? add_to_page_cache_locked+0x40/0x40 [ 311.138422] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 311.143956] ? alloc_pages_current+0x114/0x210 [ 311.148551] ? __lock_is_held+0xb5/0x140 [ 311.154166] ? __page_cache_alloc+0x189/0x5d0 [ 311.158677] ? check_same_owner+0x320/0x320 [ 311.163002] ? rcu_note_context_switch+0x710/0x710 [ 311.167933] ? pagecache_get_page+0x2d5/0xe20 [ 311.172429] __should_failslab+0x124/0x180 [ 311.176675] should_failslab+0x9/0x14 [ 311.180481] kmem_cache_alloc+0x2af/0x760 [ 311.184634] jbd2__journal_start+0x1d3/0xa70 [ 311.189048] ? jbd2_write_access_granted.part.8+0x420/0x420 [ 311.194756] ? rcu_note_context_switch+0x710/0x710 [ 311.199685] ? __might_sleep+0x95/0x190 [ 311.203663] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.209200] __ext4_journal_start_sb+0x17a/0x5e0 [ 311.213947] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 311.219559] ? ext4_da_write_begin+0x5be/0x1260 [ 311.224222] ? ext4_journal_abort_handle.isra.4+0x260/0x260 [ 311.229923] ? set_page_dirty_lock+0x180/0x180 [ 311.234496] ? __lock_is_held+0xb5/0x140 [ 311.238563] ext4_da_write_begin+0x5be/0x1260 [ 311.243065] ? ext4_write_begin+0x1800/0x1800 [ 311.247556] ? balance_dirty_pages+0x3780/0x3780 [ 311.252308] ? block_write_end+0x260/0x260 [ 311.256536] ? __lock_is_held+0xb5/0x140 [ 311.260602] ? graph_lock+0x170/0x170 [ 311.264401] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.269932] ? __ext4_journal_stop+0x106/0x1f0 [ 311.274510] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.280040] ? ext4_da_write_end+0x4f9/0xc30 [ 311.284441] ? copyin+0xb7/0x100 [ 311.287809] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 311.292818] ? iov_iter_advance+0x2e4/0x14c0 [ 311.297225] ? __lock_is_held+0xb5/0x140 [ 311.301276] ? ext4_write_end+0x10c0/0x10c0 [ 311.305590] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.311117] ? iov_iter_fault_in_readable+0x23d/0x460 [ 311.316299] ? iov_iter_get_pages_alloc+0x1510/0x1510 [ 311.321486] ? iov_iter_npages+0xe60/0xe60 [ 311.325710] ? check_same_owner+0x320/0x320 [ 311.330051] generic_perform_write+0x39a/0x6a0 [ 311.334632] ? generic_update_time+0x255/0x420 [ 311.339221] ? add_page_wait_queue+0x2a0/0x2a0 [ 311.343799] ? current_time+0x180/0x180 [ 311.347768] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 311.352775] ? generic_write_checks+0x37d/0x5b0 [ 311.357448] ? page_endio+0x610/0x610 [ 311.361247] ? down_write_trylock+0xd4/0x150 [ 311.365656] __generic_file_write_iter+0x26e/0x630 [ 311.370594] ext4_file_write_iter+0x388/0x1420 [ 311.375187] ? ext4_file_mmap+0x410/0x410 [ 311.379332] ? perf_trace_lock+0x900/0x900 [ 311.383568] ? expand_files.part.8+0x9a0/0x9a0 [ 311.388144] ? graph_lock+0x170/0x170 [ 311.391942] ? proc_fail_nth_write+0x96/0x1f0 [ 311.396429] ? proc_cwd_link+0x1d0/0x1d0 [ 311.400495] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 311.406036] ? iov_iter_init+0xc9/0x1f0 [ 311.410010] __vfs_write+0x64d/0x960 [ 311.413726] ? kernel_read+0x120/0x120 [ 311.417611] ? __lock_is_held+0xb5/0x140 [ 311.421686] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.427229] ? __sb_start_write+0x17f/0x300 [ 311.431547] vfs_write+0x1f8/0x560 [ 311.435083] ksys_write+0xf9/0x250 [ 311.438705] ? __ia32_sys_read+0xb0/0xb0 [ 311.442767] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 311.447608] __x64_sys_write+0x73/0xb0 [ 311.451491] do_syscall_64+0x1b1/0x800 [ 311.455380] ? finish_task_switch+0x1ca/0x840 [ 311.459869] ? syscall_return_slowpath+0x5c0/0x5c0 [ 311.464798] ? syscall_return_slowpath+0x30f/0x5c0 [ 311.469726] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 311.475094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.479938] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.485128] RIP: 0033:0x455a09 [ 311.488303] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 311.507759] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 2018/06/05 23:21:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:21:59 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={r0, 0x6, 0x1, 0x100000000, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000480)={0x5, 0x0, [{0x0, 0x7e, &(0x7f0000000240)=""/126}, {0x10000, 0x24, &(0x7f0000000100)=""/36}, {0x4, 0x43, &(0x7f00000002c0)=""/67}, {0xd004, 0x2b, &(0x7f0000000340)=""/43}, {0x4004, 0xd3, &(0x7f0000000380)=""/211}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000540)=@ioapic) [ 311.515480] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 