adca670e3ab68795f8350df46ad30f6822e01d3669c5ae265d923c566cae61c1788cc59af9081c58a62c3b2d1df8385e3b29094726e708c5e7a07f894ec9e7f83cd84591bfbfab47e0bd7f8e6dafacf4c4e7accec79d1fc66ac0c272ae75f34b5c9ca6bf781c49f01b65afddabfe42236e0a46be6706042c28725a127c3ac40a780b7e0e9d28c75cbb08622e80cc1cd42f63257f0001a06bac9b4e078cd4829aca75960e34cbfc1cf8cf05dace90d5c104182d5992a7717b05c4b7075acdfc95270c70a206f88c14ba2497d3a17cafbdd676a0fe1b16171fb59dc601de14bcb510be2b422e9e4931d83828f4f3432cd01b3241f1b86b3e3801e82c7830bcf183efbff32fb5e2672b5991051cd9b61b7683004737b5fa7feb5893ff4d17f05e2994e03d21857e4b6e6ad1e7875d151e8fd3f96db7ad224f1df2b2a0345b1cf1524505efe1f60f067da596b01ae28a33039041f4eef145600b4bcc052ed1d22f63210f425ee5928c0423d8295001e17942c67d9f3a45b5f9d4ff6cf47f0b4e700e034335d922bdc0f07fb6cbf5d3e61ea77f2aa4ca2f17d2ddcb776e160bf8ea2fcf411ad058264380d3770c8698c803a67754916457a5e1b4eb37b135a7d20e8c1d7ffad2d1d9de53a70d610a8b5951a2cf793ab7e9f6fb5cbc12c53635eedc94d9c1ed95ad12e79e13f1abf9963c6fec79b9ca4bf913f163e814173e3de39d04e873996a60d338e2757c7ca251e129138203f5b41190f5041d7b9df9531c259e44aa9c8e9120dec5e2eba4b29d6e11fc3e385f5e08abb24827fa333723bb13718dfdb8c58b993f85d6c49df8c0da856eb1b5320860322c4e32de481629729ee0de07502f9588db584059c06ff1e13a52533e45ac1493b8e996603e95fe63a2f1df8c188832621e90012a8a027743acab370c9a6cc03b83b8a0ff400abfcbde4b7fb4cc6489ca6fc38b4b05dbc5b8edbf176c1fd27d67fcae5195e9bafc8c0350432e040980a195fd1a8b055d23fa056c86643e51d8e5f606d6012fed355f53d9ae3d77c7e0a153a6651e4155f242b2fc080f40eda74d7e8439520928ce18c73a521fc7ff17f520ea32fdfed5cf03a4912d15cd3c01e24e3eb73c73c7704e76402ff2b5fcac9da5af38b54f3f75f2da0c04f5a8b7a4a8308463b8ed72c75a2322aa697a7dfc51dd8a8040ff268a509b2ea3dfef7130c9d1417e033cceb5c26e651ea4e4e7ead76d85ef47eb21cc44e911e1154f162a056433ec4fa6d860400adf42906fdb2a6ff223bb8df78bbb0cf386eb3d43b5ba71700152b15ee52f7895f1b116fe907bc6a9294f610a2284e2df7e9d7493bda9e9d5bb9f8079e7adf52c1ece69bb0574f96c20867ae5fbac75ded9ddd25859cf8a86856a0f0a00ab93f808bfcc3d610fa9e675cd91f703d353f6c2f4530796efc38f2f2dd3345d4eec72724d12df9913eace41fb35d891e0d1cf4e9ef3841f94f9aa1c11e423a6b7cd9fc21117e8af05e045e54c18470f20c1f135b96abaaff397fa51c1fdeb851e4297a3cde28b45ca8c4654860fa273af3736acec74a57381edc5c5ae978f2d0a176583a23d3a504469ac56cdeaa59ebfdee5e0791468f688efdb8af17d313e4df1d33dcc7da3d036f8db571f80f23436723c490791fe6876dca82a1dfec52b46ce7e8174a402cf5efa0756c5e0ba2fbfb4e757a6e31f6ec2a814ebf7977723a523c3ad75eda43936853216055ff06bc8e8477f4d1415df993dd30280c510e45f4f67be65f65a8abbde2a97aff4118154484f3f154a38fd9c836297650d9ca6cfb19f7687b0c791614f870a6a33aefa063c9b99ee5ce54cf100991fd7e4f0d52df422026c930d14b12af6b4a717415790bd3a16265f79c1950bf71bf66c057c5e74ab9f7331229b51474e6f701353ddd7d14e9fb30ed0329349107fa68f28609c666198cca463bd68b2c7f8b3ad7d4e20beb882997f793c3292a8638331b215ed261f15d33f0105943e8f043040bcb73117fde82375354888778d3f000cf3c99e69a4e6a2821feaca5467386b0d154f7bd1fd225164154389204b755a02bf6fe21e2a05fc8bdb0a36302df423e2b943789e35b4c2b503ce3eaab92e55ac2850bbc3b79a0facef303f9b519e907840cbe152d642eba9ac150c3bdf7d490ed940f9ea49f05613daa4c445bca1f87f302199af202ceb1b7e617b36fb269ad41b5cff324b69f3a9525a466d212f9acde09d4b0cce0fe4b4fccc9f47b050c3a127fceb98c5e9e263b0797b7b81b4aded7fe8c045479ff28ad8025ed0667c42a47092ba4a438bb29297e42d618b1bb58f2119325bb4f09c40b3f8b712cee9ece744251bc070c9aa822e7f2c7887e48bca40d2e7de6bd8709ddef4ad8e8051021bc5daf9d8bbbbdabebb0fd4decc033ea280a300c516815b57f5a1c8901a15dfea2a2f66d1659f6f9bb469ad3577096fff916f3ed7fe931a558253ea11bb1f716520f7354bdc022276853ac71a01d8af47e06ed2f80ccf3c0e15561ce7b56f9d55a3978a6fd44af6fe690b1f0382a56df32e88f5d131e0d37572ad4ce921b4396fa2d5456d4c961a8f54b", 0x1000}, {&(0x7f0000d41000-0x68)="b4fd43536a1987e0978fb88297fb1e4bba23fecb2bb23f64f4fa8aab9df6054e5327c453ad7db241b515d0cde12e6b24a843f9a6fbbcf50ba1c3941e5dad0afe1ae76df55d431d897df98f4b6816300b6644f1d646e119399657523add766013e3ee4d245e697191", 0x68}, {&(0x7f0000104000)="e5081469f57837def199329204bfbfe007465f99dac38687ebabae15e48e55e729267131d09626dd335cf056e549098ddb34d385ade1f640f1ed8c7f6fc45a90a4b22157e955de", 0x47}, {&(0x7f00007d7000-0xb1)="6827925fb503e1c621f3333ff7767cf1db2444901d5a3117ec877eebf414be8efba7410207cb2a51f79879235af1c31f22b5a88dca82d6310a71fe73e7cae7fa8ed6aed4596f2b31b638b121f4b2e5d836fbfcb92ac9eec0ba7fcd0b1355d39b886e9c8003a35779392c2f5a6cda2545bd48a37186f2e262c668f2b2def0ec02592b9700b55f26c2deeba9ca6eadf2b97703d0c75a4bb4e9db91acfd7db3af2260615e61c30e153bf4bdb7442d68065f4c", 0xb1}, {&(0x7f000023e000)="", 0x0}], 0x6, &(0x7f0000117000)=[@assoc={0x10, 0x117, 0x4, 0x2}, @assoc={0x10, 0x117, 0x4, 0x8000000000000000}, @iv={0x2c, 0x117, 0x2, 0x19, "587f0b26830b4e4f8b3e7ffc41b01529f0ebfd4010401c3805"}], 0x4c, 0x4000080}, {0x0, 0x0, &(0x7f00003ba000)=[{&(0x7f0000473000-0x38)="a85b4f772441b4ee91e813d57f47f743a24c48c050d4d01365e6fa11008a512ca38072619163acaef1ebe326793fc8e5787b456461243def", 0x38}, {&(0x7f0000ff9000-0x17)="fc489e00aa6d20bf0df1701c16375ef37a253f8dc399c9", 0x17}, {&(0x7f0000e33000)="f0259ba988a6eaac7f9f8573f8d4485d05914ad61987aea8d0dcf03b4cc0cbf5ab356904c495565ddcd0203771dfca536ad736f672fa51b9db71c0da8600e9", 0x3f}, {&(0x7f0000e18000-0xeb)="47db97af8c7b18b2b50b7363f942244bd3d7300f49f83d45aa33dd154268a4f75d7cad7d3214062070f6a82263900be9c34538049b57065457353e45c26aa9d41e39a7ce0000476907e742a961ae76ddb831822536bc809bc31acb2e0fb93c5314701ca66129db9e6d00683896eeb6a58998bb3f3dc549a01e5f232d4f0d30803e28ab60b1b5c80bae04ff198c16bf493134e9e00b3b55ea349a9c9af80a0894af0f9fec7735f84a1b22f091ca5424208924d3d32f1b01b64de35da995a6234d0acaf2af1b821ffd667851d0f1584c2d083ea9cc72a092b9b3f04ac44fe1b68e6736e2dfbfbd636e2640d4", 0xeb}, {&(0x7f0000787000)="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", 0x1000}], 0x5, &(0x7f0000e2b000-0x2d0)=[@iv={0xd4, 0x117, 0x2, 0xc2, "0c5f57c2470e282f1443cbd5df1b6c697dd71aa9d4fbf211073e441520bf555e7f07f5269d3ec3c7282ab340a7a0c91b819418561c48a619ded8973bf37809a7f5ca3e9cf2b69cdaab01b58c65bca7602517af519b68553934ef3df337e866e3ff394f7eee61cdf91ca81eed30cc109832660f80d3d2970cc6fee7b6a9a206553d044c680abf687fcf21c2d8feedf86d05a8ae106163a2626386c0a80b9f9cc945cdad0c44a40096dc5fb702451dcc73b6b186db4e328092e2b0dcceec7b0d26b22f"}, @iv={0x104, 0x117, 0x2, 0xf1, "88b80e31b992f39844d07b35041d5d6ffdc2615c1960472161c68e8803151fa2a95b1af65f884950e909c457b07fe3abe88ceb2da51ac53abe32637336610fd14d26778b78cf21cbf32c845f84bb7bb1aca72f3f6376e339270ad29008bb447d550a666407218984c990f2dc3c758820157958a33b851bbf89a0af784fe88e7c0a14e794a3981fbd6607543b561039d7ab00ec33b23ac5afa4a212cfd189efb4468f6504e8070f83128b43bc1c861fdc7197e7503bf0218551c8b47b4ae387059e69b6f8970c5c3beb6ef2de69bdeedbb1b626d382a55bb2fd9ef9129ae8d2c577ebc400a78324478019f5e67bab62bdf8"}, @op={0x10, 0x117, 0x3, 0x0}, @iv={0xd8, 0x117, 0x2, 0xc7, "af79bd5c40ded43c1f5fd3978c4cd29e75bdee8a866c40862c4c759aecf085308503cd7c134dc826b4aeec0f7cce2e9891f9d6aacae5bce40d6f4b66a726c32df4f225399b561237e87189c7f74f4dc08bee8ba93fb72d8fd3892d49b2fb25960dba524259e968a0d51075013de127b426476d2b3341fccc3a0da36e08dbd1b6c2ffd0f229247a8b8aff8e22e4918305eaf481d1d2aed6453cd5a825d99c4ad2552813b492185747ffdb1530ff871ae01c0d1feae97a5deba65896a448fe27ced8710b4ab24324"}, @op={0x10, 0x117, 0x3, 0x1}], 0x2d0, 0x40000}, {0x0, 0x0, &(0x7f00000e4000-0x28)=[{&(0x7f0000498000-0x94)="a1ffd0abb8488f90d2ffd5449363bc1c06afa5778c6228880f0b17595dc310c1ec843a1ab11fb43e9abb0dad63182e36fa9ac38af25131bae146fcd848ab246cc1b2a6d42c25d17f42f675a4cafaf2d7ee7700eeac1b975cc5ee7228f309752a23ae2cc9171273d024dacd355a3fa357d62960e5a34cab1da96be1f968a9d7c076a544b77a5339a4c53cc9ceb2a1ba615fa8b547", 0x94}, {&(0x7f0000af8000-0x93)="696789f05660b7596563366c8e618402887ab4d0714152e4a528540403f7512cbbbf865780720dcf6317762d343ca9cb42374d68b833e180236bb46021f5fa673effd988976f0eca04ef2f1b78a6e2c041ebef9e27a62ef8b3f50cbc9ec5d283f15fcb4e47c03b6439d7f8dcfb971f3b2162ffe49831221e0ae4934deb28af8f66dc99cfb9cd56dd5aa664bf15624ebfafb96c", 0x93}, {&(0x7f0000746000-0xca)="ca80b508bb4d1dce98f02035b555d60c5b72428c21db6797c48cc3f607f3c650108a24bcdedb7de1e397a963afc6c928b7157f9e3cb877ec112105a35efde826178e18b9f6f46b5ae62a40ba4fb99322956e4040c14e711a5ab6c4e9b594b2c5a48a12df857764b186bc3d2726a2e5d501bc7ca7d761d6196d340503a428dd0e145046e85d901d9481515e9a56fd37f21573baab29bb7e21ade5bff2d78544b8d4a03e248389695730c3f6a76f607053ac98fe131c1a9175f8521ce281d7af9f146430585acd96e78959", 0xca}, {&(0x7f0000016000)="c1997bc47a978845f02fbd776b3ac6ef38661ac18d1a252516e4d0b74707675bdf8db926877282e58ff04d61d2259ddd36bb", 0x32}, {&(0x7f0000a15000-0x2f)="dcbcd9571710f79b47226124fe07e31cf63fa33bd378d9b377451b834608b99eb6040dd5579706c37109591ab48fde", 0x2f}], 0x5, &(0x7f0000f22000)=[@op={0x10, 0x117, 0x3, 0x1}, @op={0x10, 0x117, 0x3, 0x1}, @iv={0xa0, 0x117, 0x2, 0x90, "e23703d737425653b10119beff5976b5ea7d1e15e79ffa22074a496306da30aa673b86f1ca5c92217bec097c80ae15159ea2d4821d54d96cc5d4fe0c76aa30265355a72526c3160d375d52eec0f5b671805e1c96611ed855959c788956bc80697dcafb3228dae3eabf52370ad17d58061816b836677fdab9b084f8fee8a97c99da3d12d680f292dc5c56119b59ca5c23"}, @op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x5}, @iv={0xc0, 0x117, 0x2, 0xb0, "30843b9ede66659a566a595c5d727e9c0499c82bd20f40aeae20efb181bf1787bd709c298c0d51333ba05dbe1acb5a01fd4509aa9154deffe9d08bd57bc18eeafb0edd128b6f22171b6544db00b5e9a60679b610a705564442631f448d5b4400211c47b912a6742e9f576ef7893e776acc7730ac02838d40fea3717f9a0adf340ecc8bf6d9905873c1d68a9f0ed626fce12370b84c1115863a6d9f5dcfa025e45edbdfc659e901bc9091e3b2e520111a"}], 0x1a0, 0x20048800}], 0x7, 0x4080) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00001bf000)={{0xa, 0x0, 0x81, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd}, 0x6}, {0xa, 0x1, 0xa99f, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xfb6}, 0x7, [0x1, 0x47, 0x4, 0x6a9, 0x0, 0x800, 0x0, 0xdad]}, 0x5c) openat$vnet(0xffffffffffffff9c, &(0x7f0000507000)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x803) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000765000-0x4)=0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000b76000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f000002d000)={r2, 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000937000-0xc)={0x0, 0x0, 0x0}, &(0x7f00001fe000)=0xc) fcntl$setownex(r0, 0xf, &(0x7f00004bf000)={0x1, r3}) [ 219.053480] binder: 1906:1909 BC_INCREFS_DONE u0000000000000000 no match [ 219.106358] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:11 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000ebc000-0x84)=[@in6={0xa, 0x0, 0x8, @loopback={0x0, 0x1}, 0x7}, @in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x80000000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x4}, @in={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x8ae, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x10000}, @in={0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x84) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) [ 219.154008] binder_alloc: 1921: binder_alloc_buf, no vma [ 219.160687] binder: 1926:1927 transaction failed 29189/-3, size 0-0 line 2903 [ 219.168074] binder_alloc: 1921: binder_alloc_buf, no vma [ 219.168114] binder: 1923:1932 transaction failed 29189/-3, size 0-0 line 2903 2018/01/26 10:31:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000999000)='/selinux/status\x00', 0x0, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000063000-0x10)={{0x2, 0xf38}, 0x5a}, 0x10) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00006e3000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00006cf000-0x4)=0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000a4a000-0x4)=0x0) kcmp(r2, r3, 0x4, r0, r1) 2018/01/26 10:31:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000a7c000-0x8)='./file0\x00', 0x11a) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000482000-0x4)=0x2, 0x4) recvmsg(r0, &(0x7f0000176000-0x1c)={0x0, 0x0, &(0x7f00005e6000)=[{&(0x7f0000d35000)=""/63, 0x3f}, {&(0x7f000073a000-0x1000)=""/4096, 0x1000}, {&(0x7f000026f000-0x7c)=""/124, 0x7c}, {&(0x7f0000ed0000)=""/0, 0x0}], 0x4, &(0x7f0000906000)=""/222, 0xde, 0x5d5d}, 0x1) fstat(r0, &(0x7f0000658000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VT_ACTIVATE(r0, 0x5606, 0x9) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f000058e000-0x18)={0x2, [0x1000, 0x8001]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000471000)='/dev/snd/pcmC#D#c\x00', 0x200, 0x400000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000fab000-0xe8)={{{@in=@multicast2=0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000301000)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f000046a000)={@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, r1}, 0x14) openat$sequencer2(0xffffffffffffff9c, &(0x7f00008fa000-0x10)='/dev/sequencer2\x00', 0x480002, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000be4000)=0x0) r2 = memfd_create(&(0x7f0000137000)="00d1", 0x2) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xb0b) lseek(r2, 0x0, 0x7) 2018/01/26 10:31:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:11 executing program 7: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000fad000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000003000-0x4)=0x2, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000002000-0x160)={{{{0x2, 0x0, @dev={0xac, 0x14, 0x0, 0xd}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x2, 0x8c32, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x4, 0x9, 0x0, "0f386682d119c53f2f2839f3be23a035aa398bef0f6225fc39c2c69e167343a8facdba9fa27da770474c9cbdda865cab09bb66213ada0eb2b01fa285c8ac235f229d0ee82c38f979fda8e0e89b878619"}, 0x160) [ 219.177503] binder_alloc: 1921: binder_alloc_buf, no vma [ 219.177561] binder: 1928:1934 transaction failed 29189/-3, size 0-0 line 2903 [ 219.179252] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.180376] binder: 1921:1931 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f000090e000-0xb)='/dev/audio\x00', 0x800, 0x0) r1 = getpgid(0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000e48000-0x4)=r1) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2018/01/26 10:31:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r4, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r7, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f00001a5000)="89c032cebbefb02b54d653777a066110472910b93324be6c4b5b00b0d47bbfc44f7a46e1ffba318f90e46cf135632a430036d24f26722a479523f7290c6da54b3370ac2a0fadc54e4bb456cd45d21e7fca8a1c2ff82a049bc58e7846286e3226a18a1e5974c94d6c8d3d67cc447bc7d99596fed4511e5ce86e0cf46f4921db7249026eb0a1020a24d700cb7b357cebbd3f219857d89c0c7ea639b8452a0e29db0ee56e5c36089b4fcee041f0720f49d725fb28df01a1dba306c5302aa0530f20536dd370553630d69d88cd297c8d0d064a6eb4537924cfe838") getsockopt$inet6_buf(r6, 0x29, 0xcc, &(0x7f0000004000-0x1e)=""/30, &(0x7f0000001000)=0x1e) fsetxattr(r2, &(0x7f0000ea1000-0xe)=@known='system.advise\x00', &(0x7f0000938000-0x1)='\x00', 0x1, 0x2) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00009b8000)=0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000539000-0x10)='/selinux/policy\x00', 0x0, 0x0) 2018/01/26 10:31:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f0000210000-0x76)={@random="cd390b081bf2", @dev={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0x0}, [], {@ipv6={0x86dd, {0x0, 0x6, "0aff0f", 0x30, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @rand_addr=0x0}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @loopback={0x0, 0x1}, [], ""}}}}}}}, 0x0) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000d1e000)=""/149, &(0x7f0000fd6000)=0x95) recvmmsg(r0, &(0x7f0000a1b000)=[{{&(0x7f00000d0000-0x80)=@generic={0x0, ""/126}, 0x80, &(0x7f0000e4f000)=[], 0x0, 0x0, 0x0, 0x0}, 0x0}, {{0x0, 0x0, &(0x7f0000a1d000-0x28)=[], 0x0, &(0x7f00005d1000-0x22)=""/34, 0x22, 0x0}, 0x0}], 0x2, 0x10000, &(0x7f0000f14000)={0x77359400, 0x0}) 2018/01/26 10:31:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) splice(r0, &(0x7f0000fd2000+0x1)=0x0, r0, &(0x7f0000384000)=0x4, 0x4, 0x4) r2 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) poll(&(0x7f0000dda000-0x28)=[{r1, 0x8000, 0x0}, {r2, 0x1000, 0x0}, {r1, 0x4000, 0x0}, {r1, 0x0, 0x0}, {r1, 0x0, 0x0}], 0x5, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 219.180388] binder: 1921:1931 BC_INCREFS_DONE node 509 has no pending increfs request [ 219.180404] binder: 1921:1931 ioctl c0306201 2000efd0 returned -11 [ 219.189907] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/26 10:31:11 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1ff, 0x20240) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x6, 0x9, 0x3, 0x4, 0x8, 0x3, 0x8, 0x6, 0x1, 0x0}, 0xb) socket$bt_sco(0x1f, 0x5, 0x2) 2018/01/26 10:31:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f000006a000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x200400) preadv(r1, &(0x7f00008a5000)=[{&(0x7f0000d84000+0x7d7)=""/81, 0x51}, {&(0x7f0000ed6000)=""/200, 0xc8}, {&(0x7f0000a3d000)=""/178, 0xb2}, {&(0x7f00001f3000-0x1000)=""/4096, 0x1000}], 0x4, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000022000-0x8)={0x3, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 219.189918] binder: 1921:1939 ioctl 40046207 0 returned -16 [ 219.197049] binder: 1921:1931 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 219.197059] binder: 1921:1931 BC_INCREFS_DONE u0000000000000000 no match 2018/01/26 10:31:11 executing program 2: clock_gettime(0xfffffffffffffff1, &(0x7f00006d4000)={0x0, 0x0}) [ 219.200450] binder_alloc: 1921: binder_alloc_buf, no vma [ 219.200475] binder: 1928:1940 transaction failed 29189/-3, size 0-0 line 2903 [ 219.205733] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.231582] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.247685] binder: 1926:1938 transaction failed 29189/-22, size 0-0 line 2788 [ 219.247748] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.280350] binder: 1946:1948 transaction failed 29189/-22, size 0-0 line 2788 [ 219.280414] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.286234] binder: 1945:1947 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 219.286247] binder: 1945:1947 BC_INCREFS_DONE node 516 has no pending increfs request [ 219.286263] binder: 1945:1947 ioctl c0306201 2000efd0 returned -11 [ 219.296921] binder_alloc: 1945: binder_alloc_buf, no vma [ 219.297079] binder: 1946:1948 transaction failed 29189/-3, size 0-0 line 2903 [ 219.306331] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.307813] binder: BINDER_SET_CONTEXT_MGR already set [ 219.307827] binder: 1945:1956 ioctl 40046207 0 returned -16 [ 219.317997] binder: 1945:1947 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 219.318057] binder: 1945:1947 BC_INCREFS_DONE u0000000000000000 no match [ 219.338289] binder: 1959:1962 transaction failed 29189/-22, size 0-0 line 2788 [ 219.339248] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.341932] binder: 1960:1963 transaction failed 29189/-22, size 0-0 line 2788 [ 219.364263] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.378028] binder: 1959:1962 transaction failed 29189/-22, size 0-0 line 2788 [ 219.384443] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.403848] binder: 1965:1968 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 219.403860] binder: 1965:1968 BC_INCREFS_DONE node 521 has no pending increfs request [ 219.403878] binder: 1965:1968 ioctl c0306201 2000efd0 returned -11 [ 219.407779] binder_alloc: 1965: binder_alloc_buf, no vma [ 219.407803] binder: 1971:1972 transaction failed 29189/-3, size 0-0 line 2903 [ 219.407874] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.416098] binder_alloc: 1965: binder_alloc_buf, no vma [ 219.416122] binder: 1971:1972 transaction failed 29189/-3, size 0-0 line 2903 [ 219.424356] binder: BINDER_SET_CONTEXT_MGR already set [ 219.424372] binder: 1965:1976 ioctl 40046207 0 returned -16 [ 219.430779] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.438811] binder: 1965:1968 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000a0d000-0x40)={0xec90, 0x9, 0x7, 0x4, 0x200, 0x0, 0x1f, 0x2}, &(0x7f0000022000-0x40)={0xffff, 0x0, 0x800, 0x800, 0x1, 0x72, 0x4cc6, 0x842}, &(0x7f0000fee000+0x3d)={0x100, 0x32, 0x1000, 0x3e1, 0x5, 0x100, 0x9, 0x1e}, &(0x7f0000ce8000)={0x0, 0x1c9c380}, &(0x7f0000fbd000)={&(0x7f00007c9000)={0x0}, 0x8}) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) 2018/01/26 10:31:12 executing program 7: syslog(0x1, &(0x7f0000001000-0xf8)=""/248, 0x67) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000001000-0x4)=0x0) 2018/01/26 10:31:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r4, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r7, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f00001a5000)="89c032cebbefb02b54d653777a066110472910b93324be6c4b5b00b0d47bbfc44f7a46e1ffba318f90e46cf135632a430036d24f26722a479523f7290c6da54b3370ac2a0fadc54e4bb456cd45d21e7fca8a1c2ff82a049bc58e7846286e3226a18a1e5974c94d6c8d3d67cc447bc7d99596fed4511e5ce86e0cf46f4921db7249026eb0a1020a24d700cb7b357cebbd3f219857d89c0c7ea639b8452a0e29db0ee56e5c36089b4fcee041f0720f49d725fb28df01a1dba306c5302aa0530f20536dd370553630d69d88cd297c8d0d064a6eb4537924cfe838") getsockopt$inet6_buf(r6, 0x29, 0xcc, &(0x7f0000004000-0x1e)=""/30, &(0x7f0000001000)=0x1e) fsetxattr(r2, &(0x7f0000ea1000-0xe)=@known='system.advise\x00', &(0x7f0000938000-0x1)='\x00', 0x1, 0x2) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00009b8000)=0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000539000-0x10)='/selinux/policy\x00', 0x0, 0x0) 2018/01/26 10:31:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) getrandom(&(0x7f00009f9000)=""/35, 0x23, 0x1) pipe(&(0x7f0000db2000-0x8)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000332000)={0x0, 0x0, ""/64, 0x0, ""/8, ""/32, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = open(&(0x7f000006c000+0x929)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) accept4$packet(r3, &(0x7f00006ed000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000aaa000-0x4)=0x14, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000c87000-0xe8)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @rand_addr=0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003c6000)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000f8e000)={{{@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16}, 0x1, 0x1, 0x2, 0x90d, 0xa, 0xa0, 0x0, 0x0, r4, r5}, {0x8ba0, 0x2, 0xfffffffffffffff8, 0x6, 0x5, 0x1, 0x7fffffff, 0x3}, {0x1, 0x6, 0x8, 0x101}, 0x4, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x0, 0x13}, 0x1, 0x2b}, 0x2, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0, 0x1, 0x2, 0x7, 0x1, 0x36, 0x7f}}, 0xe8) 2018/01/26 10:31:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000517000-0xa)='/dev/vcs#\x00', 0x81, 0x40000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000703000)={0x0, 0x0}, &(0x7f0000002000)=0x8) syz_open_dev$sndctrl(&(0x7f0000ba0000-0x13)='/dev/snd/controlC#\x00', 0x9, 0x2) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00001c0000)=@assoc_value={r1, 0x2}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f00004f1000)={0x0, 0x0}) r2 = socket$inet6(0xa, 0x802, 0x0) bind$inet6(r2, &(0x7f000076b000)={0xa, 0xffffffffffffffff, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f00004d5000-0x1000)="", 0x0, 0x0, &(0x7f0000089000)={0xa, 0x3, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000036000)=""/176) 2018/01/26 10:31:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000ea1000)=0x0) 2018/01/26 10:31:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000880000-0xa)='/dev/cuse\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000302000-0x8)=0x5) pread64(r0, &(0x7f0000ac5000)=""/56, 0x38, 0x0) write$fuse(0xffffffffffffffff, &(0x7f00006a0000-0x5a)={0x10, 0x0, 0x0, @random=""}, 0x10) clock_gettime(0x0, &(0x7f00002ca000-0x8)={0x0, 0x0}) futimesat(r0, &(0x7f000068d000-0x8)='./file0\x00', &(0x7f0000df9000)={{0x0, 0x0}, {r1, r2/1000+10000}}) 2018/01/26 10:31:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) readahead(r0, 0xfc2, 0x1c000000000) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x8000000000000}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 219.438821] binder: 1965:1968 BC_INCREFS_DONE u0000000000000000 no match [ 219.676128] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:12 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000001000)={@loopback={0x0, 0x1}, 0xfffffffffffff71e, 0x0, 0x3, 0x1, 0xc5, 0x8, 0x100000001}, 0x20) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000003000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syslog(0x9, &(0x7f0000000000)=""/248, 0xfffffffffffffff9) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001000)={0x0, 0x0}, 0x84800) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000000)=0x0) write(r0, &(0x7f0000000000)="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", 0x1000) 2018/01/26 10:31:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) fcntl$getown(r0, 0x9) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 219.700195] binder: 1979:1984 transaction failed 29189/-22, size 0-0 line 2788 [ 219.710126] binder: 1983:1986 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 219.710140] binder: 1983:1986 BC_INCREFS_DONE node 525 has no pending increfs request 2018/01/26 10:31:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00005a9000-0xd)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$amidi(&(0x7f000016d000)='/dev/amidi#\x00', 0x8, 0x260080) openat$audio(0xffffffffffffff9c, &(0x7f0000cc3000-0xb)='/dev/audio\x00', 0x4400, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000a10000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000bea000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000c98000)=0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000697000)="", &(0x7f0000ffe000)=""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)={{0x0, 0x0}, {0x0, 0x0}}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000312000)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000ff0000)=0x0, 0x4) sendto$inet(r4, &(0x7f0000fd0000)="", 0xfffffffffffffec1, 0x20000801, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) tkill(r3, 0x1000000000013) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:12 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000001000-0x8)='./file0\x00') r0 = socket(0x1f, 0xb, 0xff) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000002000-0x4)=0x0, &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00005a3000)={0x0, 0x0}) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00008c6000)=0x0, &(0x7f0000858000)=0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f000025b000)='/proc/self/net/pfkey\x00', 0x199041, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000a1f000)={0x4, 0x0, 0x10003, 0x2}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40086437, &(0x7f0000303000)={r3, 0x4}) r4 = syz_open_dev$binder(&(0x7f00002fb000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) write$vnet(r2, &(0x7f000065b000-0x68)={0x1, {&(0x7f000002f000-0x52)=""/82, 0x52, &(0x7f00006ca000-0x84)=""/132, 0x1, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x68) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000ee7000)={0x0, 0xf6d5, 0x9b, 0x5}, 0x10) 2018/01/26 10:31:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) finit_module(r0, &(0x7f000051c000)='/dev/binder#\x00', 0x2) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000486000)='/dev/rfkill\x00', 0x400, 0x0) openat(r2, &(0x7f0000bbe000)='./file0\x00', 0x400801, 0x28) fgetxattr(r0, &(0x7f00004e2000-0xd)=@known='security.evm\x00', &(0x7f0000609000)=""/158, 0x9e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00008a9000)=[@in={0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x10) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = dup(r0) setsockopt$inet6_buf(r1, 0x29, 0x2a, &(0x7f0000a89000-0x1000)="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", 0x1000) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000476000)={0x0, 0x1, 0xff, 0x7, 0x3ff, 0x1}, &(0x7f0000352000-0x4)=0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000a78000-0xa)={r2, 0x2, 0x1, [0x6af5]}, &(0x7f00006ea000-0x4)=0xa) [ 219.710157] binder: 1983:1986 ioctl c0306201 2000efd0 returned -11 [ 219.710432] binder_alloc: 1983: binder_alloc_buf, no vma [ 219.710462] binder: 1985:1990 transaction failed 29189/-3, size 0-0 line 2903 [ 219.711239] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:12 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000001000-0xb)='{(,-vmnet1\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$selinux_load(r0, &(0x7f0000002000-0x2e)={0xf97cff8c, 0x442, 'SE Linux', "51015e85c8d17959d84dcfc3154601a9df12d5fea7f046e4ce9f2bd2b52f"}, 0x255) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x1) syslog(0x24, &(0x7f0000001000)=""/248, 0x44db4ea1) 2018/01/26 10:31:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000842000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ea5000-0xc)='/dev/rfkill\x00', 0x60040, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000b8f000-0xad)={0x0, 0xa5, "880b048c69a515d04866de638c7bc93359f5c99dfa842beae12420ced4777581ceb1a6763848f357db6b93ab692353eb487b886dc039ea2edde44b3cc80d8e84088bba7b409ddc5643b56dabf7abbb4f4106fe583205f078d18a99cccb3889ae99017c5b9e6b39e9ecd23c7941e5cf1c504cfa17ed85611330c9ecb2c0e627f377574209b19cea1abab224d20a05b80a6f78ad81136111b470ae8c68e5a271b558abbeb0bc"}, &(0x7f0000ff8000-0x4)=0xad) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00004a1000)=@assoc_value={r4, 0x5}, 0x8) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f000037c000-0x20)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000ae9000)={r2, 0x0, 0x2, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 10:31:12 executing program 7: syslog(0xfffffffe, &(0x7f0000ee2000)=""/248, 0xfffffdc5) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000083c000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) [ 219.718743] binder_alloc: 1983: binder_alloc_buf, no vma [ 219.718767] binder: 1987:1993 transaction failed 29189/-3, size 0-0 line 2903 [ 219.721710] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/26 10:31:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 219.721731] binder: 1983:1997 ioctl 40046207 0 returned -16 [ 219.723825] binder_alloc: 1983: binder_alloc_buf, no vma [ 219.723851] binder: 1987:1993 transaction failed 29189/-3, size 0-0 line 2903 [ 219.730387] binder: 1983:1997 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 219.730399] binder: 1983:1997 BC_INCREFS_DONE u0000000000000000 no match [ 219.744218] binder_alloc: 1983: binder_alloc_buf, no vma [ 219.744249] binder: 1985:1990 transaction failed 29189/-3, size 0-0 line 2903 [ 219.754515] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.754687] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.774492] binder: 2004:2005 transaction failed 29189/-22, size 0-0 line 2788 [ 219.774694] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.775624] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.789823] binder: 2004:2008 transaction failed 29189/-22, size 0-0 line 2788 [ 219.805252] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.815755] audit: type=1400 audit(1516962672.176:297): avc: denied { write } for pid=2010 comm="syz-executor0" name="net" dev="proc" ino=83408 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 219.815807] audit: type=1400 audit(1516962672.181:298): avc: denied { add_name } for pid=2010 comm="syz-executor0" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 219.816507] audit: type=1400 audit(1516962672.182:299): avc: denied { create } for pid=2010 comm="syz-executor0" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 [ 219.820246] binder: 2006:2009 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 219.820256] binder: 2006:2009 BC_INCREFS_DONE node 532 has no pending increfs request [ 219.820270] binder: 2006:2009 ioctl c0306201 2000efd0 returned -11 [ 219.826064] binder: 2010:2011 transaction failed 29189/-22, size 0-0 line 2788 [ 219.827230] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.844839] binder: 2013:2015 transaction failed 29189/-22, size 0-0 line 2788 [ 219.845651] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.872858] binder: 2013:2025 transaction failed 29189/-22, size 0-0 line 2788 [ 219.875177] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.881284] binder: 2010:2017 transaction failed 29189/-22, size 0-0 line 2788 [ 219.883173] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.896235] binder: BINDER_SET_CONTEXT_MGR already set [ 219.896245] binder: 2006:2026 ioctl 40046207 0 returned -16 [ 219.908574] binder: 2006:2009 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 219.908586] binder: 2006:2009 BC_INCREFS_DONE u0000000000000000 no match [ 219.925247] binder: 2030:2032 transaction failed 29189/-22, size 0-0 line 2788 [ 219.925371] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.942130] irq bypass consumer (token 000000005abc10fd) registration fails: -16 2018/01/26 10:31:12 executing program 5: r0 = socket$inet6(0xa, 0x80005, 0x0) getsockname(r0, &(0x7f0000c5d000)=@hci={0x0, 0x0, 0x0}, &(0x7f00005aa000-0x4)=0x6) setsockopt(r0, 0x84, 0x2, &(0x7f0000000000)="", 0x0) alarm(0x1000) 2018/01/26 10:31:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r4, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() r5 = syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r7, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f00001a5000)="89c032cebbefb02b54d653777a066110472910b93324be6c4b5b00b0d47bbfc44f7a46e1ffba318f90e46cf135632a430036d24f26722a479523f7290c6da54b3370ac2a0fadc54e4bb456cd45d21e7fca8a1c2ff82a049bc58e7846286e3226a18a1e5974c94d6c8d3d67cc447bc7d99596fed4511e5ce86e0cf46f4921db7249026eb0a1020a24d700cb7b357cebbd3f219857d89c0c7ea639b8452a0e29db0ee56e5c36089b4fcee041f0720f49d725fb28df01a1dba306c5302aa0530f20536dd370553630d69d88cd297c8d0d064a6eb4537924cfe838") getsockopt$inet6_buf(r6, 0x29, 0xcc, &(0x7f0000004000-0x1e)=""/30, &(0x7f0000001000)=0x1e) fsetxattr(r2, &(0x7f0000ea1000-0xe)=@known='system.advise\x00', &(0x7f0000938000-0x1)='\x00', 0x1, 0x2) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00009b8000)=0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000539000-0x10)='/selinux/policy\x00', 0x0, 0x0) 2018/01/26 10:31:12 executing program 2: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0xd, 0x3, &(0x7f0000002000)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, [], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000004000-0xa)='syzkaller\x00', 0x1, 0xc3, &(0x7f0000007000-0xc3)=""/195, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000009000-0x4)=0x57bd, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000009000)=r0, 0x4) 2018/01/26 10:31:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f000074a000-0x9)='/dev/rtc\x00', 0x210000, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000ace000)='/selinux/enforce\x00', 0x200000, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00004f4000)={0x2, 0x0}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000011a000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x400000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) arch_prctl(0x1003, &(0x7f0000186000)="cec5736bdcee555801b5ee163c49bc1e945049df7f749be7d449d9d14d2232b628deccfc4bde9b108c0da6a4ee49b44ecef3acb123e4dd1937b4eec1af2599a1a7f8799b87cf4e280e443d92c1c5a5845e864e08bd") 2018/01/26 10:31:12 executing program 7: syslog(0x3, &(0x7f0000733000-0xf8)=""/248, 0xf8) r0 = syz_open_procfs(0x0, &(0x7f0000508000)='net/ptype\x00') bind$ipx(r0, &(0x7f0000869000)={0x4, 0x7, 0x8001, "9358e1a0428e", 0x5, 0x0}, 0x10) 2018/01/26 10:31:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000aa000-0x18)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000154000-0x4)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00002bb000)={r3, 0x1000, "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"}, &(0x7f00003d8000-0x4)=0x1008) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) fchmod(r0, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair(0x3, 0x6, 0x401, &(0x7f00006c4000)={0x0, 0x0}) recvmmsg(r2, &(0x7f00007fe000)=[{{&(0x7f00005bd000)=@sco={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8, &(0x7f0000480000)=[{&(0x7f00005e8000-0x1000)=""/4096, 0x1000}, {&(0x7f00004e3000)=""/46, 0x2e}, {&(0x7f0000939000)=""/23, 0x17}], 0x3, 0x0, 0x0, 0x2}, 0x7}, {{&(0x7f0000bbe000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, 0x58, &(0x7f0000526000-0x18)=[{&(0x7f0000fcd000)=""/117, 0x75}, {&(0x7f0000399000)=""/157, 0x9d}, {&(0x7f00003d9000-0xbc)=""/188, 0xbc}], 0x3, &(0x7f000079b000)=""/229, 0xe5, 0x101}, 0xd63}, {{0x0, 0x0, &(0x7f0000a4e000)=[{&(0x7f000090b000-0x38)=""/56, 0x38}, {&(0x7f0000cc1000-0xf2)=""/242, 0xf2}, {&(0x7f0000d5d000-0x1000)=""/4096, 0x1000}, {&(0x7f00001a9000)=""/27, 0x1b}], 0x4, &(0x7f00007cf000)=""/4096, 0x1000, 0x2}, 0x812}, {{&(0x7f0000600000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, 0x14, &(0x7f0000ffc000-0x18)=[{&(0x7f0000ecf000-0x4b)=""/75, 0x4b}, {&(0x7f0000a48000-0x4d)=""/77, 0x4d}, {&(0x7f0000298000)=""/187, 0xbb}], 0x3, &(0x7f0000e60000)=""/4096, 0x1000, 0xff39}, 0x7}, {{0x0, 0x0, &(0x7f00009ed000)=[{&(0x7f00005db000)=""/219, 0xdb}, {&(0x7f0000c67000-0xf9)=""/249, 0xf9}, {&(0x7f0000596000)=""/112, 0x70}, {&(0x7f0000385000-0x28)=""/40, 0x28}], 0x4, &(0x7f0000240000)=""/169, 0xa9, 0x81}, 0x1}, {{&(0x7f0000172000-0x32)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}}}, 0x32, &(0x7f0000ad1000-0x10)=[{&(0x7f0000acc000)=""/54, 0x36}, {&(0x7f0000dac000-0xea)=""/234, 0xea}], 0x2, 0x0, 0x0, 0x5}, 0xe8a7}, {{&(0x7f0000b15000)=@un=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8, &(0x7f0000d70000-0x10)=[{&(0x7f0000f41000-0xfd)=""/253, 0xfd}, {&(0x7f0000350000-0x2b)=""/43, 0x2b}], 0x2, &(0x7f00000fb000)=""/167, 0xa7, 0xffffffffffffff7f}, 0x5}], 0x7, 0x2001, &(0x7f0000b2c000-0x8)={0x0, 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000dca000-0x50)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x11}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x9, 0x6, 0x8, 0x100, 0x5, 0x2100002, r3}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000263000-0x4)=0x5, 0x4) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000dff000-0x4)=0x7) getresuid(&(0x7f0000bc9000)=0x0, &(0x7f0000fc5000)=0x0, &(0x7f000024d000)=0x0) close(r0) setsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f0000305000)={@local={0xac, 0x14, 0x0, 0xaa}, @multicast2=0xe0000002}, 0x8) r4 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x1007fe) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) 2018/01/26 10:31:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0xfffffffffffffef2) openat$dsp(0xffffffffffffff9c, &(0x7f00008ed000)='/dev/dsp\x00', 