311.522741] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 311.530008] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 311.537282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 311.544543] R13: 00000000000007b1 R14: 0000000000700938 R15: 0000000000000020 [ 311.558604] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:21:59 executing program 4 (fault-call:3 fault-nth:33): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:21:59 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:21:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000f000000000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 311.817491] binder: 18727:18732 ERROR: BC_REGISTER_LOOPER called without request [ 311.825674] binder: 18727:18732 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 311.833899] binder: 18727:18732 got reply transaction with no transaction stack [ 311.841408] binder: 18727:18732 transaction failed 29201/-71, size 0-0 line 2763 [ 311.862891] binder: 18727:18733 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:21:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0xc308, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 311.888524] binder: undelivered TRANSACTION_ERROR: 29201 [ 311.909276] Process accounting resumed [ 311.964121] FAULT_INJECTION: forcing a failure. [ 311.964121] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 311.976109] CPU: 1 PID: 18740 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 311.983051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.987224] Process accounting resumed [ 311.992408] Call Trace: [ 311.992432] dump_stack+0x1b9/0x294 [ 311.992453] ? dump_stack_print_info.cold.2+0x52/0x52 [ 311.992475] should_fail.cold.4+0xa/0x1a [ 311.992495] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 311.992513] ? graph_lock+0x170/0x170 [ 311.992527] ? graph_lock+0x170/0x170 [ 311.992543] ? rcu_note_context_switch+0x710/0x710 [ 311.992564] ? find_held_lock+0x36/0x1c0 [ 311.992582] ? __lock_is_held+0xb5/0x140 [ 311.992608] ? check_same_owner+0x320/0x320 [ 311.992623] ? rcu_is_watching+0x85/0x140 [ 311.992645] ? rcu_note_context_switch+0x710/0x710 [ 312.039390] binder: 18746:18749 ERROR: BC_REGISTER_LOOPER called without request [ 312.041972] ? __might_sleep+0x95/0x190 [ 312.041996] __alloc_pages_nodemask+0x34e/0xd70 [ 312.042020] ? __alloc_pages_slowpath+0x2db0/0x2db0 [ 312.042039] ? filemap_map_pages+0x1870/0x1870 [ 312.042057] ? print_usage_bug+0xc0/0xc0 [ 312.068138] binder: 18746:18749 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 312.072282] ? rcu_is_watching+0x85/0x140 [ 312.072301] ? rcu_report_qs_rnp+0x790/0x790 [ 312.072317] ? rcu_report_qs_rnp+0x790/0x790 [ 312.072339] ? is_bpf_text_address+0xd7/0x170 [ 312.072361] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 312.072382] alloc_pages_current+0x10c/0x210 [ 312.076991] binder: 18746:18749 got reply transaction with no transaction stack [ 312.081020] __page_cache_alloc+0x386/0x5d0 [ 312.081040] ? debug_check_no_locks_freed+0x310/0x310 [ 312.081058] ? __filemap_set_wb_err+0x3a0/0x3a0 [ 312.089237] binder: 18746:18749 transaction failed 29201/-71, size 0-0 line 2763 [ 312.093329] ? save_stack+0x43/0xd0 [ 312.093343] ? __kasan_slab_free+0x11a/0x170 [ 312.093356] ? kasan_slab_free+0xe/0x10 [ 312.093368] ? kmem_cache_free+0x86/0x2d0 [ 312.093381] ? jbd2_journal_stop+0x42e/0x15a0 [ 312.093400] ? __ext4_journal_stop+0xde/0x1f0 [ 312.113087] binder: 18746:18750 ERROR: BC_REGISTER_LOOPER called without request [ 312.116588] ? ext4_da_write_end+0x4e1/0xc30 [ 312.116605] ? generic_perform_write+0x4c9/0x6a0 [ 312.116619] ? __generic_file_write_iter+0x26e/0x630 [ 312.116638] pagecache_get_page+0x386/0xe20 [ 312.116655] ? do_raw_spin_unlock+0x9e/0x2e0 [ 312.116674] ? find_get_pages_contig+0x1560/0x1560 [ 312.116688] ? perf_trace_lock_acquire+0xe3/0x980 [ 312.116700] ? graph_lock+0x170/0x170 [ 312.116714] ? trace_hardirqs_off+0xd/0x10 [ 312.116729] ? perf_trace_lock+0x900/0x900 [ 312.116747] ? graph_lock+0x170/0x170 [ 312.116767] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.180335] binder: undelivered TRANSACTION_ERROR: 29201 [ 312.182861] ? __radix_tree_lookup+0x3d4/0x6b0 [ 312.182885] ? graph_lock+0x170/0x170 [ 312.182902] ? find_held_lock+0x36/0x1c0 [ 312.182922] ? __lock_is_held+0xb5/0x140 [ 312.254645] grab_cache_page_write_begin+0x75/0xa0 [ 312.259594] ext4_da_write_begin+0x384/0x1260 [ 312.264119] ? ext4_write_begin+0x1800/0x1800 [ 312.268641] ? balance_dirty_pages+0x3780/0x3780 [ 312.273412] ? block_write_end+0x260/0x260 [ 312.277665] ? __lock_is_held+0xb5/0x140 [ 312.281745] ? graph_lock+0x170/0x170 [ 312.285559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.291115] ? __ext4_journal_stop+0x106/0x1f0 [ 312.295717] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.301270] ? ext4_da_write_end+0x4f9/0xc30 [ 312.305682] ? copyin+0xb7/0x100 [ 312.309054] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 312.314068] ? iov_iter_advance+0x2e4/0x14c0 [ 312.318465] ? __lock_is_held+0xb5/0x140 [ 312.322511] ? ext4_write_end+0x10c0/0x10c0 [ 312.326841] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.332368] ? iov_iter_fault_in_readable+0x23d/0x460 [ 312.337545] ? iov_iter_get_pages_alloc+0x1510/0x1510 [ 312.342734] ? iov_iter_npages+0xe60/0xe60 [ 312.346953] ? check_same_owner+0x320/0x320 [ 312.351264] generic_perform_write+0x39a/0x6a0 [ 312.355833] ? generic_update_time+0x255/0x420 [ 312.360408] ? add_page_wait_queue+0x2a0/0x2a0 [ 312.364981] ? current_time+0x180/0x180 [ 312.368946] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 312.373947] ? generic_write_checks+0x37d/0x5b0 [ 312.378609] ? page_endio+0x610/0x610 [ 312.382395] ? down_write_trylock+0xd4/0x150 [ 312.386796] __generic_file_write_iter+0x26e/0x630 [ 312.391749] ext4_file_write_iter+0x388/0x1420 [ 312.396319] ? kasan_check_read+0x11/0x20 [ 312.400464] ? rcu_is_watching+0x85/0x140 [ 312.404602] ? ext4_file_mmap+0x410/0x410 [ 312.408755] ? perf_trace_lock+0x900/0x900 [ 312.412985] ? expand_files.part.8+0x9a0/0x9a0 [ 312.417576] ? graph_lock+0x170/0x170 [ 312.421380] ? proc_fail_nth_write+0x96/0x1f0 [ 312.425864] ? proc_cwd_link+0x1d0/0x1d0 [ 312.429929] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 312.435463] ? iov_iter_init+0xc9/0x1f0 [ 312.439447] __vfs_write+0x64d/0x960 [ 312.443152] ? kernel_read+0x120/0x120 [ 312.447042] ? __lock_is_held+0xb5/0x140 [ 312.451125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.456654] ? __sb_start_write+0x17f/0x300 [ 312.460965] vfs_write+0x1f8/0x560 [ 312.464497] ksys_write+0xf9/0x250 [ 312.468038] ? __ia32_sys_read+0xb0/0xb0 [ 312.472111] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 312.476950] __x64_sys_write+0x73/0xb0 [ 312.480838] do_syscall_64+0x1b1/0x800 [ 312.484721] ? finish_task_switch+0x1ca/0x840 [ 312.489211] ? syscall_return_slowpath+0x5c0/0x5c0 [ 312.494131] ? syscall_return_slowpath+0x30f/0x5c0 [ 312.499071] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 312.504458] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 312.509305] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 312.514491] RIP: 0033:0x455a09 [ 312.517676] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 312.537047] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 312.544773] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 312.552040] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 312.559306] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 312.566579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 312.573846] R13: 00000000000007b1 R14: 0000000000700938 R15: 0000000000000021 2018/06/05 23:22:00 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000140)=@ioapic) getpeername$packet(r1, &(0x7f0000000000), &(0x7f00000000c0)=0x14) 2018/06/05 23:22:00 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)="2e2f6367726f75702e63707500eac5bea7af575a45fddd5af3a7709295a69e7bc5fd0592bf2a4dc8ace908be8842141ca2a714ed0163d4afd8ac48123d4869e05556a93347d6a7430e03a5f2beb186f16bacf2e4dcdcf3b9ff1d99165ce38d996e7798fe471d9a0d81acd08788fcc9892a2487efcde7a649614b14ba1c18", 0x200002, 0x0) r1 = memfd_create(&(0x7f0000000080)="766d6e65743190626465763a00", 0x1) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000100)=0xa2) ioctl$KDSETLED(r1, 0x4b32, 0x3) r2 = openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r2, r2, &(0x7f00000000c0), 0x6) socket$unix(0x1, 0x1, 0x0) prctl$setname(0xf, &(0x7f0000000140)="766d6e65743190626465763a00") 2018/06/05 23:22:00 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000003c7000000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c6530ff") 2018/06/05 23:22:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:00 executing program 4 (fault-call:3 fault-nth:34): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 312.726833] binder: 18767:18770 ERROR: BC_REGISTER_LOOPER called without request [ 312.763650] binder: 18767:18770 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 312.763860] FAULT_INJECTION: forcing a