0x6502, 0x0) unlink(&(0x7f0000c90000-0x8)='./file0\x00') socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f00004dd000-0xe)="02e8d246f205240424a734a9cef8", 0xe, 0x0, &(0x7f0000725000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 219.942567] binder: 2030:2033 transaction failed 29189/-22, size 0-0 line 2788 [ 219.954453] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.220162] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.236005] binder: 2040:2042 transaction failed 29189/-22, size 0-0 line 2788 2018/01/26 10:31:12 executing program 2: r0 = socket$inet6(0xa, 0x7, 0x3) unshare(0x400) recvmsg(r0, &(0x7f00001e1000)={&(0x7f000068b000)=@can={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f00008f8000-0x40)=[], 0x0, &(0x7f000076d000-0xf7)=""/247, 0xf7, 0x0}, 0x0) [ 220.250335] binder: 2038:2046 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 220.250347] binder: 2038:2046 BC_INCREFS_DONE node 540 has no pending increfs request [ 220.250362] binder: 2038:2046 ioctl c0306201 2000efd0 returned -11 [ 220.252854] binder_alloc: 2038: binder_alloc_buf, no vma [ 220.252876] binder: 2043:2049 transaction failed 29189/-3, size 0-0 line 2903 [ 220.256934] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.275957] binder: BINDER_SET_CONTEXT_MGR already set [ 220.275975] binder: 2038:2052 ioctl 40046207 0 returned -16 [ 220.303434] binder: 2038:2052 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 220.303446] binder: 2038:2052 BC_INCREFS_DONE u0000000000000000 no match 2018/01/26 10:31:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:12 executing program 3: r0 = socket$inet(0x2, 0x2, 0x4000001083) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000000)=""/222, 0xde) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00004ac000+0x407)='/dev/rfkill\x00', 0x40100, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00006ce000-0x70)={[{0x1, 0x3, 0x6, 0x0, 0x9, 0xfffffffffffffff7, 0x8, 0x10001, 0x47, 0x5495, 0x8001, 0x7, 0xffffffff}, {0xe20, 0x3, 0x2, 0x81, 0x81, 0x20, 0x6, 0x6, 0xfffffffffffffff9, 0x0, 0x387, 0x4, 0x4}, {0xb6, 0xa7e, 0x3ff, 0x80000001, 0x7ff, 0xa56, 0x8, 0x3, 0x1000, 0x6, 0x0, 0x1f, 0x3}], 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/26 10:31:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r4, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() r5 = syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r6, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r7, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) ioctl$PIO_FONTX(r5, 0x4b6c, &(0x7f00001a5000)="89c032cebbefb02b54d653777a066110472910b93324be6c4b5b00b0d47bbfc44f7a46e1ffba318f90e46cf135632a430036d24f26722a479523f7290c6da54b3370ac2a0fadc54e4bb456cd45d21e7fca8a1c2ff82a049bc58e7846286e3226a18a1e5974c94d6c8d3d67cc447bc7d99596fed4511e5ce86e0cf46f4921db7249026eb0a1020a24d700cb7b357cebbd3f219857d89c0c7ea639b8452a0e29db0ee56e5c36089b4fcee041f0720f49d725fb28df01a1dba306c5302aa0530f20536dd370553630d69d88cd297c8d0d064a6eb4537924cfe838") getsockopt$inet6_buf(r6, 0x29, 0xcc, &(0x7f0000004000-0x1e)=""/30, &(0x7f0000001000)=0x1e) fsetxattr(r2, &(0x7f0000ea1000-0xe)=@known='system.advise\x00', &(0x7f0000938000-0x1)='\x00', 0x1, 0x2) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f00009b8000)=0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2018/01/26 10:31:12 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)=0x0) mmap(&(0x7f0000000000/0xc000)=nil, 0xc000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f000000c000-0xb)='net/psched\x00') getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000007000-0xe8)={{{@in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in6=@loopback={0x0, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000000a000)=0xe8) sendto$packet(r1, &(0x7f000000b000-0x88)="b5f698c5cff5dc52c2821592e015488b347602a6ac8ffa0bb5323bc257bc6177a8612c56e24e59fc10590074f00e37641d3ee1aa057cd7e79cb914983dae04fb9a27d64ee6a3197272f6dfcdbd8f0b7d00e67ac8fd0a55432fefedb7124179be9c666d54daba3a871a9403eb2e2148743bda98814c9bb1261ad0db5aa76dce1c832f1d5df08e0a4a", 0x88, 0x4000, &(0x7f0000003000)={0x11, 0xfd, r2, 0x1, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, [0x0, 0x0]}, 0x14) lseek(r1, 0x28dd, 0x0) 2018/01/26 10:31:12 executing program 7: syslog(0x5, &(0x7f0000001000-0xf8)=""/248, 0xfffffffffffffe2c) 2018/01/26 10:31:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getgid() chown(&(0x7f00007c5000-0x8)='./file0\x00', 0x0, 0x0) gettid() getresgid(&(0x7f0000708000-0x4)=0x0, &(0x7f0000f87000)=0x0, &(0x7f0000432000)=0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000a01000)='/dev/dmmidi#\x00', 0x70, 0x82) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000b61000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000003000-0x30)={0x4, 0x0, &(0x7f0000005000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000001000)=""}) openat(r0, &(0x7f000090f000-0x8)='./file0\x00', 0x500, 0x14) poll(&(0x7f000000b000-0x30)=[{r0, 0x0, 0x0}], 0x1, 0x0) 2018/01/26 10:31:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0xffffffffffffff5f, 0x0, &(0x7f0000803000-0x4c)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x60, 0x30, &(0x7f00003bd000)=[@fda={0x66646185, 0xa, 0x4, 0x2f}, @fda={0x66646185, 0x8, 0x1, 0x5}, @fda={0x66646185, 0x9, 0x3, 0x7}], &(0x7f0000834000)=[0x30, 0x0, 0x78, 0x28, 0x0, 0x38]}, 0x3}}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000078e000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000c86000)=""/218, &(0x7f00005bc000-0x4)=0xda) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000f9c000-0xd)='/dev/usbmon#\x00', 0x5, 0x220401) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000c58000)={0x0, 0xd46e}, &(0x7f000045c000-0x4)=0x8) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000213000)=0x0, &(0x7f0000bda000-0x4)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000dd5000)={0x7ec, 0x200, 0xfffffffffffffe01, 0x2, r3}, &(0x7f0000af5000-0x4)=0x10) [ 220.329967] binder: 2040:2054 transaction failed 29189/-22, size 0-0 line 2788 [ 220.382277] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.387795] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:12 executing program 7: syslog(0xf, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:12 executing program 7: syslog(0x1, &(0x7f0000a41000)=""/248, 0xf8) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000001000-0xb)='/dev/adsp#\x00', 0x5, 0x111001) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r2 = getpgid(0xffffffffffffffff) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000001000-0x4)=0x1, 0x4) ptrace(0x420f, r2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt(r1, 0xfffffffffffffff8, 0x800, &(0x7f0000003000-0x80)="35590ca6dd1768bec119abc231d357bbe65e4b8dc2075c4e234642821008de5aa7e3c36736aa59caf71cf09c2ff90f75236e864540fa93d50b74452a695f7ce9a4674724268c2923335137e0bdaa8e05b5e63d7fb0f7049ca9047939866c3f717b5db5d488b3cdd7cac5249e96078c3ecea77db1edc44e264b87b00c3073a3ce", 0x80) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000002000-0x4)=0x800) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000002000)={@broadcast=0x0, @dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f0000003000-0x4)=0xc) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002000)={r3, @multicast2=0xe0000002, @remote={0xac, 0x14, 0x0, 0xbb}}, 0xc) [ 220.421740] binder: 2072:2076 transaction failed 29189/-22, size 0-0 line 2788 [ 220.428006] binder: 2071:2080 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 220.428039] binder: 2071:2080 BC_INCREFS_DONE node 544 has no pending increfs request 2018/01/26 10:31:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) futex(&(0x7f000035b000)=0xa9a4, 0x9, 0x18, &(0x7f0000988000)={0x0, 0x1c9c380}, &(0x7f0000a0c000)=0x9, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:12 executing program 4: socketpair$packet(0x11, 0x0, 0x300, &(0x7f000090a000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000e0c000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r1, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000458000-0x30)={0xc, 0x0, &(0x7f0000c81000)=[@free_buffer={0x40086303, r2}], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000297000)=0x0) r5 = fcntl$getown(r1, 0x9) setpgid(r4, r5) r6 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r6, 0x54a1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000bfa000)={0x0, 0x401, 0x6, 0x10000000000000, 0x1d07, 0x5}, &(0x7f0000e3a000-0x4)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000cd6000-0x6)={r7, 0x8}, 0x6) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f00000c0000-0x70)={[{0x9, 0xa7, 0x81, 0x2, 0x8, 0x7fff, 0x3f, 0x5, 0x3bdc, 0x1f1, 0x0, 0x80, 0x0}, {0x54bc, 0x0, 0x200, 0x0, 0xfffffffffffffffe, 0x7ff, 0x7, 0x7, 0x1, 0x7, 0xe66b, 0x6a, 0x0}, {0x0, 0x7, 0x3, 0x5, 0x1ef, 0x800, 0x5, 0x5, 0x4, 0x8001, 0x2, 0xffffffffffffff91, 0xfc0b}], 0x7a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendto$llc(r6, &(0x7f0000d46000-0x54)="e3d97f679b86d0a752a6a08fecec53942b43e52063fd7f4f91ff5d3265f9615a289b9862543f1c4601e8190eccad8d1027f88a3ac1b74e3de6427e93c564f7937a06d55bf6027cd0e368e5121a55a4d18cf76bda", 0x54, 0x20000000, &(0x7f0000451000-0x10)={0x1a, 0xf5, 0x10001, 0x100, 0x0, 0x3, @random="ff8632bcdf92", [0x0, 0x0]}, 0x10) 2018/01/26 10:31:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) getcwd(&(0x7f0000336000)=""/226, 0xe2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000b8b000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f000038c000-0x4)=0x1c) r2 = syz_open_dev$admmidi(&(0x7f000097d000)='/dev/admmidi#\x00', 0x0, 0x200040) setsockopt$inet6_dccp_buf(r2, 0x21, 0xc, &(0x7f0000587000)="2e21209b0cbf1ede4a66e1c1d58187706ae257196e6057681bd0db56fcd68faa7d8bc7d9ef54b7c54e4fc546075959fc1ad010a697d423bcb5172d5b123b613ea82b3de305bef812bfdb22b9a55a12c32cfa480ed479678923558098d6b679228ce341c7334b7897a3c03c1a6574c18ca92c809b9fa642765d20790306e16b5c028f4f64e47a10feee0a1fe3a7c07249686f2fe99d1f27d5d1d536649ab141e485fef506ff21924ef446df177f3ba6918705d1", 0xb3) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000b1b000-0x28)={'vcan0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000ecc000)={0x5, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000362000-0x10)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0]}, 0x10) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000c32000-0xc)=@nl=@proc={0x0, 0x0, 0xffffffffffffffff, 0x0}, &(0x7f0000f2c000)=0xc, 0x80800) sendmsg$rds(r0, &(0x7f00003a8000+0x9b3)={&(0x7f0000aa0000-0x10)={0x2, 0x1, @dev={0xac, 0x14, 0x0, 0x16}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000f45000)=[{&(0x7f0000db1000-0x45)=""/69, 0x45}, {&(0x7f00004bd000)=""/121, 0x79}, {&(0x7f00006df000)=""/37, 0x25}], 0x3, 0x0, 0x0, 0x40004}, 0x800) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) close(r1) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00004f7000)={0x0, 0x8001}, &(0x7f00001b2000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000628000)={0x10000000000, 0x201, 0xffffffffffff8001, 0x6, r2}, &(0x7f00009f2000)=0x10) r3 = syz_open_dev$binder(&(0x7f0000863000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) [ 220.428053] binder: 2071:2080 ioctl c0306201 2000efd0 returned -11 [ 220.441565] binder: BINDER_SET_CONTEXT_MGR already set [ 220.441584] binder: 2071:2084 ioctl 40046207 0 returned -16 2018/01/26 10:31:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000fd000-0xd)='/dev/snd/seq\x00', 0x0, 0x400) r1 = syz_open_dev$audion(&(0x7f0000dac000-0xc)='/dev/audio#\x00', 0x4, 0x40) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00006ed000)=0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f000062f000)={{0xa, 0x3, 0x9, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x8}, {0xa, 0x2, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x196}, 0xffffffffffffb29a, [0x1, 0x3, 0x3, 0x100000001, 0x3, 0x703b, 0x1, 0x9]}, 0x5c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f00001f7000-0x5c)={0x8001, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00005d4000-0x4)=0x0) 2018/01/26 10:31:12 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0x0, &(0x7f0000000000)=""/248, 0xf8) r0 = creat(&(0x7f0000001000-0x8)='./file0\x00', 0x80) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000001000)=0x101) 2018/01/26 10:31:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000111000-0xb)='/dev/adsp#\x00', 0x6, 0x400000141080) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f0000920000)={{0x1, 0x5}, 'port0\x00', 0x64, 0x10, 0xc0c, 0x6, 0x1f, 0x100000000, 0x2, 0x0, 0x4, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000b90000-0x24)={0x7f, 0x1c, [0x9, 0x0, 0x10000000000000, 0x973b, 0x80000000, 0x8, 0x3]}) r3 = syz_open_dev$admmidi(&(0x7f0000ada000)='/dev/admmidi#\x00', 0xffff, 0x100) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000e40000-0x8)={0x7, 0x2, 0x8, 0x0}, 0x8) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000883000-0x8)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000d60000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000fb7000-0x18)={r2, 0x0, 0x0, 0x0}) [ 220.448104] binder: 2071:2080 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 220.448113] binder: 2071:2080 BC_INCREFS_DONE u0000000000000000 no match [ 220.454430] binder_alloc: 2071: binder_alloc_buf, no vma 2018/01/26 10:31:12 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000958000-0x11)='/selinux/enforce\x00', 0x141a00, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000000)=""/242) [ 220.454453] binder: 2078:2082 transaction failed 29189/-3, size 0-0 line 2903 [ 220.454598] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.482968] binder: 2078:2093 transaction failed 29189/-22, size 0-0 line 2788 [ 220.495315] binder_alloc: 2096: binder_alloc_buf, no vma [ 220.495339] binder: 2095:2099 transaction failed 29189/-3, size 0-0 line 2903 [ 220.495437] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.501352] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.506548] binder: 2096:2097 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 220.506559] binder: 2096:2097 BC_INCREFS_DONE node 547 has no pending increfs request [ 220.506573] binder: 2096:2097 ioctl c0306201 2000efd0 returned -11 [ 220.513178] binder: BINDER_SET_CONTEXT_MGR already set [ 220.513186] binder: 2096:2097 ioctl 40046207 0 returned -16 [ 220.516296] binder_alloc: 2096: binder_alloc_buf, no vma [ 220.516321] binder: 2095:2099 transaction failed 29189/-3, size 0-0 line 2903 [ 220.522253] binder: 2096:2097 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 220.522264] binder: 2096:2097 BC_INCREFS_DONE node 547 has no pending increfs request [ 220.522279] binder: 2096:2097 ioctl c0306201 2000efd0 returned -11 [ 220.535655] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.559528] binder: 2110:2113 transaction failed 29189/-22, size 0-0 line 2788 [ 220.560770] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.561555] binder: 2104:2107 transaction failed 29189/-22, size 0-0 line 2788 [ 220.561622] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.585311] binder_alloc: 2116: binder_alloc_buf, no vma [ 220.585337] binder: 2110:2117 transaction failed 29189/-3, size 0-0 line 2903 [ 220.589163] binder: 2120:2121 ERROR: BC_REGISTER_LOOPER called without request [ 220.590578] binder: 2116:2118 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 220.590617] binder: 2116:2118 BC_INCREFS_DONE node 552 has no pending increfs request [ 220.590633] binder: 2116:2118 ioctl c0306201 2000efd0 returned -11 [ 220.602683] binder_alloc: 2116: binder_alloc_buf, no vma [ 220.602708] binder: 2104:2107 transaction failed 29189/-3, size 0-0 line 2903 [ 220.602797] binder: BINDER_SET_CONTEXT_MGR already set [ 220.602813] binder: 2116:2124 ioctl 40046207 0 returned -16 [ 220.606065] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.623576] binder: 2116:2118 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000b22000-0xb)='/dev/adsp#\x00', 0x1f, 0x20000) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000ec0000-0x8)={0x10000, 0x7, 0x866c, 0x80004}, 0x8) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00009d4000)=0x0, 0x4) socket$packet(0x11, 0x400000002, 0x300) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00005e0000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f000075a000)=0x14) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000c27000)='/dev/autofs\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f000051b000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f00009ff000)=0x8) accept4(r2, &(0x7f000048d000-0x10)=@ipx={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, &(0x7f00000db000-0x4)=0x10, 0x80000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000428000)={r3, 0x2}, 0x8) 2018/01/26 10:31:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$dmmidi(&(0x7f000027d000-0xd)='/dev/dmmidi#\x00', 0x7fffffff, 0x145c82) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40046432, &(0x7f0000d16000-0x4)=0x1000) connect(r0, &(0x7f0000fd2000)=@can={0x1d, 0x0, 0x0, 0x0}, 0x10) 2018/01/26 10:31:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() r4 = syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r6, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f00001a5000)="89c032cebbefb02b54d653777a066110472910b93324be6c4b5b00b0d47bbfc44f7a46e1ffba318f90e46cf135632a430036d24f26722a479523f7290c6da54b3370ac2a0fadc54e4bb456cd45d21e7fca8a1c2ff82a049bc58e7846286e3226a18a1e5974c94d6c8d3d67cc447bc7d99596fed4511e5ce86e0cf46f4921db7249026eb0a1020a24d700cb7b357cebbd3f219857d89c0c7ea639b8452a0e29db0ee56e5c36089b4fcee041f0720f49d725fb28df01a1dba306c5302aa0530f20536dd370553630d69d88cd297c8d0d064a6eb4537924cfe838") getsockopt$inet6_buf(r5, 0x29, 0xcc, &(0x7f0000004000-0x1e)=""/30, &(0x7f0000001000)=0x1e) fsetxattr(r2, &(0x7f0000ea1000-0xe)=@known='system.advise\x00', &(0x7f0000938000-0x1)='\x00', 0x1, 0x2) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00009b8000)=0x0) 2018/01/26 10:31:13 executing program 2: mmap(&(0x7f0000000000/0x8e2000)=nil, 0x8e2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00008db000-0x10)={0x2, &(0x7f0000002000)=[{0x25, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}]}, 0x8) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000ba000)='/dev/qat_adf_ctl\x00', 0xdc0e25e769fc8fd3, 0x0) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f000066b000)=0x0) sendto$unix(r1, &(0x7f0000010000-0xa9)="", 0x0, 0x0, &(0x7f0000014000-0x8)=@abs={0x0, 0x0, 0x0}, 0x8) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000637000-0x4)=0x0) ptrace$poke(0x4, r3, &(0x7f0000554000)=0x0, 0x9) mmap(&(0x7f00008e2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00008e3000-0x11)='/dev/qat_adf_ctl\x00', 0x400, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000030000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f000072a000)={0x0, 0x4788, 0x30, 0x1000, 0x17}, &(0x7f0000080000-0x4)=0x18) mmap(&(0x7f00008e2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000868000-0x8)={r5, 0xffffffffffff9c0a}, &(0x7f00008e3000-0x4)=0x8) mmap(&(0x7f00008e2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00008e2000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f00008e2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008e3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008e3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008e3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008e3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00008e3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00008e3000)={{{@in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000004f000-0x4)=0x1a69b121) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f000080d000-0xc)={r7, @remote={0xac, 0x14, 0x0, 0xbb}, @empty=0x0}, 0xc) 2018/01/26 10:31:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000df6000-0x12)='/dev/snd/pcmC#D#p\x00', 0x5, 0x2) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000f23000)='tls\x00', 0x4) close(r0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00002a7000)='/dev/sequencer2\x00', 0x341280, 0x0) ioctl$TCGETA(r2, 0x5405, &(0x7f000051f000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2018/01/26 10:31:13 executing program 7: syslog(0x0, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00004d4000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:13 executing program 7: syslog(0xf, &(0x7f0000768000-0xf8)=""/248, 0xf8) [ 220.623587] binder: 2116:2118 BC_INCREFS_DONE u0000000000000000 no match [ 220.647285] binder: 2120:2125 ERROR: BC_REGISTER_LOOPER called without request [ 220.658503] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.858163] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:13 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000e5000)={0x0, 0x0}) r2 = fcntl$getown(0xffffffffffffffff, 0x9) ioprio_get$pid(0x3, r2) pselect6(0x40, &(0x7f0000bdd000)={0x90, 0x51, 0x0, 0xa4, 0x6, 0x9, 0x7ff, 0x8}, &(0x7f0000001000-0x40)={0x8, 0xffffffffffffff00, 0xd06, 0x8, 0x8, 0x3, 0x7, 0x5}, &(0x7f0000000000)={0x8, 0x6, 0x200, 0xfefc, 0x7, 0x4, 0x7, 0x5}, &(0x7f0000632000-0x8)={r0, r1+10000000}, &(0x7f0000388000-0x8)={&(0x7f000094b000)={0x1}, 0x8}) 2018/01/26 10:31:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) uselib(&(0x7f00008f4000)='./file0\x00') close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mknodat(r1, &(0x7f00007e7000)='./file0\x00', 0x1000, 0xadd) r2 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0186415, &(0x7f0000ae2000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x100000001, 0x5, 0x8, &(0x7f00002d7000/0x2000)=nil, 0x5}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 220.883751] binder: 2136:2140 transaction failed 29189/-22, size 0-0 line 2788 [ 220.888722] binder: 2135:2137 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 220.888732] binder: 2135:2137 BC_INCREFS_DONE node 556 has no pending increfs request 2018/01/26 10:31:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() r4 = syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r6, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f00001a5000)="89c032cebbefb02b54d653777a066110472910b93324be6c4b5b00b0d47bbfc44f7a46e1ffba318f90e46cf135632a430036d24f26722a479523f7290c6da54b3370ac2a0fadc54e4bb456cd45d21e7fca8a1c2ff82a049bc58e7846286e3226a18a1e5974c94d6c8d3d67cc447bc7d99596fed4511e5ce86e0cf46f4921db7249026eb0a1020a24d700cb7b357cebbd3f219857d89c0c7ea639b8452a0e29db0ee56e5c36089b4fcee041f0720f49d725fb28df01a1dba306c5302aa0530f20536dd370553630d69d88cd297c8d0d064a6eb4537924cfe838") getsockopt$inet6_buf(r5, 0x29, 0xcc, &(0x7f0000004000-0x1e)=""/30, &(0x7f0000001000)=0x1e) fsetxattr(r2, &(0x7f0000ea1000-0xe)=@known='system.advise\x00', &(0x7f0000938000-0x1)='\x00', 0x1, 0x2) [ 220.888746] binder: 2135:2137 ioctl c0306201 2000efd0 returned -11 [ 220.901143] binder_alloc: 2135: binder_alloc_buf, no vma [ 220.901166] binder: 2138:2144 transaction failed 29189/-3, size 0-0 line 2903 [ 220.901290] binder: BINDER_SET_CONTEXT_MGR already set [ 220.901303] binder: 2135:2145 ioctl 40046207 0 returned -16 [ 220.909253] binder: 2135:2137 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 220.909263] binder: 2135:2137 BC_INCREFS_DONE u0000000000000000 no match [ 220.963464] binder_alloc: 2156: binder_alloc_buf, no vma [ 220.963486] binder: 2149:2152 transaction failed 29189/-3, size 0-0 line 2903 [ 220.964448] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.968288] binder: undelivered TRANSACTION_ERROR: 29189 [ 220.971341] binder: 2156:2157 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 220.971350] binder: 2156:2157 BC_INCREFS_DONE node 558 has no pending increfs request [ 220.971364] binder: 2156:2157 ioctl c0306201 2000efd0 returned -11 [ 220.975697] binder_alloc: 2156: binder_alloc_buf, no vma [ 220.975719] binder: 2136:2159 transaction failed 29189/-3, size 0-0 line 2903 [ 220.976726] binder: BINDER_SET_CONTEXT_MGR already set [ 220.976736] binder: 2156:2161 ioctl 40046207 0 returned -16 [ 220.979920] binder_alloc: 2156: binder_alloc_buf, no vma [ 220.979944] binder: 2149:2152 transaction failed 29189/-3, size 0-0 line 2903 [ 220.989820] binder: 2156:2157 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 220.989831] binder: 2156:2157 BC_INCREFS_DONE u0000000000000000 no match [ 220.995284] binder_alloc: 2156: binder_alloc_buf, no vma [ 220.995306] binder: 2162:2163 transaction failed 29189/-3, size 0-0 line 2903 [ 221.003870] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.127319] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:13 executing program 7: r0 = syz_open_dev$admmidi(&(0x7f0000afd000)='/dev/admmidi#\x00', 0x0, 0x400000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00005de000)=0x0, &(0x7f0000001000-0x4)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000001000-0x138)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) setitimer(0x3, &(0x7f000097d000)={{0x77359400, 0x0}, {0x77359400, 0x0}}, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000001000)={0x0}, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x17, &(0x7f0000003000-0x4)=0x0, &(0x7f0000002000)=0xfffffffffffffe8e) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pwritev(r0, &(0x7f0000002000-0x20)=[{&(0x7f0000000000)="f2fa6a00bb98fe52c7c9fd0d4fbc16dd74cc2464ca45b8c69fefe0caa1f0a997ce423c6445d9788a962b6fab6d977f421c0777e483d4038cc08a651f42a8f32d87b0e9098b507c255802e19772847c7e438089f7560c35355eb8df67f3595bf94084ef9de86be35e5b095f60d8beb6011cd2da6ca81c12cbb51b9605c2ab8d8a0af5cf0517dda42c463f3d326881b25d737a8b9e6389c327f5a2712f7328e970652fbf3660c1f35de34cde9365cd2c05bddca5c04d5e4afecc714ee3c7cecf0bd037e96ce5d2650567ffa1ddd1900e71fa8d3b5324a83ec511918bde7910544d098a9c7c05ed4b67b22ec3855698f8a05daf6e5b932e07", 0xf7}, {&(0x7f0000002000-0xc9)="9b49a677671d3f0c16fc83cc920cf91fc7571aecacdbb8a9c690ebc695c9504ea0195d850d3786d8573b0bfc96608f0e854303fe18086c3ce300fc7b6689ec098a2897852af04a3b1016862a19c8bf916f1662a51bb6b91adf7d685f683d2f5c03ed55c21ce81d0dfcde7489b6b06056f31e236737daf59c3d00cbcb06f3fb895e860c4912f31adb77d4afa03e5164fe17ec9a57119070f46483e54c9a89d0a78f0f0664e85a41179e3edbd529452d0dc954bcab2e2fc0703460d16ff93cc84f2520a87dcf21a6682b", 0xc9}, {&(0x7f0000001000)="d92e7834e828acdd3f52eea4935f02a0d44d83babd5e933974db71e456bc10b4db9093983ea250", 0x27}, {&(0x7f0000000000)="7c9219954e90f40858dd9abfb1bd5b2a3445a452268507cee2f63fcbcd76d4a474e6d180aa8f64e2b1a19af78c5d921c549ba98277a418310b6f0a4bb0abad4f777863d3696b8dda7772e2473f45627e8a8b1488250381e48f03bb41732e4dd343b902a06f1fe097700e549f86b775b3ddd03029664b7f181acbc98f414de852b5a51378967b01479db5f2aa733f3a76b58a62f6769f6820dec8295089d79eb07a616f2aa470a7a60b192108fb99fc45e1a83e4e7c21432b0b", 0xb9}], 0x4, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000002000-0x4)=0x2) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f000029e000)={0x0, 0x0}) r2 = getpgrp(0xffffffffffffffff) r3 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0186405, &(0x7f0000001000-0x20)={0xffffffffffffffd0, 0x98, r2, 0x7fffffff, r3, 0x9, 0x3, 0x400}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000003000)=""/210, 0xd2, 0x40002160, &(0x7f0000004000-0x10)=@llc={0x1a, 0xff, 0x7, 0x0, 0x8, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, [0x0, 0x0]}, 0x10) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = syz_open_dev$midi(&(0x7f0000980000-0xb)='/dev/midi#\x00', 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f000070b000-0x18)={0x0, 0x335, []}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x4}, &(0x7f0000048000)=0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) futex(&(0x7f00007c3000-0x4)=0x0, 0x80000000000c, 0x0, &(0x7f00000cd000)={0x0, 0x0}, &(0x7f0000048000)=0x0, 0x0) futex(&(0x7f000000d000-0x4)=0x4, 0x80000000000b, 0x4, &(0x7f0000ee0000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000e7c000)='/dev/admmidi#\x00', 0x0, 0x2000) execveat(r0, &(0x7f000016a000)='./file0\x00', &(0x7f0000d49000-0x1c)=[&(0x7f0000fae000)='^^self\x00', &(0x7f00008ed000)='md5sumkeyring{\x00', &(0x7f00000d5000)='ppp0*4\x00', &(0x7f000057f000-0x1)='\x00', &(0x7f0000d27000-0x8)='],:user\x00', &(0x7f00003d5000-0x1)='\x00', &(0x7f0000266000-0x3)='#)\x00'], &(0x7f0000049000)=[&(0x7f0000328000)='selinux+trustedselfself\x00', &(0x7f0000eff000)='\x00', &(0x7f0000533000)='\x00', &(0x7f000029d000)="29142e7d00", &(0x7f0000d86000-0x2)=':\x00', &(0x7f00007f9000)='\x00'], 0x0) futex(&(0x7f000000d000-0x4)=0x0, 0xc, 0x1, &(0x7f0000fd8000-0x10)={0x77359400, 0x0}, &(0x7f0000048000)=0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000934000-0x8)={0x0, 0x0}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000476000)={{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x12, {0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @common='ifb0\x00'}) exit(0x0) 2018/01/26 10:31:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000d80000)={0x6, r0, 0x0}) 2018/01/26 10:31:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000e8b000-0x1c)={0x5, 0x6, 0x3, 0x9, 0x9, 0xffffffffffffffff, 0x100, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6d) fcntl$getown(r0, 0x9) 2018/01/26 10:31:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) accept4(r0, &(0x7f000016e000-0x10)=@can={0x0, 0x0, 0x0, 0x0}, &(0x7f0000c5a000-0x4)=0x10, 0x0) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() r4 = syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r6, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f00001a5000)="89c032cebbefb02b54d653777a066110472910b93324be6c4b5b00b0d47bbfc44f7a46e1ffba318f90e46cf135632a430036d24f26722a479523f7290c6da54b3370ac2a0fadc54e4bb456cd45d21e7fca8a1c2ff82a049bc58e7846286e3226a18a1e5974c94d6c8d3d67cc447bc7d99596fed4511e5ce86e0cf46f4921db7249026eb0a1020a24d700cb7b357cebbd3f219857d89c0c7ea639b8452a0e29db0ee56e5c36089b4fcee041f0720f49d725fb28df01a1dba306c5302aa0530f20536dd370553630d69d88cd297c8d0d064a6eb4537924cfe838") getsockopt$inet6_buf(r5, 0x29, 0xcc, &(0x7f0000004000-0x1e)=""/30, &(0x7f0000001000)=0x1e) [ 221.132832] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.138337] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.147955] binder: 2165:2167 transaction failed 29189/-22, size 0-0 line 2788 [ 221.158861] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.161442] binder_alloc: 2170: binder_alloc_buf, no vma 2018/01/26 10:31:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f00005a4000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000a46000)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 221.161463] binder: 2166:2174 transaction failed 29189/-3, size 0-0 line 2903 [ 221.163941] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.164064] binder: 2170:2175 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 221.164074] binder: 2170:2175 BC_INCREFS_DONE node 564 has no pending increfs request [ 221.164087] binder: 2170:2175 ioctl c0306201 2000efd0 returned -11 [ 221.166593] binder_alloc: 2170: binder_alloc_buf, no vma [ 221.166615] binder: 2172:2178 transaction failed 29189/-3, size 0-0 line 2903 2018/01/26 10:31:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() r4 = syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r5, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r6, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f00001a5000)="89c032cebbefb02b54d653777a066110472910b93324be6c4b5b00b0d47bbfc44f7a46e1ffba318f90e46cf135632a430036d24f26722a479523f7290c6da54b3370ac2a0fadc54e4bb456cd45d21e7fca8a1c2ff82a049bc58e7846286e3226a18a1e5974c94d6c8d3d67cc447bc7d99596fed4511e5ce86e0cf46f4921db7249026eb0a1020a24d700cb7b357cebbd3f219857d89c0c7ea639b8452a0e29db0ee56e5c36089b4fcee041f0720f49d725fb28df01a1dba306c5302aa0530f20536dd370553630d69d88cd297c8d0d064a6eb4537924cfe838") 2018/01/26 10:31:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000f37000-0x60)=""/96) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:13 executing program 5: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000001000-0xe)='/dev/admmidi#\x00', 0x8, 0x20040) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r0, 0x891b, &(0x7f0000001000-0x50)={@generic="f8e56e115dadc2aea74ba17a9cc95c8c", @ifru_addrs=@vsock={0x28, 0x0, 0x0, @any=0xffffffff, 0x0}}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000a86000-0xe)='net/sockstat6\x00') readv(r1, &(0x7f00002f7000)=[{&(0x7f0000771000)=""/161, 0xa1}], 0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f00004f6000)={0x0, 0x8, 0x9, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x200, 0xffffffff00000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 221.185228] binder: BINDER_SET_CONTEXT_MGR already set [ 221.185247] binder: 2170:2180 ioctl 40046207 0 returned -16 [ 221.192728] binder_alloc: 2170: binder_alloc_buf, no vma [ 221.192753] binder: 2166:2179 transaction failed 29189/-3, size 0-0 line 2903 [ 221.197229] binder: 2170:2175 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:13 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0x0, &(0x7f0000001000-0xf8)=""/248, 0x345) 2018/01/26 10:31:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f0000b73000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000047000)={0xb8, 0x0, &(0x7f0000ad1000)=[@acquire={0x40046305, 0x3}, @reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x40, 0x10, &(0x7f0000228000-0x40)=[@flat={0x776a2a85, 0xb, r1, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000978000-0x1)=0x0, 0x1, 0x3, 0x18}], &(0x7f0000f09000-0x10)=[0x38, 0x38]}, 0x9}}, @increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x4, 0x0, 0x80001, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, &(0x7f0000732000)=[], &(0x7f00000dd000-0x18)=[0x0, 0x30, 0x48]}}, @clear_death={0x400c630f, 0x4, 0x2}, @release={0x40046306, 0x2}], 0x61, 0x0, &(0x7f00000a8000-0x61)="c898ea6aa069ccae5e315640e0c096b7d06fd2d12d7a65fcca781f03719bce929a03faf0030ddff62fb83fe80082149bb4fbf2a1f2da96de7f824ba75ecaf567d40071c235e392840285d61f78c06247f6b7ed242fdab587fda9e9ba93a532640c"}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000aee000-0x10)='/dev/sequencer2\x00', 0x40, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000d46000-0x4)=0x69a0, 0x4) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(0xffffffffffffffff, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r5, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) 2018/01/26 10:31:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 221.197239] binder: 2170:2175 BC_INCREFS_DONE u0000000000000000 no match [ 221.221536] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.236458] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.247407] binder: 2165:2186 transaction failed 29189/-22, size 0-0 line 2788 [ 221.247731] binder: 2188:2189 transaction failed 29189/-22, size 0-0 line 2788 [ 221.248962] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.261836] binder_alloc: 2192: binder_alloc_buf, no vma [ 221.261862] binder: 2190:2195 transaction failed 29189/-3, size 0-0 line 2903 [ 221.262070] binder: 2192:2196 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 221.262081] binder: 2192:2196 BC_INCREFS_DONE node 570 has no pending increfs request [ 221.262097] binder: 2192:2196 ioctl c0306201 2000efd0 returned -11 [ 221.275443] binder_alloc: 2192: binder_alloc_buf, no vma [ 221.275468] binder: 2188:2197 transaction failed 29189/-3, size 0-0 line 2903 [ 221.275548] binder: BINDER_SET_CONTEXT_MGR already set [ 221.275556] binder: 2192:2198 ioctl 40046207 0 returned -16 [ 221.282691] binder: 2192:2198 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 221.282701] binder: 2192:2198 BC_INCREFS_DONE u0000000000000000 no match [ 221.302118] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.312488] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.313475] binder: 2203:2206 Acquire 1 refcount change on invalid ref 3 ret -22 [ 221.313485] binder: 2203:2206 got reply transaction with no transaction stack [ 221.313493] binder: 2203:2206 transaction failed 29201/-71, size 64-16 line 2703 [ 221.315677] binder: 2203:2206 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 221.315686] binder: 2203:2206 BC_INCREFS_DONE node 573 has no pending increfs request [ 221.315718] binder: 2203:2206 ioctl c0306201 2000efd0 returned -11 [ 221.327818] binder: BINDER_SET_CONTEXT_MGR already set [ 221.327839] binder: 2203:2212 ioctl 40046207 0 returned -16 [ 221.329317] binder_alloc: 2203: binder_alloc_buf, no vma [ 221.329339] binder: 2211:2214 transaction failed 29189/-3, size 0-0 line 2903 [ 221.329458] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.335166] binder_alloc: 2203: binder_alloc_buf, no vma [ 221.335190] binder: 2211:2215 transaction failed 29189/-3, size 0-0 line 2903 [ 221.336521] binder: 2203:2212 Acquire 1 refcount change on invalid ref 3 ret -22 [ 221.336532] binder: 2203:2212 got reply transaction with no transaction stack [ 221.336542] binder: 2203:2212 transaction failed 29201/-71, size 64-16 line 2703 [ 221.343111] binder_alloc: 2203: binder_alloc_buf, no vma [ 221.343133] binder: 2208:2209 transaction failed 29189/-3, size 0-0 line 2903 [ 221.346994] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.347456] binder: 2203:2206 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 221.347466] binder: 2203:2206 BC_INCREFS_DONE u0000000000000000 no match 2018/01/26 10:31:13 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/create\x00', 0x2, 0x0) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000f5c000-0x12)='/dev/snd/midiC#D#\x00', 0x10000, 0x4000) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f00002ec000-0x400)={"d5e7155f3c299ee8858f09850b932c55bbc0bcc70d507afe12b5d181e33653fed242de6c14b88933cdcb472b518d11354e921b6aad1a94547d7ede26da8221a74677d7ea291f542016f51558ff6f2e3dd18ee82d57bd25d25d438977461ec712fda400b10c515499f23a89c4e8504f90994838affad066bff3b5445e8c21b11ae637dbc4c2a42e658d3152616a1dfec9441469780eb51d16d12476e2dbe2e9a9aca85d0e76658dfe6b324283996c97da9b32869b1588667e4d30c08250f1c7e1e358dbccab62b3003b7cccbe6d070bfe884ffda0f7f4694279af59fe4f06588f9512396b111ae7e662f28c0003005dea9551045ffa8b01ef8470ae7fa6d4f789ea5681f6a8578d89c3dcebe894e9cdf481fc51e786fb5b347d04f23db9a9478d6d3c0e083206fdb50abd626ed62fb9e69a8adfdeabd9c48fb00b2adbe4488f1814edc9e8ebfb087682563a4531bd01c73262592378c55a5a32112318d35cb3e642bd93cf3e5b435c8938128c58ba750cd439eee4e171183137f414203d6116a81852d97a22fc44c488ebc0fe7d2433f0fac23b586a19bcf1ba1c3a0f03eb5d05f9122878c213fb39331e1c529f5bcfa98419ada93fd97ef1132484b59c279bd7d3760c46f8714d4f75ba7bc80335e1dc22269259f81d1ca446c7cdc546321a9d10452cf4e145ba76f27541b3522973ea9ffde407a5813798322a31486cb070b67004d58e12ef79b2881226fdb5b07db69bd15d3846618ee5d9200292fe9f73841863dcf0a596a1a776f50eb521733c2a59046465175069b1176973279d53ff37fdd8fd7559dc6c38519a63c9e0171de56eb4e04141f3636fd9bbc6d4b83d86d6ae48c1964c17aee0ea3b972eabffb26ea6fe84a120b85956125ab9f5c2abb9474fb2a6039d6ba4e5fd7f2066ae4f97643b34bc8694b751c24366129b809fcc7968d2ad6477be3ad3e6d0753a7e31282e93e23f7f36e7e6597dbd966370676dcd4d85cbbafb9473712b9ce86c05ebb8351f0c2506175e304005ba1807e9b44fc713feeb55fd2782a9d5992938e245fc5fb279bd3aa9ff5b8c9b68581c963cd22092fc0b5b6d3380a3ca75adcbb5048b0ce9f6a0ea16786dc7e3489577ee7c91610f769d089bf962ca61a6df709a0a9efbd31604d3e40ed91b56d0f45dbb7a02d23c926f7680fe37cba4a3697728fb3e95890238f7005accf0a800190a9ed8a1083cf0aa8898ce7d264cc5a35abd853108d3ff304791a84b2ce4dc7850d8f38d20abb507b7a71d6e631375c990257c9153d22f9152dd62fa54f1275a04af3d67ab52041da8819c2dd4197dac44588166ffdbc2f6252ad2196ce40ae8489732176bec27b27dda7a446f918f4aee1de67442073c6aad2b13c6ab6640bd26ce1c94d188f88648035c23b92cc5b9962c1ca54a8a4f56556eba183dc60fa82c233f4af6"}) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:13 