failure. [ 312.763860] name failslab, interval 1, probability 0, space 0, times 0 [ 312.771848] binder: 18767:18770 got reply transaction with no transaction stack [ 312.771866] binder: 18767:18770 transaction failed 29201/-71, size 0-0 line 2763 [ 312.777751] binder: 18767:18779 ERROR: BC_REGISTER_LOOPER called without request [ 312.783221] CPU: 0 PID: 18771 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 312.812619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 312.821994] Call Trace: [ 312.824587] dump_stack+0x1b9/0x294 [ 312.828208] ? dump_stack_print_info.cold.2+0x52/0x52 [ 312.833395] ? filemap_map_pages+0x1870/0x1870 [ 312.837974] should_fail.cold.4+0xa/0x1a [ 312.842028] ? rcu_report_qs_rnp+0x790/0x790 [ 312.846443] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 312.851544] ? add_to_page_cache_lru+0x29b/0x5c0 [ 312.856309] ? graph_lock+0x170/0x170 [ 312.860102] ? add_to_page_cache_locked+0x40/0x40 [ 312.864942] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 312.870483] ? alloc_pages_current+0x114/0x210 [ 312.875061] ? __lock_is_held+0xb5/0x140 [ 312.879112] ? __page_cache_alloc+0x189/0x5d0 [ 312.883616] ? check_same_owner+0x320/0x320 [ 312.887933] ? rcu_note_context_switch+0x710/0x710 [ 312.892857] ? pagecache_get_page+0x2d5/0xe20 [ 312.897353] __should_failslab+0x124/0x180 [ 312.901590] should_failslab+0x9/0x14 [ 312.905383] kmem_cache_alloc+0x2af/0x760 [ 312.909534] jbd2__journal_start+0x1d3/0xa70 [ 312.913941] ? jbd2_write_access_granted.part.8+0x420/0x420 [ 312.919652] ? rcu_note_context_switch+0x710/0x710 [ 312.924583] ? __might_sleep+0x95/0x190 [ 312.928558] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.934091] __ext4_journal_start_sb+0x17a/0x5e0 [ 312.938853] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 312.944380] ? ext4_da_write_begin+0x5be/0x1260 [ 312.949042] ? ext4_journal_abort_handle.isra.4+0x260/0x260 [ 312.954751] ? set_page_dirty_lock+0x180/0x180 [ 312.959322] ? __lock_is_held+0xb5/0x140 [ 312.963390] ext4_da_write_begin+0x5be/0x1260 [ 312.967888] ? ext4_write_begin+0x1800/0x1800 [ 312.972387] ? balance_dirty_pages+0x3780/0x3780 [ 312.977139] ? block_write_end+0x260/0x260 [ 312.981368] ? __lock_is_held+0xb5/0x140 [ 312.985427] ? graph_lock+0x170/0x170 [ 312.989228] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 312.994754] ? __ext4_journal_stop+0x106/0x1f0 [ 312.999329] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.004857] ? ext4_da_write_end+0x4f9/0xc30 [ 313.009255] ? copyin+0xb7/0x100 [ 313.012631] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 313.017640] ? iov_iter_advance+0x2e4/0x14c0 [ 313.022042] ? __lock_is_held+0xb5/0x140 [ 313.026094] ? ext4_write_end+0x10c0/0x10c0 [ 313.030406] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 313.035935] ? iov_iter_fault_in_readable+0x23d/0x460 [ 313.041119] ? iov_iter_get_pages_alloc+0x1510/0x1510 [ 313.046310] ? iov_iter_npages+0xe60/0xe60 [ 313.050540] ? check_same_owner+0x320/0x320 [ 313.054866] generic_perform_write+0x39a/0x6a0 [ 313.059441] ? generic_update_time+0x255/0x420 [ 313.064044] ? add_page_wait_queue+0x2a0/0x2a0 [ 313.068624] ? current_time+0x180/0x180 [ 313.072599] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 313.077609] ? generic_write_checks+0x37d/0x5b0 [ 313.082270] ? page_endio+0x610/0x610 [ 313.086058] ? down_write_trylock+0xd4/0x150 [ 313.090466] __generic_file_write_iter+0x26e/0x630 [ 313.095396] ext4_file_write_iter+0x388/0x1420 [ 313.099979] ? ext4_file_mmap+0x410/0x410 [ 313.104123] ? perf_trace_lock+0x900/0x900 [ 313.108360] ? expand_files.part.8+0x9a0/0x9a0 [ 313.112945] ? graph_lock+0x170/0x170 [ 313.116744] ? proc_fail_nth_write+0x96/0x1f0 [ 313.121227] ? proc_cwd_link+0x1d0/0x1d0 [ 313.125285] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 313.130813] ? iov_iter_init+0xc9/0x1f0 [ 313.134780] __vfs_write+0x64d/0x960 [ 313.138492] ? kernel_read+0x120/0x120 [ 313.142375] ? __lock_is_held+0xb5/0x140 [ 313.146444] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 313.151969] ? __sb_start_write+0x17f/0x300 [ 313.156289] vfs_write+0x1f8/0x560 [ 313.159834] ksys_write+0xf9/0x250 [ 313.163368] ? __ia32_sys_read+0xb0/0xb0 [ 313.167418] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 313.172963] __x64_sys_write+0x73/0xb0 [ 313.176846] do_syscall_64+0x1b1/0x800 [ 313.180733] ? syscall_return_slowpath+0x5c0/0x5c0 [ 313.185655] ? syscall_return_slowpath+0x30f/0x5c0 [ 313.190592] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 