executing program 2: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000007000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000014000-0x18)={@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x1, r2}) r3 = syz_open_dev$binder(&(0x7f0000010000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000006000-0x2c)=[@acquire={0x40046305, 0x0}], 0x0, 0x0, &(0x7f0000013000-0x39)=""}) close(r0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f000001b000)='/dev/ppp\x00', 0x0, 0x0) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f000001b000)={0x0, 0x38, &(0x7f000001c000-0x38)=[@in6={0xa, 0x3, 0x4, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x482e}, @in6={0xa, 0x1, 0x1ff, @loopback={0x0, 0x1}, 0x0}]}, &(0x7f0000001000)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000013000)={r5, @in6={{0xa, 0x2, 0x7fffffff, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast1=0xe0000001}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0x7}, &(0x7f000000d000-0x4)=0x98) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f000001a000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$packet(r6, &(0x7f000001b000-0xf9)=""/249, 0xf9, 0x2021, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000009000-0x30)={0x8, 0x0, &(0x7f000000e000-0x8)=[@release={0x400c630e, 0x0}], 0x0, 0x0, &(0x7f0000001000-0xb3)=""}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000e000-0x30)={0x14, 0x0, &(0x7f000000d000-0x98)=[@request_death={0x400c630f, 0x0, 0x0}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000009000-0xc9)="c2"}) r7 = dup3(r3, r0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004000-0x30)={0x10, 0x0, &(0x7f0000015000)=[@request_death={0x400c630e, 0x0, 0x0}], 0x1, 0x0, &(0x7f0000016000)='o'}) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f000001a000)={0x0, 0x0, 0x0, 0x0, 0x100000001, 0x7, 0x1f, 0x18, "97d09c28ee7729fae80d065beb31eea3c7a848bbe067989e8bda79840ef3e08b4ab69345d6e0286b5de13d5635c397bd052dac929669023c27b3eec3ed89621d", "ea6ed3b72f62846aa0dcfce83db1e3ca6ea68344f0529edb4a8ff36d9d0cdcb3", [0xfffffffffffff521, 0x7], 0x0}) ioctl$VT_SETMODE(r6, 0x5602, &(0x7f0000007000-0x8)={0x8, 0xff, 0x3, 0x4, 0x8001}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000c000-0x30)={0xc, 0x0, &(0x7f0000007000)=[@dead_binder_done={0x40086310, 0x3}], 0x0, 0x0, &(0x7f0000011000)=""}) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x8) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000009000-0x8)={0x300000000000000, 0x6}) mmap(&(0x7f000001b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f000001b000)={r7, &(0x7f000001c000-0xc0)="b736e71273c9c377c55af47b1f1c358f0b252ed851b7b941040432ebc10219da26f5d248ebbd58c49c2ab60aee136ba1b444dd402f1d2116866d789bd20d2f956443a6fb75fd591c63a958b602f8ac171b56ab20cef10c92ac59e029a133d9b9a6f8a185f27a0be85f44445ef0344fa43d5f0122bc749df0ad7cce8742b87d70cd9b4ab5afbd005bd213611adf8b64b8a42892643636d1b90308c5e8ce05d5befba6bc940e8f5cebca61ecb28ac9a7e5a4cccb66d0faaf91d40c10f83bad3a11", &(0x7f0000000000)=""/241}, 0x18) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r7, 0x111, 0x2, 0x1, 0x4) 2018/01/26 10:31:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x196, 0x0, &(0x7f0000ce7000)="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"}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x4, 0x7, 0x8) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000c65000)=0x0) sendmsg$nl_route(r0, &(0x7f00001fb000)={&(0x7f000061f000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000f70000-0x10)={&(0x7f00005fc000)=@getlink={0x28, 0x12, 0x101, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@IFLA_MASTER={0x8, 0xa, 0xfffffffffffffffc}]}, 0x28}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) 2018/01/26 10:31:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00007e3000-0x4)=0x3, 0x4) 2018/01/26 10:31:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) prctl$setfpexc(0xc, 0x80) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 221.390366] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.594071] binder: undelivered TRANSACTION_ERROR: 29189 [ 221.621178] binder: BINDER_SET_CONTEXT_MGR already set [ 221.633540] binder_alloc: 2220: binder_alloc_buf, no vma 2018/01/26 10:31:14 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000e28000-0x7)='/dev/sequencer2\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000000)="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", 0x1000) [ 221.643672] binder: 2218:2227 ioctl 40046207 0 returned -16 [ 221.650122] binder: 2220:2225 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 221.650134] binder: 2220:2225 BC_INCREFS_DONE node 579 has no pending increfs request [ 221.650149] binder: 2220:2225 ioctl c0306201 2000efd0 returned -11 [ 221.663483] binder: 2227 RLIMIT_NICE not set [ 221.663658] binder: 2227 RLIMIT_NICE not set 2018/01/26 10:31:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:14 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x19, 0x7, 0xaf18, &(0x7f0000002000-0x8)={0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000001000-0x4)=0x0, &(0x7f0000003000-0x4)=0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rtc\x00', 0x80, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0xffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000682000)=0xc) r5 = getgid() mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000002000)=""/80) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000c47000)={0x0, r4, r5}, 0xc) fcntl$dupfd(r3, 0x406, r2) 2018/01/26 10:31:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000374000-0x18)=@generic={0x2, 0x7fff, 0xbc}) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 221.669800] binder: BINDER_SET_CONTEXT_MGR already set [ 221.669818] binder: 2220:2239 ioctl 40046207 0 returned -16 [ 221.680862] binder: 2220:2225 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 221.680872] binder: 2220:2225 BC_INCREFS_DONE u0000000000000000 no match 2018/01/26 10:31:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x100008, &(0x7f0000440000)=0x0) io_submit(r1, 0x1, &(0x7f0000731000-0x4)=[&(0x7f00003ad000-0x40)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000b08000-0xe1)="613dd68f0e2c3e766b57889692f7943aeaf4480fb543fd127235a44e194964ad", 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}]) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, &(0x7f0000af5000)=0x0) r2 = socket(0x0, 0x7, 0x3e0e) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000258000)=0x0) 2018/01/26 10:31:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f0000407000-0x1c)={&(0x7f000086a000-0x10)=@in={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000473000-0x25)=[], 0x0, &(0x7f0000e34000-0x70)=[{0x10, 0x0, 0x1, 'f'}], 0x10, 0x0}, 0x0) r1 = socket(0x9, 0x80003, 0x80000000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000adf000)={{{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000051b000-0x4)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000af2000)={{{@in6=@loopback={0x0, 0x0}, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@empty=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@loopback=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000435000)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000ab000)={{{@in=@broadcast=0xffffffff, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x2, 0x33ee9bee, 0x2, 0x0, 0xa, 0x0, 0xa0, 0x0, r2, r3}, {0x8, 0xff, 0x0, 0xadf, 0x1, 0x20002, 0x1f, 0xff}, {0x7f, 0x80000001, 0x5, 0x4f4}, 0x8, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x2}, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x3, 0xff}, 0xa, @in=@broadcast=0xffffffff, 0xffffffffffffffff, 0x3, 0x1, 0x401, 0x8f50, 0x4, 0xffffffff}}, 0xe8) 2018/01/26 10:31:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000086000-0x4)=0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000c39000)='/selinux/checkreqprot\x00', 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00001a4000)={0x0, 0x0, 0x0}, &(0x7f00005eb000)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000800000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000031000)=0xc) r6 = getuid() r7 = getgid() stat(&(0x7f0000622000)='./file0\x00', &(0x7f0000fd2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() sendmsg$unix(r3, &(0x7f00000db000-0x1c)={&(0x7f00003b6000)=@abs={0x1, 0x0, 0x0}, 0x8, &(0x7f0000ed5000)=[{&(0x7f0000f29000-0x1f)="23f4b2ca54c6435a5217e41e36f5eec393bd1365866bc62525dfa3500c3c87e845818c49ccddc6a7776e2058cb94b812b33a7b9de2f0ac767af6059aaf1c1fd672d9bbaf38c9bb4469e65fd64c7146de594dab", 0x53}, {&(0x7f0000e37000)="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", 0x1000}, {&(0x7f000068d000-0x1000)="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", 0x1000}, {&(0x7f000051c000-0x33)="52c00f7620ca6ada98ee8753de8ec43707f4a726fa00e30ea281aaf42e3101d402630fe03a5767854f2a7a3efb758efd0bf087", 0x33}, {&(0x7f0000a86000)="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", 0xfe}, {&(0x7f0000230000)="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", 0x1000}, {&(0x7f0000034000-0x5)="26bd58cc8a", 0x5}, {&(0x7f0000932000)="9558d632721ff11cf3d3bdac4c", 0xd}, {&(0x7f0000d2c000)="887628f1feae4425304765033222758e8c54ab3182ce5b0ef9f1ea53573236ee94e14f8a988b99cf82cb370b6d67a1fe", 0x30}, {&(0x7f0000374000-0xc5)="d10d71bee9353672f91303ab0c60d70ccd20b794553d482807a7d82136fe4c3aa628f8f1556a79487ff8229be3e66a1b9f982e26f26660bffedfe73cb1599eb79077a932340753fc731003ce7a16d257d3831abaab8bb957808ecd3ad9e1b889982b1a0dfabe78147453c5513b259b773c0b157adbdd1547bb12c6662907dd5ffc992c64594cb86a7fa12d1783482c1e64e27b016913afe6e9d0b62125ad8028e84f02e2e02b47eb2809b10ad0448510d93e772aec7fa77b773288c109906ee8632d88d97e", 0xc5}], 0xa, &(0x7f0000a49000-0x60)=[@rights={0x18, 0x1, 0x1, [r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r2, r4, r5}, @cred={0x18, 0x1, 0x2, r2, r6, r7}, @cred={0x18, 0x1, 0x2, r2, r8, r9}], 0x60, 0x20000000}, 0x50) ioctl$TCSETSF(r3, 0x5404, &(0x7f000069f000)={0x4, 0x7, 0x800, 0x8, 0xfffffffffffffff7, 0x57e2, 0x49dc, 0x1, 0xffffffff00000001, 0xce5b, 0x2, 0x2}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000e1d000-0x4)=r2) mremap(&(0x7f0000dcc000/0x1000)=nil, 0x1000, 0x1000, 0x2, &(0x7f0000b44000/0x1000)=nil) pipe2(&(0x7f0000e85000-0x8)={0x0, 0x0}, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00002aa000)=0x92cf, 0x8) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000372000)=@ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) r10 = syz_open_dev$adsp(&(0x7f00003f1000)='/dev/adsp#\x00', 0x3, 0xf672ef4965050b2c) ioctl$KVM_S390_UCAS_UNMAP(r10, 0x4018ae51, &(0x7f0000869000)={0x2, 0x4682, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x6, 0x4000000000000, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) [ 221.689183] binder: 2218:2234 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 221.690426] binder: 2218:2234 ioctl 40046205 8 returned -22 [ 221.691889] binder: 2218:2227 ioctl 4b4d 20008ff8 returned -22 [ 221.715159] binder: 2218:2227 unknown command 536907575 [ 221.715168] binder: 2218:2227 ioctl c0306201 20008fd0 returned -22 [ 221.715208] binder: 2218:2234 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 221.715222] binder: 2234 RLIMIT_NICE not set [ 221.723566] binder: 2218:2234 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 221.729254] binder: BINDER_SET_CONTEXT_MGR already set [ 221.729264] binder: 2247:2248 ioctl 40046207 0 returned -16 [ 221.749748] binder_alloc: 2218: binder_alloc_buf, no vma [ 221.749781] binder: 2221:2249 transaction failed 29189/-3, size 0-0 line 2903 [ 221.750663] binder: 2247:2248 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 221.750673] binder: 2247:2248 BC_INCREFS_DONE u0000000000000000 no match [ 221.750723] binder: 2247:2248 ioctl c0306201 2000efd0 returned -11 [ 221.756670] binder: 2218:2227 BC_DEAD_BINDER_DONE 0000000000000003 not found [ 221.756791] binder: 2218:2255 ioctl 40046205 8 returned -22 [ 221.758005] binder: 2218:2255 ioctl 4b4d 20008ff8 returned -22 [ 221.761237] binder: BINDER_SET_CONTEXT_MGR already set [ 221.761247] binder: 2247:2259 ioctl 40046207 0 returned -16 [ 221.769429] binder: 2247:2248 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 221.769437] binder: 2247:2248 BC_INCREFS_DONE u0000000000000000 no match [ 221.819400] binder: 2263:2267 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 221.819412] binder: 2263:2267 BC_INCREFS_DONE node 588 has no pending increfs request [ 221.819426] binder: 2263:2267 ioctl c0306201 2000efd0 returned -11 [ 221.862624] binder: BINDER_SET_CONTEXT_MGR already set [ 221.862634] binder: 2263:2274 ioctl 40046207 0 returned -16 [ 221.875457] binder: 2263:2267 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 221.875468] binder: 2263:2267 BC_INCREFS_DONE node 588 has no pending increfs request [ 221.875495] binder: 2263:2267 ioctl c0306201 2000efd0 returned -11 [ 221.982939] binder_alloc: 2220: binder_alloc_buf, no vma [ 221.982947] binder: 2222:2226 transaction failed 29189/-3, size 0-0 line 2903 [ 221.996598] binder_alloc: 2220: binder_alloc_buf, no vma [ 221.996606] binder: 2224:2230 transaction failed 29189/-3, size 0-0 line 2903 [ 221.996713] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.009710] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.020651] binder: 2221:2229 transaction failed 29189/-3, size 0-0 line 2903 [ 222.020654] binder_alloc: 2220: binder_alloc_buf, no vma [ 222.020717] binder: 2224:2236 transaction failed 29189/-3, size 0-0 line 2903 [ 222.023754] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x80007, 0x5) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/26 10:31:14 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0xa, &(0x7f0000000000)=""/248, 0xffffffffffffffa4) 2018/01/26 10:31:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x6, 0x0) waitid(0x0, 0x0, &(0x7f0000101000-0x10)={0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000e5f000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000900000)={r1, 0x0}, 0x8) r2 = gettid() tkill(r2, 0x1d) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000dc4000)={0x0, 0x0}, &(0x7f0000ad3000-0x4)=0x8) 2018/01/26 10:31:14 executing program 5: mmap(&(0x7f0000000000/0x15000)=nil, 0x15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000003000-0x10)={0x1d, 0x0, 0x0, 0x0}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000011000)={&(0x7f0000015000-0xc)=@proc={0x10, 0x0, 0xffffffffffffffff, 0x0}, 0xc, &(0x7f0000004000)=[], 0x0, &(0x7f0000003000)=[@cred={0x18, 0x1, 0x2, 0x0, 0x0, 0x0}, @cred={0x18, 0x1, 0x2, 0x0, 0x0, 0x0}, @rights={0xc, 0x1, 0x1, []}], 0x3c, 0x0}, 0x0) mmap(&(0x7f0000015000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000016000-0x8)={0xc0, 0x8}, 0x8) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000012000)='/selinux/status\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000006000)={r1, &(0x7f0000009000+0xb9e)="e915e9229bcd5274e896d2bab935545240ef8da389ae341392d95d29a4a4854fd09397bd2a04654a"}, 0xfffffffffffffc38) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000006000-0x10)={&(0x7f0000003000)={0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x38}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x359, 0x0, &(0x7f0000b38000-0x6a)=""}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000671000)={0x77359400, 0x0}, 0x8) 2018/01/26 10:31:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) 2018/01/26 10:31:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = dup2(r0, r0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000bd9000-0x4)=0xfffffffffffffff7, 0x4) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000548000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000fff000-0x4)=0x40, 0x4) write$selinux_access(r2, &(0x7f00001d5000)={'system_u:object_r:random_device_t:s0', 0x20, '/usr/sbin/ntpd', 0x20, 0x34, 0x39, 0x0}, 0x37) pipe2(&(0x7f0000a00000)={0x0, 0x0}, 0x80000) getpeername$inet(r3, &(0x7f00006e2000)={0x0, 0xffffffffffffffff, @multicast2=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00009b2000-0x4)=0x10) getpeername(r2, &(0x7f00009db000-0x10)=@vsock={0x0, 0x0, 0x0, @any=0x0, 0x0}, &(0x7f0000bf1000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f000059f000)={0x0, 0x6}, &(0x7f0000116000)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f000086a000)={r5, @in={{0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) 2018/01/26 10:31:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) pipe2(&(0x7f000019b000)={0x0, 0x0}, 0x80000) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = memfd_create(&(0x7f0000cf8000-0xd)='/dev/binder#\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000667000)={0xffffffff, 0x0, 'client1\x00', 0x2, "a8912e6b26a3b5a8", "0ae6189e85cb90988446872f64a1cf219915f8b7966af5d6ebd62899b1ae995e", 0x6, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 222.046174] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.051765] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.067932] sock: sock_set_timeout: `syz-executor2' (pid 2290) tries to set negative timeout [ 222.072476] binder: 2278:2285 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:14 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0x1000003, &(0x7f0000001000-0xf8)=""/248, 0xfffffffffffffd9f) r0 = socket(0xb, 0x3, 0xf0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000002000)={0x4, 0x800, 0xa00, 0x1}) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000002000-0x4)=0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6, 0x84000) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) 2018/01/26 10:31:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000000000)=""/0, &(0x7f0000001000-0x4)=0x0) writev(0xffffffffffffffff, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) 2018/01/26 10:31:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000003c000-0xd)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 222.072487] binder: 2278:2285 BC_INCREFS_DONE node 589 has no pending increfs request [ 222.072500] binder: 2278:2285 ioctl c0306201 2000efd0 returned -11 [ 222.073549] binder_alloc: 2278: binder_alloc_buf, no vma 2018/01/26 10:31:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:14 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001000-0x12)='/dev/input/mouse#\x00', 0x2, 0x8040) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000000)={&(0x7f0000001000-0x58)={0x27, 0x2, 0x3, 0x7, 0x4, 0x0, "f7219643f91ce6a7acfba68f0315db877b24bdf9cd9ac1d61568b1f13056f59cf7a2bd51c8dbcb93ab6c5fd58074ebbb9da126f7ae844a583da8c805ae3b76", 0x7}, 0x58, &(0x7f0000000000)=[{&(0x7f0000e9d000)="f7", 0x1}, {&(0x7f0000c29000)="0eadc14410cfb9c96fdf0f4a0dee7cf4675f0a719a3f3d533579d7fb97df758b5633a9a8fc449f17f556e3215f9bbe1b32735829de254ddb0f92868e5f02ed9a94f239a761e9925fa1f329639d41bf4160042b0ac1e9a9a842622d8c77bfad04659b77af7f294defd5b9581f90dde140eed87d606ec2c7c8d3d224633ba4e4d940bffa8767eda78b25807c46f8d22f8fefe422eabb74280b3a330350dcd07e3133c51aeb6df044c031aaad0e55f7b3eccdd24be28169c1d82661b0b600401207d070c810bd9d801f69f47cddffc380bb4d82b638c08f735588f01f9c70daa6e7fceb61e5ee138f344a3318cd48801ac7d1d385aaf4", 0xf5}, {&(0x7f0000001000-0x6b)="80c4d11d8259d2f2606784bfc312d0737df762ff3c910dfd86d84a7c68860a1928667fcc8c275c7e88da5b10676f77155636d4a0b4a810dd91290553367bffbf7caa20246e4a44c8bd0094f1e3fbd695b297addaf9c705067feea67fcdb7176b724aa5b7c667c23972503a", 0x6b}, {&(0x7f0000df1000)="47b0c6f04536d08ca6d3ba418d8c3b062d77830876391b1d7649f085a2e3e290f83952f1abf4833e67185c7bebcea04d07e41485b49210560ab1838b434c9ea111f310f194980905cc0d7146569ed908032d8c551e80ca1485d1ca0d90b897a2af2c5cce7d5ca0018bd1a1a355b6e19769f1e16e2452be2b3772f46b7d13802d9e5ebc19c7ab860827351ac740e12206bc1cc60e04a54f77058343d8d20810e565dfa3107e51f4", 0xa7}, {&(0x7f000042a000)="6bbfcb190dfa77dac40d31bb80a6e43e3e9c72cb1996d5c2281eff3bd9a336dbfb1be4752bb6488c7046b10488d8899e8eb8a88882585c9b9b7524ef7e513039a9fdcd8de2ad9bcf0775c74a8fbd60493d9626b6803921ac2dc6cdab0c8f786d952443c43f2626514678df7988eb72d237e36f5d65c8369e3be99245fb9b96cb95356970f0fa26ec869d2d2a9f51aabb1cdff703ea49a455e6b8bd1b18f35b2ccda57a2b19", 0xa5}, {&(0x7f0000001000-0x30)="10b885f65a611b10f7f899e00ecd43f6fe2b82479993e162dcfbde5310350e3c56286978792cc9d53228903b21705d09", 0x30}], 0x2208, &(0x7f0000e84000-0xd4)={0x151, 0x116, 0x8, "7176187adaf9eb8f305bb3d0b2dbd7f032f96f451cfe34b9c7e5a5f2aae0ee1a044540e1c00f603ca919d17a322846c3697b0f1939c72ebb0e3cf43dbdbe1480e52aed336b262e34b2bdacd10f5d44cc5bf80b7d4a14f9396c5aa0dbb66e8dd58b733d1543091c7bc4f0e1ea2cdc05fb9f940c25e75357bf8d354cc54809ab4fa8071cf7e7e4aa7a7998dfdbce61240a097edc21eed2f7601a7d8a3680e203a692d9ed7e92a12ae8011dcaf3eef28c1d1bd11f1e61d2875242a8a20f0b181f2b0e5632530597"}, 0xd4, 0x40000}, 0x84) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000934000-0x8)='./file0\x00', 0x0, 0x4c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8000006) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 222.073570] binder: 2281:2288 transaction failed 29189/-3, size 0-0 line 2903 [ 222.073683] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.079360] binder_alloc: 2278: binder_alloc_buf, no vma [ 222.079383] binder: 2279:2287 transaction failed 29189/-3, size 0-0 line 2903 [ 222.080752] binder: BINDER_SET_CONTEXT_MGR already set [ 222.080767] binder: 2278:2294 ioctl 40046207 0 returned -16 [ 222.083608] binder_alloc: 2278: binder_alloc_buf, no vma [ 222.083630] binder: 2281:2293 transaction failed 29189/-3, size 0-0 line 2903 [ 222.083886] binder_alloc: 2278: binder_alloc_buf, no vma [ 222.083905] binder: 2277:2289 transaction failed 29189/-3, size 0-0 line 2903 [ 222.088525] binder: 2278:2285 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 222.088535] binder: 2278:2285 BC_INCREFS_DONE u0000000000000000 no match [ 222.092788] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.112561] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.118214] binder: 2279:2298 transaction failed 29189/-22, size 0-0 line 2788 [ 222.127401] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.134860] binder: 2302:2305 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 222.134871] binder: 2302:2305 BC_INCREFS_DONE node 595 has no pending increfs request [ 222.134887] binder: 2302:2305 ioctl c0306201 2000efd0 returned -11 [ 222.143124] binder: 2299:2304 transaction failed 29189/-22, size 0-0 line 2788 [ 222.145575] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.158443] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.159113] binder: 2308:2311 transaction failed 29189/-22, size 0-0 line 2788 [ 222.164791] binder: BINDER_SET_CONTEXT_MGR already set [ 222.164812] binder: 2302:2314 ioctl 40046207 0 returned -16 [ 222.168678] binder: 2313:2315 transaction failed 29189/-22, size 0-0 line 2788 [ 222.168812] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.173282] binder: 2302:2305 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 222.173293] binder: 2302:2305 BC_INCREFS_DONE u0000000000000000 no match [ 222.175111] binder: 2313:2318 transaction failed 29189/-22, size 0-0 line 2788 [ 222.181728] binder: 2316:2319 transaction failed 29189/-22, size 0-0 line 2788 [ 222.181808] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.186987] binder: 2316:2321 transaction failed 29189/-22, size 0-0 line 2788 [ 222.192166] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.199297] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.203315] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.218346] binder: 2326:2328 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 222.218357] binder: 2326:2328 BC_INCREFS_DONE node 602 has no pending increfs request [ 222.218370] binder: 2326:2328 ioctl c0306201 2000efd0 returned -11 [ 222.228490] binder: BINDER_SET_CONTEXT_MGR already set [ 222.228499] binder: 2326:2328 ioctl 40046207 0 returned -16 [ 222.230822] binder: 2326:2328 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 222.230831] binder: 2326:2328 BC_INCREFS_DONE u0000000000000000 no match 2018/01/26 10:31:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000066000)='/dev/snd/seq\x00', 0x0, 0x8000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f000087a000+0x91d)={0x8, 0x9, 0x100000001, 'queue0\x00', 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$dspn(&(0x7f0000112000)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x8000000000500e, &(0x7f0000682000-0x8)=0x0) 2018/01/26 10:31:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0xfffffffffffffe9a, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff63, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000a1e000-0x10)='/selinux/policy\x00', 0x0, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000f7000)={&(0x7f000027b000-0xc)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000ec5000)={&(0x7f00002b1000-0x98)={0x98, 0xc, 0xe, 0x10, 0x2, 0x2, {0xa, 0x0, 0x2}, [@generic="2b8677a9fb37aaa2fb1cfb4478c4a644ce47c6a33eb4d91efc9f9f16c475a53c1bad0ef9bb0c0e1d658f8491012aca58941e65df5a6c865c734ff44970df97442c3f02c80dbba85f18ec5567b83b8552ad7975848d6d849b0e8bd0810c502af1ea61d1db207e8880a7bb0cdaa27e4de6691765983a75847f259e46fa8596b6d062d9552c"]}, 0x98}, 0x1, 0x0, 0x0, 0x4081}, 0x4004000) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000d6a000-0x8)={0x5, 0x2}, 0x8) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) creat(&(0x7f0000a29000)='./file0\x00', 0x44) 2018/01/26 10:31:14 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xffffffffffffff62) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001000)='/selinux/checkreqprot\x00', 0x100, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000000)=""/51) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000001000-0x4)=0x6) recvfrom$unix(r0, &(0x7f0000001000)=""/37, 0x25, 0x40, &(0x7f0000002000-0x8)=@abs={0x1, 0x0, 0x0}, 0x8) 2018/01/26 10:31:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0xffe6, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = syz_open_dev$midi(&(0x7f0000c74000-0xb)='/dev/midi#\x00', 0x6, 0x0) getsockopt(r2, 0x1, 0xa1, &(0x7f000042c000)=""/254, &(0x7f0000673000-0x4)=0xfe) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000d8b000-0x14)={0x81, 0x3, 0x9, 0x1, 0x1}, 0x14) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) io_setup(0x81, &(0x7f0000cf8000)=0x0) io_getevents(r3, 0xfffffffffffffff9, 0x4, &(0x7f000019a000-0x80)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}], &(0x7f0000543000-0x8)={0x77359400, 0x0}) 2018/01/26 10:31:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) socket$inet6(0xa, 0x80001, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r4, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) 2018/01/26 10:31:14 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000-0x15)='/proc/self/net/pfkey\x00', 0x1, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f000029e000-0xad)=""/173) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r3 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000cb5000-0x10)="b6a0970f1889da487ae16fca8d736cb6", 0x10) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) ioctl$KDSKBSENT(r2, 0x4b49, &(0x7f0000639000-0xf4)="925de808ee33a6eb7504c47cd5d496d668f34273700781f0a5d6e6e43676f1f8a59afa409f85e672fbdc6f7b964d475c596df80e0568441da71a44b4734c4835f0cf84bad6b4adbbd1de3ce3505324df9e4cfeb05907621579ec14e38103d53689bf68bcae390ec07c45794b6383c622d9240a0eee6708e7284b3ef8f203c920a62fe06b4c15122893e1087ab0a77a80e373d925d2f606f225e30a2627906fb8caafb99afb63b9d6add931685cf8f93dd27bca4e3dd1e5cb389ece9fe82adb5a8be70231075f2aa044a2fe126fcc5cb47ceda6bb246f99a40f0f0b3e6271e034e3ce5a1dca5957bc1b0fea811044f26d0d83b1fa") 2018/01/26 10:31:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f00007d1000)='/dev/midi#\x00', 0x1, 0x400100) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000f96000)={0x6, 0x8da, 0x2, 'queue1\x00', 0x67af, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000018000)=0x8, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000101000)={@random="cd390b081bf2", @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "02290f", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @rand_addr=0x0}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x3a, 0x0, @loopback={0x0, 0x1}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [], "802a08000000006b"}}}}}}}, 0x0) [ 222.230842] binder: 2326:2328 ioctl c0306201 2000efd0 returned -11 2018/01/26 10:31:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = syz_open_dev$mouse(&(0x7f0000f8f000-0x12)='/dev/input/mouse#\x00', 0x3f, 0x40) bind$bt_rfcomm(r2, &(0x7f0000387000-0x9)={0x1f, {0x4, 0x7, 0x1, 0x7, 0x4fb0, 0xffff}, 0x8}, 0x9) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000af8000-0x4)=0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000e94000)=0xb54, 0x4) 2018/01/26 10:31:14 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xe5) r0 = syz_open_dev$mice(&(0x7f0000b45000)='/dev/input/mice\x00', 0x0, 0x220080) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 2018/01/26 10:31:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() syz_open_dev$mice(&(0x7f0000377000)='/dev/input/mice\x00', 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r4, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) 2018/01/26 10:31:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000069a000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000d52000)={0x0, 0x9e, "e405629c83d691ab7d2c2f7a60d049d9114d88b94db34b84d3d60fe7a654fd16279b74945fe810ea0b2cf61da41b3b108823b62e4f4523910b49bdacc92d234cbfa38a444ed569b0e0fed18ef892f16eae49afe509f65c6f4e7cc1aca67ea2f0996b318f92867482e1658161575009b65220ec4aaf550f532103cb18f8cf432bd4a122f900833c67d828491e30977fed9e5be3da80d6058844b1e05a04c2"}, &(0x7f00009c5000-0x4)=0xa6) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000d17000-0x8)={r2, 0x20}, 0x8) mmap$binder(&(0x7f00007db000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a43000+0xc99)={0xfd51, 0x0, &(0x7f0000007000)=[], 0x7e, 0x0, &(0x7f0000bec000-0x7e)="926663f84e30440b34a8ab99e577015f596bb9fe18bcb3b894737138000000008dd25595b68493a4f26bc3d19369341f21c3ed672d77320624279d28162c7efd8e9ee08c59e252aec2490f5776738d3a2e4c5497963415af93bc13c6b9cfe0a9c6bb2e9bd0874c4bba4c7bde5d4e9b58c1c335d1f8943aaa5cf2bdabf9e1"}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r4 = open(&(0x7f0000853000)='./file0\x00', 0x4, 0xa0) setsockopt$inet_sctp6_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f00001a1000-0x4)=0x1aaa, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00007e6000)={r4}) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000475000-0x1c)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 222.498861] binder: 2333:2337 transaction failed 29189/-22, size 0-0 line 2788 [ 222.500209] binder: 2336:2338 transaction failed 29189/-22, size 0-0 line 2788 [ 222.523970] binder: 2339:2342 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$sg(&(0x7f0000a59000-0x9)='/dev/sg#\x00', 0x4, 0x2) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00002cd000)=""/154) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) clock_gettime(0x0, &(0x7f0000503000)={0x0, 0x0}) setitimer(0x0, &(0x7f0000dc6000)={{r3, r4/1000+30000}, {0x77359400, 0x0}}, &(0x7f00000c5000)={{0x0, 0x0}, {0x0, 0x0}}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) write$fuse(r1, &(0x7f0000498000)={0x12, 0x1, 0x7, @fuse_notify_poll_wakeup_out={0x8000}}, 0x12) 2018/01/26 10:31:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r2 = syz_open_dev$mouse(&(0x7f0000f8f000-0x12)='/dev/input/mouse#\x00', 0x3f, 0x40) bind$bt_rfcomm(r2, &(0x7f0000387000-0x9)={0x1f, {0x4, 0x7, 0x1, 0x7, 0x4fb0, 0xffff}, 0x8}, 0x9) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000af8000-0x4)=0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000e94000)=0xb54, 0x4) 2018/01/26 10:31:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) inotify_init() r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r4, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) 2018/01/26 10:31:14 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffff9c, 0x1}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x5, 0xb61}) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) open$dir(&(0x7f000027a000-0x8)='./file0\x00', 0x240, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 222.523983] binder: 2339:2342 BC_INCREFS_DONE node 605 has no pending increfs request [ 222.523996] binder: 2339:2342 ioctl c0306201 2000efd0 returned -11 [ 222.541586] binder: BINDER_SET_CONTEXT_MGR already set [ 222.541597] binder: 2339:2342 ioctl 40046207 0 returned -16 [ 222.549795] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.552788] binder: 2339:2342 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000dff000)='/selinux/checkreqprot\x00', 0x40, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r4, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) [ 222.552800] binder: 2339:2342 BC_INCREFS_DONE node 605 has no pending increfs request [ 222.552815] binder: 2339:2342 ioctl c0306201 2000efd0 returned -11 [ 222.561866] binder: 2350:2353 transaction failed 29189/-22, size 0-0 line 2788 [ 222.563118] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.576217] binder: 2333:2359 transaction failed 29189/-22, size 0-0 line 2788 [ 222.579999] binder: 2354:2357 transaction failed 29189/-22, size 0-0 line 2788 [ 222.592313] binder: 2350:2356 transaction failed 29189/-22, size 0-0 line 2788 [ 222.619218] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.625254] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.630840] binder: 2358:2361 unknown command 0 [ 222.630853] binder: 2358:2361 ioctl c0306201 20a43c99 returned -22 [ 222.634792] binder: 2358:2361 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 222.634803] binder: 2358:2361 BC_INCREFS_DONE node 610 has no pending increfs request [ 222.634819] binder: 2358:2361 ioctl c0306201 2000efd0 returned -11 [ 222.654959] binder: BINDER_SET_CONTEXT_MGR already set [ 222.658255] binder_alloc: 2358: binder_alloc_buf, no vma [ 222.658277] binder: 2368:2370 transaction failed 29189/-3, size 0-0 line 2903 [ 222.668428] binder: 2358:2373 ioctl 40046207 0 returned -16 [ 222.669662] binder_alloc: 2358: binder_alloc_buf, no vma [ 222.669687] binder: 2365:2375 transaction failed 29189/-3, size 0-0 line 2903 [ 222.672963] binder_alloc: 2358: binder_alloc_buf, no vma [ 222.672986] binder: 2367:2374 transaction failed 29189/-3, size 0-0 line 2903 [ 222.680093] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.684679] binder: 2358:2361 unknown command 0 [ 222.684687] binder: 2358:2361 ioctl c0306201 20a43c99 returned -22 [ 222.693527] binder: 2358:2361 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 222.693537] binder: 2358:2361 BC_INCREFS_DONE u0000000000000000 no match [ 222.693550] binder: 2358:2361 ioctl c0306201 2000efd0 returned -11 [ 222.693767] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.694622] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.706821] binder_alloc: 2358: binder_alloc_buf, no vma [ 222.706843] binder: 2380:2381 transaction failed 29189/-3, size 0-0 line 2903 [ 222.721477] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f000041b000)='/selinux/enforce\x00', 0x2100, 0x0) ioctl$sock_bt_hci(r2, 0x400448c9, &(0x7f0000c5a000)="8a1de19f69e2803beddc31fb0fafb09276a38f778eef026fe79bc99430f1a2e61ad7ea0374f3a2e1e60b78be20a755b48175124ca938772f9b48e91a92feb467195308cdc742621ffbc37719b6de77d35655f5ed340cd6227bb739be35f11aea29a152fdeabba00447357e3c263d78954302e97c2b31ba9d12bb5a8d36dfe176c17b6671ed58b7603d4a8c196bc047f5fc297de67ea5bc23dc90f5fa65670b3d780685f82c64d70ca81d01") 2018/01/26 10:31:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = dup(r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000f01000-0x4)=0x1) 2018/01/26 10:31:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f7f000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) accept4$alg(r0, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000878000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000f5a000)=0xc) r3 = geteuid() r4 = geteuid() r5 = syz_open_dev$dspn(&(0x7f0000df4000-0xa)='/dev/dsp#\x00', 0x7, 0x20000) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f00005ee000)={0x1000000000000000, 0x5, 0x9, 0x6}, 0x10) setresuid(r1, r3, r4) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000456000-0x8)={0x0, 0x0}) r6 = syz_open_procfs(0x0, &(0x7f0000aaf000-0xc)='net/netlink\x00') sendfile(r6, r6, &(0x7f0000928000-0x4)=0x0, 0x80) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000918000-0x4)=0x0) fchownat(r6, &(0x7f0000b02000)='./file0\x00', r3, r2, 0x400) 2018/01/26 10:31:15 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0x11, &(0x7f000052a000-0xf8)=""/248, 0xfffffffffffffde0) 2018/01/26 10:31:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = syz_open_dev$mice(&(0x7f0000e08000-0x10)='/dev/input/mice\x00', 0x0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f000010a000-0x8)={&(0x7f0000021000-0x274)={0x14, 0x2e, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x13}, 0x1, 0x0, 0x0, 0x0}, 0x40804) 2018/01/26 10:31:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f000059b000-0x9)='/dev/ppp\x00', 0x0, 0x0) setitimer(0x1, &(0x7f0000fc5000)={{0x0, 0x7530}, {0x0, 0x0}}, &(0x7f00002b0000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000f68000)=0x4, 0x4) fcntl$setlease(r0, 0x400, 0x3) 2018/01/26 10:31:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$inet_tcp_int(r3, 0x6, 0x7, &(0x7f0000178000-0x4)=0x0, 0x4) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r4, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) 2018/01/26 10:31:15 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000729000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000278000-0xe8)={{{@in=@rand_addr=0x0, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000553000-0x4)=0xe8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f000014f000)='net/llc\x00') ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000996000)={0x0, 0x9, 0x3fffffffc0000, &(0x7f0000c98000-0x8)=0x0}) setuid(r0) close(0xffffffffffffffff) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:15 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f000046a000-0xc)='/dev/autofs\x00', 0x480800, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f000078a000)={0x0, 0x1, 0x4, [0x8, 0x7ff, 0x8, 0x2]}, &(0x7f00005d9000-0x4)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000764000)={r1, 0x7f, 0x1, [0x3]}, &(0x7f0000e14000)=0xa) [ 222.886193] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.909236] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:15 executing program 7: pipe(&(0x7f0000758000-0x6)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000000000)={{0x8000, 0x1}, 'port1\x00', 0x1, 0x40, 0xffffffffffffb882, 0x9, 0x7, 0x3, 0x7, 0x0, 0x5, 0x7fff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000001000)=0x7a, 0x4) syslog(0x9, &(0x7f0000001000-0xf8)=""/248, 0xf8) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fsetxattr(r0, &(0x7f0000001000-0x45)=@random={'user.', 'port1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, &(0x7f0000003000-0x6)='wlan0\x00', 0x6, 0x1) [ 222.940987] binder_alloc: 2386: binder_alloc_buf, no vma [ 222.943412] binder: 2386:2394 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 222.943423] binder: 2386:2394 BC_INCREFS_DONE node 615 has no pending increfs request [ 222.943436] binder: 2386:2394 ioctl c0306201 2000efd0 returned -11 [ 222.972103] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/26 10:31:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000da5000-0x9)='/dev/vcs\x00', 0x400000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00007c9000-0x20)={r2, &(0x7f0000135000-0xbb)="a3010540830dc87b88f48344684d63a755486dde6b569c736983de3e175cd77c7968b77c12aa7f52b3a9d249140c275e14d0549c22aeaf1f534f3e1349d719aca2faaff8f0fca406e06f53a824d53540f5fd53db034cc31d3a4b268871bb8f26a6bc8d5c8f8f3080bf29646b69fcbfcf3ebb56d096722e67035f133fdcc0a722ccb371051a8089e6c535b9183530039914b03f0f27569ab85331bcee438acd2afa3421cbcd5d656974046fdccaa6ca0f3f971ce8b04ecbf5ad6a7f", &(0x7f0000624000)="9a8053730df156cf80660ff391658dae00655971d7dc0e15d5f463cc1145d7fc936d389045e8be58d55217f3194013b49a8f8f31e5075c4ebe3cd26c3a243d79b27dd08d37c831ae57d65db7a980ef5310b3783850c971ddfc363dabb6b802bcb0716d191f3c109e8ab7c7f332df31cb710693fa19f3f8ad158876ebb5e7da03af758de4c971036145edd85a3521662a40ae269bb4e7f0f7f66d7a681683ce6cd35dc45ed7307b6be0de3cd9bed0560e013521e32aac6f5d33519a6a2f5fe1897c4dba983cb82aa147ab1c9e6c", 0x2}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000136000)='/dev/qat_adf_ctl\x00', 0x80400, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000c30000-0xc)={0x0, @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, @multicast2=0x0}, &(0x7f0000de4000)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f000002b000-0xe8)={{{@in=@rand_addr=0x0, @in=@rand_addr=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@loopback=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000055b000)=0xe8) r6 = gettid() ptrace$cont(0x1f, r6, 0x7, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000c8a000)={{{@in=@loopback=0x7f000001, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14}, 0x3, 0xffffffffffffb74c, 0x3, 0x2bf, 0xa, 0x0, 0x80, 0x7e, r4, r5}, {0xe353, 0x1, 0x1000, 0x7ff, 0xaa3b, 0x0, 0x0, 0xf66e}, {0xdf84, 0x8, 0x0, 0x6}, 0xfffffffffffffff9, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0}, {{@in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0, 0x2b}, 0xa, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5, 0x1, 0x0, 0x5, 0x4, 0xd4, 0x3}}, 0xe8) 2018/01/26 10:31:15 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000002000-0x4)={0xab56}, 0x4) 2018/01/26 10:31:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x802, 0x0) r1 = syz_open_dev$mice(&(0x7f00006b6000-0x10)='/dev/input/mice\x00', 0x0, 0x200) ioctl$KVM_DIRTY_TLB(r1, 0x400caeaa, &(0x7f0000b53000-0xc)={0x8, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000f79000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TCSBRKP(r1, 0x5425, 0x58d) sendmsg$nl_route(r0, &(0x7f0000f73000-0x38)={&(0x7f0000b63000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000f76000-0x10)={&(0x7f0000747000)=@newlink={0x28, 0x10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0, r2, 0x0, 0x0}, [@IFLA_MASTER={0x8, 0xa, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$mouse(&(0x7f000093c000)='/dev/input/mouse#\x00', 0x6, 0x155100) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000fa4000-0x14)={0x2, 0x1ff, 0x8000, 0x4, 0x6}) [ 222.972194] binder: 2386:2400 ioctl 40046207 0 returned -16 [ 222.995550] binder: 2386:2394 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 222.995563] binder: 2386:2394 BC_INCREFS_DONE u0000000000000000 no match [ 223.021275] binder: 2389:2392 transaction failed 29189/-3, size 0-0 line 2903 2018/01/26 10:31:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000333000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00006c9000-0x6)={0x1, [0x0]}, &(0x7f00007a2000)=0x6) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000a6d000)='/dev/hwrng\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00003ef000)={0x0, @in={{0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x8, 0x5, 0x9, 0xffff, 0x4, 0x6, 0x6, 0x8, 0x80000001, 0x400, 0x2, 0xffffffffffffff7f, 0x800000008, 0x6, 0x3]}, &(0x7f0000aa5000-0x4)=0x108) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000a49000)={0x95bc, 0x2, 0x8, 0x6, r4}, &(0x7f00009ac000-0x4)=0x10) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f000045f000-0x10)={0x0, 0x0, 0x2, 0x2}, 0x10) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000c27000-0x1c)=[@in6={0xa, 0x3, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x3, 0x7f, @loopback={0x0, 0x1}, 0x0}, 0x1c) sendmmsg(r0, &(0x7f0000470000)=[{{0x0, 0x0, &(0x7f000040b000-0xa0)=[{&(0x7f00002b8000)="04", 0x1}], 0x1, &(0x7f0000f57000)=[], 0x0, 0x0}, 0x0}], 0x1, 0x0) 2018/01/26 10:31:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000b07000)=""/114, &(0x7f00003ac000)=0x72) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:15 executing program 7: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) [ 223.021464] binder_alloc: 2386: binder_alloc_buf, no vma [ 223.021487] binder: 2384:2395 transaction failed 29189/-3, size 0-0 line 2903 [ 223.021598] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.023596] binder_alloc: 2386: binder_alloc_buf, no vma [ 223.023619] binder: 2384:2405 transaction failed 29189/-3, size 0-0 line 2903 [ 223.039621] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) r1 = socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00006bd000-0x28)={0x3, 0x0, &(0x7f0000cf2000-0xb9)=""/185, &(0x7f000058e000-0xaf)=""/175, &(0x7f0000800000)=""/176, 0x6000}) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 223.045220] binder_alloc: 2386: binder_alloc_buf, no vma [ 223.045245] binder: 2413:2418 transaction failed 29189/-3, size 0-0 line 2903 [ 223.045335] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.068459] binder_alloc: 2386: binder_alloc_buf, no vma [ 223.068483] binder: 2421:2422 transaction failed 29189/-3, size 0-0 line 2903 [ 223.070284] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.072898] binder_alloc: 2386: binder_alloc_buf, no vma [ 223.072923] binder: 2413:2419 transaction failed 29189/-3, size 0-0 line 2903 [ 223.099169] binder_alloc: 2424: binder_alloc_buf, no vma [ 223.099192] binder: 2421:2426 transaction failed 29189/-3, size 0-0 line 2903 [ 223.099552] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.107682] binder: 2424:2427 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 223.107745] binder: 2424:2427 BC_INCREFS_DONE node 622 has no pending increfs request [ 223.108520] binder: 2424:2427 ioctl c0306201 2000efd0 returned -11 [ 223.125730] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.136287] binder: BINDER_SET_CONTEXT_MGR already set [ 223.136296] binder: 2424:2433 ioctl 40046207 0 returned -16 [ 223.147144] binder: 2424:2435 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 223.147155] binder: 2424:2435 BC_INCREFS_DONE u0000000000000000 no match 2018/01/26 10:31:15 executing program 6: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, @local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @empty=0x0}, &(0x7f0000001000-0x4)=0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2018/01/26 10:31:15 executing program 7: bpf$OBJ_GET_MAP(0x7, &(0x7f0000eb9000-0x10)={&(0x7f00006a9000)='./file0\x00', 0x0, 0x18}, 0x10) syslog(0x8, &(0x7f00008ba000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000010000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @rand_addr=0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000837000)=0xe8) lstat(&(0x7f0000b67000)='./file0\x00', &(0x7f000089b000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r1, r2) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00009eb000-0x4)=0x7, 0x4) bind$alg(r3, &(0x7f0000e9b000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) accept4$alg(r3, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f00009aa000)='/dev/usbmon#\x00', 0x8000, 0x12000) bind$nfc_llcp(r4, &(0x7f0000a49000)={0x27, 0x1ff, 0x3, 0x3, 0xe9, 0xfff, "562c348ae8403c7c685724083c253281602f7f63d40e328c9dbc330239d3cc127669e558c90692f258b568f9746cc44da8b539b634959688c67264831d6368", 0x2000}, 0x58) r5 = syz_open_procfs(0x0, &(0x7f0000aaf000-0xc)='net/netlink\x00') ioctl$PPPIOCSFLAGS(r5, 0x40047459, &(0x7f0000ce5000-0x4)=0x4407) sendfile(r5, r5, &(0x7f0000237000)=0x0, 0x25) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/26 10:31:15 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000f82000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) readahead(r1, 0x0, 0xf3c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000f1c000)={0x80000, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000fe2000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x62689cc022a97de7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r3, 0x401845e0, &(0x7f00000e2000-0x18)={0x0, 0x7, 0x7, 0x543, 0xffff, 0x8}) 2018/01/26 10:31:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000799000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000969000-0x15)='/proc/self/net/pfkey\x00', 0x20000, 0x0) r2 = creat(&(0x7f0000729000)='./file0\x00', 0x0) clock_gettime(0x7, &(0x7f0000bf8000)={0x0, 0x0}) timerfd_gettime(r2, &(0x7f00000b2000-0x10)={{0x0, 0x0}, {0x0, 0x0}}) select(0x40, &(0x7f0000e75000-0x40)={0xeed, 0xd81, 0x0, 0x5, 0x7, 0x7, 0x100000000000, 0x8}, &(0x7f000043a000-0x40)={0x4, 0x7, 0x7, 0x0, 0x0, 0x0, 0x2, 0x0}, &(0x7f000001f000-0x40)={0x3ff, 0x1000, 0x9, 0x1000, 0x473, 0x5, 0x1420, 0x2}, &(0x7f00004b1000)={0x0, 0x2710}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000791000-0x90)={[0x6, 0x5, 0xa, 0x2, 0x0, 0x4, 0x3ff, 0x3, 0x20000000000904, 0x3ff, 0x5, 0x0, 0x1, 0x80000000, 0x100, 0x1], 0x4000, 0x1000}) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x1000000000000, 0x0, 0x0, @time={r4, r3}, {0x0, 0x0}, {0x0, 0x0}, @time=@time={0x0, 0x0}}], 0x1c) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, &(0x7f0000863000-0x4)=0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f000024b000)={0x100000001, 0x1, 0x1, 0x6, 0x0}, &(0x7f0000ce7000-0x4)=0x10) unlink(&(0x7f00006c6000)='./file0\x00') r5 = getpid() sched_setaffinity(r5, 0x8, &(0x7f0000b83000)=0x5) rename(&(0x7f0000854000)='./file0\x00', &(0x7f0000a3f000)='./file0\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000c1d000-0xa)='/dev/cuse\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000fd4000)="92", 0x1, 0x0, &(0x7f0000aa8000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x800000001}, 0x1c) listen(0xffffffffffffffff, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f000082d000)={0x0, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000fd3000)=0x10, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000209000)='./control\x00', &(0x7f0000a40000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/01/26 10:31:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000474000-0x12)='/dev/snd/pcmC#D#c\x00', 0x1000, 0x80) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000d01000)={0x0, 0x3f, 0x30}, &(0x7f0000697000)=0xc) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00001f8000-0x16)={r2, 0x1f, 0x7, [0x100000000, 0x4, 0x5, 0x0, 0xd2b, 0x3, 0x1]}, &(0x7f0000b5b000-0x4)=0x16) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r3, 0x8921, &(0x7f0000263000-0x28)={@generic=""/16, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r4, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) 2018/01/26 10:31:15 executing program 3: umount2(&(0x7f000002f000-0x8)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000d3e000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000360000)=0xc) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f000066c000)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x12) ptrace(0x13, r2) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r3, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 223.241877] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:15 executing program 7: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00002c9000)='/dev/mixer\x00', 0x105440, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000001000-0x95)=""/149, &(0x7f0000000000)=0x95) [ 223.283573] binder_alloc: 2439: binder_alloc_buf, no vma [ 223.294955] binder: 2441:2445 transaction failed 29189/-3, size 0-0 line 2903 [ 223.306383] binder: 2439:2444 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 223.306394] binder: 2439:2444 BC_INCREFS_DONE node 624 has no pending increfs request [ 223.306409] binder: 2439:2444 ioctl c0306201 2000efd0 returned -11 [ 223.311671] ptrace attach of "/root/syz-executor3"[3714] was attempted by "/root/syz-executor3"[2449] [ 223.312332] binder_alloc: 2439: binder_alloc_buf, no vma [ 223.312391] binder: 2438:2447 transaction failed 29189/-3, size 0-0 line 2903 [ 223.312540] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.317175] binder: BINDER_SET_CONTEXT_MGR already set [ 223.317192] binder: 2439:2459 ioctl 40046207 0 returned -16 [ 223.327318] binder_alloc: 2439: binder_alloc_buf, no vma [ 223.327346] binder: 2436:2442 transaction failed 29189/-3, size 0-0 line 2903 [ 223.330760] binder_alloc: 2439: binder_alloc_buf, no vma [ 223.330786] binder: 2438:2457 transaction failed 29189/-3, size 0-0 line 2903 [ 223.331851] binder: 2439:2459 DecRefs 0 refcount change on invalid ref 0 ret -22 2018/01/26 10:31:15 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000001000-0x8)={0x0, 0x989680}, &(0x7f0000001000-0x8)={0x0, 0x0}) syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) 2018/01/26 10:31:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0x0, 0xfffffffffffffffd) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x1, 0x0, &(0x7f0000372000)="e8"}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/01/26 10:31:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000088000-0xa)='/dev/vcs#\x00', 0x2, 0x2000) fchdir(r0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f00009fe000)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f000039f000-0x20)=""/32) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000049c000-0x30)={0x0, 0x0, &(0x7f00004f5000)=[], 0x0, 0x0, &(0x7f0000b38000-0x6a)=""}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000211000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) open(&(0x7f0000853000)='./file0\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000f000-0x30)={0x1c, 0x0, &(0x7f000000e000)=[@decrefs={0x40046307, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}], 0x6e, 0xfdfd, &(0x7f0000a76000)=""}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000016000-0x10)={&(0x7f0000021000-0x274)={0x14, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/26 10:31:15 executing program 5: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000009000-0xb)='/dev/adsp#\x00', 0x4, 0x0) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000000b000-0x40)={0x46, @tick=0x61, 0x81, {0xfff, 0xffff}, 0x6, 0x2, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f000000c000-0x4)=0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f000000c000-0x10c)={{0x10001, 0x3, 0x5, 0x2, "09b52b7475d25be7fbbde53b4144b269f56060a696e883119befecb80a5216b1df8e6ea5aca8092247448e3a", 0x8}, 0x0, 0x0, 0x4, r2, 0x6, 0x800, "516cda36e5f6010c068d2ca4fab4efd7263ff3d88eb68a869613f0bdce0c59b1b5bb65fa777a7edd709fee3053525b59f00b216453bfab8874fdb16188df2cc8", &(0x7f000000b000)='\x00', 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x2, 0x3f, 0xffffffffffff4027, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000007000)={'security\x00', 0x0, 0x0, 0x90, [0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0], 0x10, &(0x7f0000005000)={0x0, 0x0}, [{{{@loopback=0x7f000001, @broadcast=0xffffffff, 0x0, 0x0, @generic="762315fc250dba5022aec1bd78810002", @generic="87ea47822cfe7b00055a274b55b2b511", {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x0, 0x0}, 0x0, 0x70, 0x90, 0x0, {0x0, 0x0}, []}, {0x20, "a1f965e4d39590c7a295df62655baa54ddbeafdaebf439125dcfaac1ca", 0x1, ""}}]}, 0xec) 2018/01/26 10:31:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r1 = syz_open_procfs(0x0, &(0x7f00007c4000-0x8)='net/sco\x00') recvfrom$inet6(r1, &(0x7f000008f000)=""/224, 0xe0, 0x40010100, &(0x7f0000775000)={0xa, 0x2, 0x2, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x100000001}, 0x1c) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/26 10:31:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00004d5000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r3, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) 2018/01/26 10:31:15 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0x0, 0x0}) r2 = socket$inet6(0xa, 0x3, 0x200) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000c4f000)={r1, r2, 0x8, 0x7ff, &(0x7f0000a72000)="464a3177352142e49296f17bf569eec3583177deb163e1c4746385e0f72521dfd0126e1c3b895e18dba9a1b3178a5094e5aae2652041784f0a0b3992b1e84c6c608668e916fe7ff3490b0382bac4addc502c11424c871f4794d2879bfeff964c", 0x6c0, 0x2, 0x31c, 0x8001000000000000, 0x9, 0x0, 0x2, "b91a4ea58af22666cef52f8dc40a477f388fdd6391b503a696d771e9285d4eb58eb0d5c66408dd62cce262086f7d41c5688041f14b36c21c9ee7259e121f4ba8a8fc87067b5972258b8dc25e6f4396bb39f5ac122396220ca8c9bce9675e7e91b4300ad8c2aa17c0acfe8ebdb1d7775bc8cd229ff7213aa2b8ae7765edf72f0ea3a4570aa961227146675b8d04201c521a402859314472c152aedb4e25e1b1ac33e9c854b1ac6fdf83957e37f4451a636957b87f2aeeec93729c1e506f6f33cbb8eb2799d5565a5a1d821e5efa2e68b7a3957149ca6060205faebfa624761cb4111ddba36a577d647c"}) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f000048b000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000880000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x2c, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x0, 0x0, ""}}}}}}, &(0x7f000099c000)={0x0, 0x1, [0x0]}) 2018/01/26 10:31:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x5, 0x200) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000699000-0x4)=0x0) socket$packet(0x11, 0x400000002, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 