313.195951] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 313.200791] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 313.205977] RIP: 0033:0x455a09 [ 313.209154] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 2018/06/05 23:22:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000c703000000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:00 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r2, 0x5}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0xfde3ebb3be7c0182, 0x18, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da1f}}, 0x14}, 0x1}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000240)={{0x2, 0xffffffffffff0001, 0x4, 0x1, 0x9, 0x9}, 0xffffffffffffff7f, 0x10001, 0x79c1, 0x6, 0x9, "1b3f664542d4aa815dac166571104d6e043b5152787b2a87eea508bc7f526b0b417328e2cf69338f56307343a75944c48d9bae709fdf1e086a231dcdb6acffda1d24cbb44c5bf3d52dc018444371d9654bdbf5ee308f705a8a209a126d70752d3a385806b5794c82b011d16fc1ca4ba2f3a67084f355f77a730685036df73dd2"}) [ 313.228615] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 313.236317] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 313.243582] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 313.250841] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 313.258108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 313.265366] R13: 00000000000007b1 R14: 0000000000700938 R15: 0000000000000022 2018/06/05 23:22:00 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:00 executing program 7: syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="800067726164652c726788824355a9bc1f"]) 2018/06/05 23:22:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:01 executing program 4 (fault-call:3 fault-nth:35): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 313.293275] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000200270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 313.555334] binder: 18790:18800 ERROR: BC_REGISTER_LOOPER called without request [ 313.579630] gfs2: invalid mount option: € [ 313.584179] gfs2: can't parse mount arguments 2018/06/05 23:22:01 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:01 executing program 5: syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfffffffffffffffc, 0x200) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$setflags(r0, 0x2, 0x1) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r2, &(0x7f00000001c0)=&(0x7f0000000180)={&(0x7f00000000c0), 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0xc) [ 313.604120] binder: 18790:18800 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 313.612580] binder: 18790:18800 got reply transaction with no transaction stack [ 313.620113] binder: 18790:18800 transaction failed 29201/-71, size 0-0 line 2763 [ 313.626812] gfs2: invalid mount option: € [ 313.631980] gfs2: can't parse mount arguments [ 313.641202] Process accounting resumed [ 313.644479] binder: 18790:18807 ERROR: BC_REGISTER_LOOPER called without request [ 313.669554] FAULT_INJECTION: forcing a failure. [ 313.669554] name failslab, interval 1, probability 0, space 0, times 0 [ 313.681308] CPU: 1 PID: 18805 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 313.688248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 313.693873] Process accounting resumed [ 313.697601] Call Trace: [ 313.704143] dump_stack+0x1b9/0x294 [ 313.706478] binder: undelivered TRANSACTION_ERROR: 29201 [ 313.707785] ? dump_stack_print_info.cold.2+0x52/0x52 [ 313.707805] ? perf_trace_lock_acquire+0xe3/0x980 [ 313.707823] ? perf_trace_lock_acquire+0xe3/0x980 [ 313.707844] should_fail.cold.4+0xa/0x1a [ 313.732183] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 313.737304] ? graph_lock+0x170/0x170 [ 313.741127] ? graph_lock+0x170/0x170 [ 313.744949] ? find_held_lock+0x36/0x1c0 [ 313.749028] ? __lock_is_held+0xb5/0x140 [ 313.753112] ? check_same_owner+0x320/0x320 [ 313.757453] ? rcu_note_context_switch+0x710/0x710 [ 313.762389] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 313.766965] __should_failslab+0x124/0x180 [ 313.771204] should_failslab+0x9/0x14 [ 313.775018] kmem_cache_alloc+0x2af/0x760 [ 313.779182] ? tag_pages_for_writeback+0x354/0x460 [ 313.784130] ? blk_start_plug+0xc4/0x360 [ 313.788205] ext4_init_io_end+0x90/0x210 [ 313.792277] ? ext4_end_io_rsv_work+0x8f0/0x8f0 [ 313.797046] ? __lock_is_held+0xb5/0x140 [ 313.801122] ? radix_tree_tagged+0x11/0x60 [ 313.805368] ext4_writepages+0x13cf/0x4030 [ 313.809611] ? trace_hardirqs_off+0xd/0x10 [ 313.813847] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 313.818609] ? perf_trace_lock_acquire+0xe3/0x980 [ 313.823469] ? perf_trace_lock+0x900/0x900 [ 313.827714] ? graph_lock+0x170/0x170 [ 313.831520] ? graph_lock+0x170/0x170 [ 313.835334] ? perf_trace_lock+0x900/0x900 [ 313.839583] ? find_held_lock+0x36/0x1c0 [ 313.843664] ? lock_downgrade+0x8e0/0x8e0 [ 313.847825] ? lock_downgrade+0x8e0/0x8e0 [ 313.852011] ? do_raw_spin_unlock+0x9e/0x2e0 [ 313.856431] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 313.861043] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 313.866594] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 313.871884] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 313.876668] do_writepages+0x9a/0x1a0 [ 313.880479] ? do_writepages+0x9a/0x1a0 [ 313.884472] __filemap_fdatawrite_range+0x333/0x470 [ 313.889509] ? delete_from_page_cache_batch+0xf70/0xf70 [ 313.894903] file_write_and_wait_range+0x98/0x100 [ 313.899765] ext4_sync_file+0x2ce/0x1470 [ 313.903842] ? ext4_getfsmap+0xd30/0xd30 [ 313.907921] ? add_page_wait_queue+0x2a0/0x2a0 [ 313.912522] ? current_time+0x180/0x180 [ 313.916514] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 313.921547] ? generic_write_checks+0x37d/0x5b0 [ 313.926237] ? up_write+0x72/0x210 [ 313.929795] ? ext4_getfsmap+0xd30/0xd30 [ 313.933858] vfs_fsync_range+0x140/0x220 [ 313.937921] ext4_file_write_iter+0x688/0x1420 [ 313.942498] ? kasan_check_read+0x11/0x20 [ 313.946641] ? rcu_is_watching+0x85/0x140 [ 313.950785] ? ext4_file_mmap+0x410/0x410 [ 313.954929] ? perf_trace_lock+0x900/0x900 [ 313.959248] ? expand_files.part.8+0x9a0/0x9a0 [ 313.963820] ? graph_lock+0x170/0x170 [ 313.967613] ? proc_fail_nth_write+0x96/0x1f0 [ 313.972096] ? proc_cwd_link+0x1d0/0x1d0 [ 313.976150] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 313.981676] ? iov_iter_init+0xc9/0x1f0 [ 313.985652] __vfs_write+0x64d/0x960 [ 313.989367] ? kernel_read+0x120/0x120 [ 313.993251] ? __lock_is_held+0xb5/0x140 [ 313.997316] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.002841] ? __sb_start_write+0x17f/0x300 [ 314.007155] vfs_write+0x1f8/0x560 [ 314.010689] ksys_write+0xf9/0x250 [ 314.014232] ? __ia32_sys_read+0xb0/0xb0 [ 314.018284] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 314.023818] __x64_sys_write+0x73/0xb0 [ 314.027699] do_syscall_64+0x1b1/0x800 [ 314.031578] ? finish_task_switch+0x1ca/0x840 [ 314.036075] ? syscall_return_slowpath+0x5c0/0x5c0 [ 314.040997] ? syscall_return_slowpath+0x30f/0x5c0 [ 314.045926] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 314.051284] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.056127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.061305] RIP: 0033:0x455a09 [ 314.064478] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.083853] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.091562] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 314.098819] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 314.106075] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 314.113330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 314.120590] R13: 00000000000007b1 R14: 0000000000700938 R15: 0000000000000023 2018/06/05 23:22:02 executing program 7: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x6, 0x8001}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000006000000000000000100000000000000ff0f0000000000007f000000000000000000000000000000ff030000080000000600000000000000000000000000000004000000000000000900000000000000"]) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000240)='team\x00') accept$packet(0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000002c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f00000005c0)=0xe8) r5 = accept$packet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000640)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000680)={'team0\x00', 0x0}) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000300)=@req3={0x2, 0x6, 0x5, 0xbb, 0xf7, 0x10001, 0x5}, 0x1c) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a0c07c80", @ANYRES16=r2, @ANYBLOB="320729bd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="9000020054000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b00000024000400880b0380de0600000100030406000000044d00007bdd00002000adffe203000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400f400000008000100", @ANYRES32=r4, @ANYBLOB="ec00020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004000100000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000101000008000100", @ANYRES32=r7, @ANYBLOB="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"], 