223.331869] binder: 2439:2459 BC_INCREFS_DONE u0000000000000000 no match [ 223.339530] ptrace attach of "/root/syz-executor3"[3714] was attempted by "/root/syz-executor3"[2460] [ 223.350091] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.351281] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.461710] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffff9c, &(0x7f0000088000-0x1c)={&(0x7f00007c9000-0x32)=@pppol2tpin6={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}}}, 0x32, &(0x7f0000e18000)=[{&(0x7f00006d1000-0xc1)=""/193, 0xc1}], 0x1, &(0x7f0000067000-0x57)=""/87, 0x57, 0x20}, 0x20) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000c92000-0x11)='/dev/vga_arbiter\x00', 0x10803, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x0) bind$ipx(r0, &(0x7f000076e000-0x10)={0x4, 0xcf, 0x1, "05cfc692647e", 0x101, 0x0}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2018/01/26 10:31:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r3, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) [ 223.510974] binder: 2467:2472 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 223.515052] binder_alloc: 2467: binder_alloc_buf, no vma [ 223.515089] binder: 2476:2477 transaction failed 29189/-3, size 0-0 line 2903 [ 223.522582] binder_alloc: 2467: binder_alloc_buf, no vma 2018/01/26 10:31:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000a81000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f000098d000)=""/149, 0x95, 0x0) close(r0) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) readv(r0, &(0x7f0000e78000-0x30)=[{&(0x7f0000d45000)=""/0, 0x0}, {&(0x7f0000cbb000-0x1000)=""/4096, 0x1000}, {&(0x7f000035f000-0x53)=""/83, 0x53}, {&(0x7f0000d15000)=""/0, 0x0}, {&(0x7f00005e9000)=""/210, 0xd2}, {&(0x7f0000463000-0x23)=""/60, 0x3c}], 0x6) socket$rds(0x15, 0x5, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/26 10:31:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000dcc000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00008b9000-0xe)={0x0, 0xfff, 0x3, [0xfffffffffffffffb, 0x8, 0x401]}, &(0x7f00004b7000)=0xe) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f000010e000)={0x3, 0x8001, 0xe, 0x0, 0x0, 0x1, 0x6, 0x9, r1}, &(0x7f000077f000)=0x20) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000ff1000-0x4)=0x8000000000004, 0x9c) socket$packet(0x11, 0x4, 0x300) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000865000)="", 0xffe4, 0x0, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000142000)={0x0, 0x29, "8450d938edef3d903ff71b6c8f6ba13278704af30bf175a4554cb6a11c6cd4173ba49f9469351f42a1"}, &(0x7f000079e000-0x4)=0x31) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000f5c000)={0x7, r0, 0x1}) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80206433, &(0x7f00009bb000)=""/108) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f000054c000-0x108)={r2, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x0, 0xd}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0xfffffffffffffffd, 0x3ac3, 0x0, 0x100000001, 0x8, 0xfffffffffffffff9, 0x8, 0x4, 0x8, 0x1, 0x1f, 0x6, 0x80, 0x6]}, &(0x7f0000765000-0x4)=0x108) 2018/01/26 10:31:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000459000-0x12)='/dev/snd/pcmC#D#p\x00', 0x2, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00006c7000)='/dev/rtc\x00', 0x802, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000f20000)={0xd000, &(0x7f0000044000)=0x0, 0x8, r1, 0x2}) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r2) syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000ed6000-0xc)='/dev/rfkill\x00', 0x2, 0x0) writev(r3, &(0x7f000037d000)=[{&(0x7f00008c5000-0x7)="03f5432f00030f", 0x7}], 0x1) 2018/01/26 10:31:15 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xfffffffffffffdf4) [ 223.522603] binder: 2473:2475 transaction failed 29189/-3, size 0-0 line 2903 [ 223.524696] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000044c000-0x10)='/selinux/status\x00', 0x0, 0x0) getsockname$netlink(r2, &(0x7f000031f000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f00007d1000)=0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000786000-0x1d)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000e57000-0x1008)={0x0, 0x1000, "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"}, &(0x7f0000873000)=0x1008) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000395000)={r4, 0x4, 0x9, 0x66ef, 0x1, 0x3}, &(0x7f0000f28000)=0x14) fallocate(r1, 0x2, 0x6, 0x80) 2018/01/26 10:31:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000dc0000-0x4)=0x3, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f000041f000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, 0x20) bind$inet6(r0, &(0x7f0000fa9000-0x1c)={0xa, 0x3, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000d8a000)={0x0, 0x8}, &(0x7f000027f000)=0x8) socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000a0e000)={r1, 0xc2}, 0x8) sendto$inet6(r0, &(0x7f0000ab5000-0x72)="97", 0x1, 0x0, &(0x7f0000aaa000)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r2 = dup(r0) write$sndseq(r2, &(0x7f0000802000-0xc0)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @queue={0x0, {0x0, 0x0}}}], 0x1c) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000f79000-0x4)=0x1ff) sendmmsg$alg(r2, &(0x7f00004ff000-0x70)=[{0x0, 0x0, &(0x7f00000b4000)=[{&(0x7f000050f000-0xc1)='l', 0x1}], 0x1, &(0x7f00009b7000)=[], 0x0, 0x0}], 0x1, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) bind$inet6(r3, &(0x7f000067f000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r3, &(0x7f0000f25000)="86", 0x1, 0x0, &(0x7f0000ab0000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x1}, 0x1c) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000a2b000)=0x200, &(0x7f000075b000-0x4)=0x4) sendto$inet6(r3, &(0x7f0000b8d000-0x3)='-', 0x1, 0x0, &(0x7f00001ab000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) close(r3) 2018/01/26 10:31:16 executing program 7: syslog(0x3, &(0x7f0000001000-0xf8)=""/248, 0xf8) r0 = syz_open_dev$adsp(&(0x7f00001ab000)='/dev/adsp#\x00', 0x10001, 0x280) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) [ 223.532958] binder_alloc: 2467: binder_alloc_buf, no vma [ 223.532984] binder: 2473:2482 transaction failed 29189/-3, size 0-0 line 2903 [ 223.540689] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/26 10:31:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00003c4000-0x10)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0186416, &(0x7f0000f6b000-0x18)={0x100000001, 0x10001, 0xffffffff7fffffff, 0x4, 0x10, 0x8}) r1 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r1) r2 = syz_open_dev$binder(&(0x7f000013b000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x3a9, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000369000)='/dev/hwrng\x00', 0x210182, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00007d2000-0x16)={0x0, 0x5, 0x7, [0x0, 0x20, 0x10001, 0x3ff, 0x3, 0x7fffffff, 0x8001]}, &(0x7f0000b30000-0x4)=0x16) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f000036d000)={r4, 0x5, 0x1}, &(0x7f0000c72000)=0x8) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) [ 223.553196] binder_alloc: 2467: binder_alloc_buf, no vma [ 223.553218] binder: 2486:2487 transaction failed 29189/-3, size 0-0 line 2903 [ 223.563436] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.577976] binder_alloc: 2467: binder_alloc_buf, no vma [ 223.578006] binder: 2485:2489 transaction failed 29189/-3, size 0-0 line 2903 [ 223.578770] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.590809] binder_alloc: 2467: binder_alloc_buf, no vma [ 223.590835] binder: 2490:2493 transaction failed 29189/-3, size 0-0 line 2903 [ 223.591968] binder: BINDER_SET_CONTEXT_MGR already set [ 223.591986] binder: 2467:2488 ioctl 40046207 0 returned -16 [ 223.592334] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.597772] binder_alloc: 2467: binder_alloc_buf, no vma [ 223.597796] binder: 2485:2492 transaction failed 29189/-3, size 0-0 line 2903 [ 223.597855] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.607850] binder: 2467:2488 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 223.607862] binder: 2467:2488 BC_INCREFS_DONE u0000000000000000 no match [ 223.610955] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.626707] binder_alloc: 2467: binder_alloc_buf, no vma [ 223.626733] binder: 2490:2493 transaction failed 29189/-3, size 0-0 line 2903 [ 223.641159] binder_alloc: 2467: binder_alloc_buf, no vma [ 223.641184] binder: 2501:2503 transaction failed 29189/-3, size 0-0 line 2903 [ 223.641429] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.663683] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.678823] binder_alloc: 2467: binder_alloc_buf, no vma [ 223.678852] binder: 2501:2509 transaction failed 29189/-3, size 0-0 line 2903 [ 223.698245] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.721998] binder_alloc: 2467: binder_alloc_buf, no vma [ 223.722066] binder: 2511:2513 transaction failed 29189/-3, size 0-0 line 2903 [ 223.725150] binder: undelivered TRANSACTION_ERROR: 29189 [ 223.740389] ================================================================== [ 223.740412] BUG: KASAN: slab-out-of-bounds in string+0x1e8/0x200 [ 223.740419] Read of size 1 at addr ffff8801ccddeed0 by task syz-executor5/2514 [ 223.740421] [ 223.740430] CPU: 1 PID: 2514 Comm: syz-executor5 Not tainted 4.15.0-rc9+ #191 [ 223.740436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.740439] Call Trace: [ 223.740451] dump_stack+0x194/0x257 [ 223.740465] ? arch_local_irq_restore+0x53/0x53 [ 223.740476] ? show_regs_print_info+0x18/0x18 [ 223.740494] ? string+0x1e8/0x200 [ 223.740506] print_address_description+0x73/0x250 [ 223.740515] ? string+0x1e8/0x200 [ 223.740525] kasan_report+0x25b/0x340 [ 223.740541] __asan_report_load1_noabort+0x14/0x20 [ 223.740549] string+0x1e8/0x200 [ 223.740570] vsnprintf+0x863/0x1900 [ 223.740590] ? pointer+0x9e0/0x9e0 [ 223.740617] __request_module+0x1bf/0xc20 [ 223.740625] ? lock_downgrade+0x980/0x980 [ 223.740640] ? free_modprobe_argv+0xa0/0xa0 [ 223.740649] ? lock_downgrade+0x980/0x980 [ 223.740669] ? is_bpf_text_address+0x7b/0x120 [ 223.740680] ? lock_downgrade+0x980/0x980 [ 223.740699] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 223.740714] ? wait_for_completion+0x770/0x770 [ 223.740728] ? rcutorture_record_progress+0x10/0x10 [ 223.740739] ? wait_for_completion+0x770/0x770 [ 223.740758] ? kernel_text_address+0x102/0x140 [ 223.740771] ? __kernel_text_address+0xd/0x40 [ 223.740781] ? unwind_get_return_address+0x61/0xa0 [ 223.740805] ? xt_find_target+0x17b/0x1e0 [ 223.740836] xt_request_find_target+0x8b/0xb0 [ 223.740851] translate_compat_table+0x910/0x1b90 [ 223.740885] ? ipt_register_table+0x3a0/0x3a0 [ 223.740900] ? __might_fault+0x110/0x1d0 [ 223.740910] ? lock_downgrade+0x980/0x980 [ 223.740916] ? __kmalloc_node+0x33/0x70 [ 223.740929] ? lock_release+0xa40/0xa40 [ 223.740937] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 223.740948] ? __check_object_size+0x25d/0x4f0 [ 223.740967] ? __might_sleep+0x95/0x190 [ 223.740996] compat_do_replace.isra.15+0x30e/0x720 [ 223.741006] ? compat_do_replace.isra.15+0x30e/0x720 [ 223.741014] ? cred_has_capability+0x1a0/0x3d0 [ 223.741032] ? compat_do_ipt_get_ctl+0xbc0/0xbc0 [ 223.741041] ? find_held_lock+0x35/0x1d0 [ 223.741059] ? module_unload_free+0x5b0/0x5b0 [ 223.741067] ? lock_acquire+0x1d5/0x580 [ 223.741100] ? ns_capable_common+0xcf/0x160 [ 223.741118] compat_do_ipt_set_ctl+0x106/0x150 [ 223.741134] compat_nf_setsockopt+0x88/0x130 [ 223.741142] ? compat_do_replace.isra.15+0x720/0x720 [ 223.741158] compat_ip_setsockopt+0x9d/0xf0 [ 223.741173] compat_raw_setsockopt+0xb7/0xd0 [ 223.741189] compat_sock_common_setsockopt+0xb2/0x140 [ 223.741196] ? raw_seticmpfilter+0x70/0x70 [ 223.741212] compat_SyS_setsockopt+0x17c/0x410 [ 223.741219] ? sock_common_setsockopt+0xd0/0xd0 [ 223.741233] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 223.741247] ? do_fast_syscall_32+0x156/0xf9d [ 223.741261] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 223.741272] do_fast_syscall_32+0x3ee/0xf9d [ 223.741292] ? do_int80_syscall_32+0x9d0/0x9d0 [ 223.741316] ? syscall_return_slowpath+0x2ad/0x550 [ 223.741331] ? prepare_exit_to_usermode+0x340/0x340 [ 223.741343] ? sysret32_from_system_call+0x5/0x3b [ 223.741360] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 223.741380] entry_SYSENTER_compat+0x54/0x63 [ 223.741386] RIP: 0023:0xf7f48c79 [ 223.741390] RSP: 002b:00000000f774408c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 223.741398] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000000000 [ 223.741403] RDX: 0000000000000040 RSI: 0000000020007000 RDI: 00000000000000ec [ 223.741406] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.741411] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 223.741415] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.741444] [ 223.741448] Allocated by task 2514: [ 223.741456] save_stack+0x43/0xd0 [ 223.741462] kasan_kmalloc+0xad/0xe0 [ 223.741467] __kmalloc_node+0x47/0x70 [ 223.741475] kvmalloc_node+0x99/0xd0 [ 223.741480] xt_alloc_table_info+0x64/0xe0 [ 223.741487] compat_do_replace.isra.15+0x17f/0x720 [ 223.741494] compat_do_ipt_set_ctl+0x106/0x150 [ 223.741500] compat_nf_setsockopt+0x88/0x130 [ 223.741507] compat_ip_setsockopt+0x9d/0xf0 [ 223.741513] compat_raw_setsockopt+0xb7/0xd0 [ 223.741519] compat_sock_common_setsockopt+0xb2/0x140 [ 223.741526] compat_SyS_setsockopt+0x17c/0x410 [ 223.741532] do_fast_syscall_32+0x3ee/0xf9d [ 223.741539] entry_SYSENTER_compat+0x54/0x63 [ 223.741541] [ 223.741544] Freed by task 1815: [ 223.741550] save_stack+0x43/0xd0 [ 223.741556] kasan_slab_free+0x71/0xc0 [ 223.741560] kfree+0xd6/0x260 [ 223.741567] seq_release+0x59/0x70 [ 223.741576] kernfs_fop_release+0x10b/0x180 [ 223.741583] __fput+0x327/0x7e0 [ 223.741589] ____fput+0x15/0x20 [ 223.741596] task_work_run+0x199/0x270 [ 223.741602] exit_to_usermode_loop+0x296/0x310 [ 223.741609] syscall_return_slowpath+0x490/0x550 [ 223.741614] entry_SYSCALL_64_fastpath+0x9e/0xa0 [ 223.741616] [ 223.741621] The buggy address belongs to the object at ffff8801ccddee00 [ 223.741621] which belongs to the cache kmalloc-256 of size 256 [ 223.741627] The buggy address is located 208 bytes inside of [ 223.741627] 256-byte region [ffff8801ccddee00, ffff8801ccddef00) [ 223.741629] The buggy address belongs to the page: [ 223.741635] page:ffffea0007337780 count:1 mapcount:0 mapping:ffff8801ccdde040 index:0xffff8801ccdde7c0 [ 223.741642] flags: 0x2fffc0000000100(slab) [ 223.741653] raw: 02fffc0000000100 ffff8801ccdde040 ffff8801ccdde7c0 000000010000000a [ 223.741662] raw: ffffea0006f208a0 ffffea0006f86060 ffff8801dac007c0 0000000000000000 [ 223.741665] page dumped because: kasan: bad access detected [ 223.741667] [ 223.741669] Memory state around the buggy address: [ 223.741676] ffff8801ccdded80: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 223.741682] ffff8801ccddee00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 223.741687] >ffff8801ccddee80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 223.741690] ^ [ 223.741695] ffff8801ccddef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 223.741701] ffff8801ccddef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 223.741703] ================================================================== [ 223.741705] Disabling lock debugging due to kernel taint [ 223.741752] Kernel panic - not syncing: panic_on_warn set ... [ 223.741752] [ 223.741759] CPU: 1 PID: 2514 Comm: syz-executor5 Tainted: G B 4.15.0-rc9+ #191 [ 223.741763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 223.741765] Call Trace: [ 223.741774] dump_stack+0x194/0x257 [ 223.741784] ? arch_local_irq_restore+0x53/0x53 [ 223.741792] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 223.741801] ? vsnprintf+0x1ed/0x1900 [ 223.741809] ? string+0x160/0x200 [ 223.741816] panic+0x1e4/0x41c [ 223.741824] ? refcount_error_report+0x214/0x214 [ 223.741833] ? add_taint+0x1c/0x50 [ 223.741841] ? add_taint+0x1c/0x50 [ 223.741850] ? string+0x1e8/0x200 [ 223.741857] kasan_end_report+0x50/0x50 [ 223.741864] kasan_report+0x144/0x340 [ 223.741875] __asan_report_load1_noabort+0x14/0x20 [ 223.741882] string+0x1e8/0x200 [ 223.741895] vsnprintf+0x863/0x1900 [ 223.741908] ? pointer+0x9e0/0x9e0 [ 223.741924] __request_module+0x1bf/0xc20 [ 223.741931] ? lock_downgrade+0x980/0x980 [ 223.741942] ? free_modprobe_argv+0xa0/0xa0 [ 223.741949] ? lock_downgrade+0x980/0x980 [ 223.741963] ? is_bpf_text_address+0x7b/0x120 [ 223.741970] ? lock_downgrade+0x980/0x980 [ 223.741981] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 223.741991] ? wait_for_completion+0x770/0x770 [ 223.742004] ? rcutorture_record_progress+0x10/0x10 [ 223.742013] ? wait_for_completion+0x770/0x770 [ 223.742027] ? kernel_text_address+0x102/0x140 [ 223.742036] ? __kernel_text_address+0xd/0x40 [ 223.742044] ? unwind_get_return_address+0x61/0xa0 [ 223.742058] ? xt_find_target+0x17b/0x1e0 [ 223.742076] xt_request_find_target+0x8b/0xb0 [ 223.742086] translate_compat_table+0x910/0x1b90 [ 223.742108] ? ipt_register_table+0x3a0/0x3a0 [ 223.742117] ? __might_fault+0x110/0x1d0 [ 223.742125] ? lock_downgrade+0x980/0x980 [ 223.742130] ? __kmalloc_node+0x33/0x70 [ 223.742139] ? lock_release+0xa40/0xa40 [ 223.742146] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 223.742154] ? __check_object_size+0x25d/0x4f0 [ 223.742166] ? __might_sleep+0x95/0x190 [ 223.742184] compat_do_replace.isra.15+0x30e/0x720 [ 223.742192] ? compat_do_replace.isra.15+0x30e/0x720 [ 223.742199] ? cred_has_capability+0x1a0/0x3d0 [ 223.742211] ? compat_do_ipt_get_ctl+0xbc0/0xbc0 [ 223.742218] ? find_held_lock+0x35/0x1d0 [ 223.742230] ? module_unload_free+0x5b0/0x5b0 [ 223.742237] ? lock_acquire+0x1d5/0x580 [ 223.742255] ? ns_capable_common+0xcf/0x160 [ 223.742267] compat_do_ipt_set_ctl+0x106/0x150 [ 223.742277] compat_nf_setsockopt+0x88/0x130 [ 223.742284] ? compat_do_replace.isra.15+0x720/0x720 [ 223.742295] compat_ip_setsockopt+0x9d/0xf0 [ 223.742306] compat_raw_setsockopt+0xb7/0xd0 [ 223.742316] compat_sock_common_setsockopt+0xb2/0x140 [ 223.742326] ? raw_seticmpfilter+0x70/0x70 [ 223.742336] compat_SyS_setsockopt+0x17c/0x410 [ 223.742342] ? sock_common_setsockopt+0xd0/0xd0 [ 223.742352] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 223.742361] ? do_fast_syscall_32+0x156/0xf9d [ 223.742372] ? scm_detach_fds_compat+0x3c0/0x3c0 [ 223.742380] do_fast_syscall_32+0x3ee/0xf9d [ 223.742393] ? do_int80_syscall_32+0x9d0/0x9d0 [ 223.742407] ? syscall_return_slowpath+0x2ad/0x550 [ 223.742414] ? prepare_exit_to_usermode+0x340/0x340 [ 223.742422] ? sysret32_from_system_call+0x5/0x3b [ 223.742434] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 223.742447] entry_SYSENTER_compat+0x54/0x63 [ 223.742451] RIP: 0023:0xf7f48c79 [ 223.742454] RSP: 002b:00000000f774408c EFLAGS: 00000296 ORIG_RAX: 000000000000016e [ 223.742461] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000000000 [ 223.742465] RDX: 0000000000000040 RSI: 0000000020007000 RDI: 00000000000000ec [ 223.742468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 223.742472] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 223.742475] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 223.746449] Dumping ftrace buffer: [ 223.746453] (ftrace buffer empty) [ 223.746456] Kernel Offset: disabled