0x38c}, 0x1, 0x0, 0x0, 0x4}, 0xc0) 2018/06/05 23:22:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:02 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:02 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0xffffffffffffffff) r1 = geteuid() getgroups(0x3, &(0x7f0000000000)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff]) fchown(r0, r1, r2) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={&(0x7f0000000080), &(0x7f00000000c0)}}, &(0x7f0000000180)) timer_getoverrun(0x0) socket$nl_generic(0x10, 0x3, 0x10) 2018/06/05 23:22:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000f0000000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x40000000}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:02 executing program 4 (fault-call:3 fault-nth:36): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 314.456221] binder: 18832:18841 ERROR: BC_REGISTER_LOOPER called without request [ 314.467660] binder: 18832:18841 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 314.476082] binder: 18832:18841 got reply transaction with no transaction stack [ 314.483607] binder: 18832:18841 transaction failed 29201/-71, size 0-0 line 2763 [ 314.505956] binder: 18832:18845 ERROR: BC_REGISTER_LOOPER called without request [ 314.546340] FAULT_INJECTION: forcing a failure. 2018/06/05 23:22:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000f0ffffff00270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 314.546340] name failslab, interval 1, probability 0, space 0, times 0 [ 314.557727] CPU: 0 PID: 18847 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 314.564682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 314.568458] binder: undelivered TRANSACTION_ERROR: 29201 [ 314.574050] Call Trace: [ 314.574080] dump_stack+0x1b9/0x294 [ 314.574109] ? dump_stack_print_info.cold.2+0x52/0x52 [ 314.574150] should_fail.cold.4+0xa/0x1a [ 314.595040] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 314.600145] ? ext4_file_write_iter+0x688/0x1420 [ 314.604902] ? __vfs_write+0x64d/0x960 [ 314.608781] ? vfs_write+0x1f8/0x560 [ 314.612486] ? ksys_write+0xf9/0x250 [ 314.616190] ? __x64_sys_write+0x73/0xb0 [ 314.620244] ? do_syscall_64+0x1b1/0x800 [ 314.624315] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.630047] ? graph_lock+0x170/0x170 [ 314.633846] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 314.639388] ? unlock_page+0x1d0/0x2b0 [ 314.643287] ? find_held_lock+0x36/0x1c0 [ 314.647349] ? __lock_is_held+0xb5/0x140 [ 314.651435] ? check_same_owner+0x320/0x320 [ 314.655765] ? rcu_note_context_switch+0x710/0x710 [ 314.660690] ? kmem_cache_free+0x25c/0x2d0 [ 314.669659] __should_failslab+0x124/0x180 [ 314.673897] should_failslab+0x9/0x14 [ 314.677699] kmem_cache_alloc+0x2af/0x760 [ 314.681844] ? tag_pages_for_writeback+0x354/0x460 [ 314.686777] ext4_init_io_end+0x90/0x210 [ 314.690834] ? ext4_end_io_rsv_work+0x8f0/0x8f0 [ 314.695511] ? ext4_io_submit+0x195/0x220 [ 314.699662] ext4_writepages+0x14e1/0x4030 [ 314.703929] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 314.708787] ? perf_trace_lock+0xd6/0x900 [ 314.712939] ? perf_trace_lock+0xd6/0x900 [ 314.717085] ? perf_trace_lock_acquire+0x4f1/0x980 [ 314.722017] ? zap_class+0x720/0x720 [ 314.725742] ? zap_class+0x720/0x720 [ 314.729454] ? perf_trace_lock+0x900/0x900 [ 314.733682] ? perf_trace_lock_acquire+0x4f1/0x980 [ 314.738606] ? graph_lock+0x170/0x170 [ 314.742417] ? graph_lock+0x170/0x170 [ 314.746223] ? perf_trace_lock+0x900/0x900 [ 314.750460] ? find_held_lock+0x36/0x1c0 [ 314.754529] ? lock_downgrade+0x8e0/0x8e0 [ 314.758672] ? lock_downgrade+0x8e0/0x8e0 [ 314.762819] ? do_raw_spin_unlock+0x9e/0x2e0 [ 314.767221] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 314.771826] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 314.777358] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 314.782641] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 314.787399] do_writepages+0x9a/0x1a0 [ 314.791202] ? do_writepages+0x9a/0x1a0 [ 314.795180] __filemap_fdatawrite_range+0x333/0x470 [ 314.800193] ? delete_from_page_cache_batch+0xf70/0xf70 [ 314.805575] file_write_and_wait_range+0x98/0x100 [ 314.810421] ext4_sync_file+0x2ce/0x1470 [ 314.814487] ? ext4_getfsmap+0xd30/0xd30 [ 314.818550] ? add_page_wait_queue+0x2a0/0x2a0 [ 314.823132] ? current_time+0x180/0x180 [ 314.827106] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 314.832123] ? generic_write_checks+0x37d/0x5b0 [ 314.836809] ? up_write+0x72/0x210 [ 314.840344] ? ext4_getfsmap+0xd30/0xd30 [ 314.844404] vfs_fsync_range+0x140/0x220 [ 314.848489] ext4_file_write_iter+0x688/0x1420 [ 314.853087] ? ext4_file_mmap+0x410/0x410 [ 314.857234] ? perf_trace_lock+0x900/0x900 [ 314.861473] ? expand_files.part.8+0x9a0/0x9a0 [ 314.866050] ? graph_lock+0x170/0x170 [ 314.869851] ? proc_fail_nth_write+0x96/0x1f0 [ 314.874356] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 314.879893] ? iov_iter_init+0xc9/0x1f0 [ 314.883870] __vfs_write+0x64d/0x960 [ 314.887594] ? kernel_read+0x120/0x120 [ 314.891484] ? __lock_is_held+0xb5/0x140 [ 314.895559] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 314.901098] ? __sb_start_write+0x17f/0x300 [ 314.905421] vfs_write+0x1f8/0x560 [ 314.908962] ksys_write+0xf9/0x250 [ 314.912499] ? __ia32_sys_read+0xb0/0xb0 [ 314.916562] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 314.922103] __x64_sys_write+0x73/0xb0 [ 314.925988] do_syscall_64+0x1b1/0x800 [ 314.929869] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 314.934710] ? syscall_return_slowpath+0x5c0/0x5c0 [ 314.939635] ? syscall_return_slowpath+0x30f/0x5c0 [ 314.944572] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 314.949939] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 314.954782] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 314.959964] RIP: 0033:0x455a09 [ 314.963141] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 314.982635] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.990339] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 314.997614] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 2018/06/05 23:22:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:02 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:02 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000002c0)={0x0, {{0x2, 0x0, @rand_addr=0x20}}}, 0x88) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000478d081", 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000180)='memory.swap.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=ANY=[], 0x0) [ 315.004884] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 315.012145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 315.019406] R13: 00000000000007b1 R14: 0000000000700938 R15: 0000000000000024 2018/06/05 23:22:02 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="05630440"], 0x1e, 0x0, &(0x7f0000002000)}) r2 = dup2(r1, r0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000c6dfd0)={0x8, 0x0, &(0x7f0000dd0000)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000008f37)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f00000000c0)=[@transaction_sg={0x40486311, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)}}}], 0x0, 0x0, &(0x7f0000000180)}) 2018/06/05 23:22:02 executing program 4 (fault-call:3 fault-nth:37): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 315.274268] Process accounting resumed 2018/06/05 23:22:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000003c700270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 315.342145] binder: 18861:18868 ERROR: BC_REGISTER_LOOPER called without request [ 315.357478] binder: 18861:18868 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 315.365663] binder: 18861:18868 got reply transaction with no transaction stack [ 315.373181] binder: 18861:18868 transaction failed 29201/-71, size 0-0 line 2763 [ 315.383283] binder: 18861:18871 ERROR: BC_REGISTER_LOOPER called without request [ 315.408762] binder: undelivered TRANSACTION_ERROR: 29201 [ 315.430781] Process accounting resumed [ 315.494329] FAULT_INJECTION: forcing a failure. [ 315.494329] name failslab, interval 1, probability 0, space 0, times 0 [ 315.505716] CPU: 1 PID: 18876 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 315.512654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 315.522017] Call Trace: [ 315.524626] dump_stack+0x1b9/0x294 [ 315.528274] ? dump_stack_print_info.cold.2+0x52/0x52 [ 315.533490] ? rcu_is_watching+0x85/0x140 [ 315.537658] ? rcu_report_qs_rnp+0x790/0x790 [ 315.542088] should_fail.cold.4+0xa/0x1a [ 315.546169] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 315.551290] ? kernel_text_address+0x79/0xf0 [ 315.555716] ? __unwind_start+0x166/0x330 [ 315.559939] ? __kernel_text_address+0xd/0x40 [ 315.564453] ? graph_lock+0x170/0x170 [ 315.568278] ? __save_stack_trace+0x7e/0xd0 [ 315.572636] ? __lock_is_held+0xb5/0x140 [ 315.576718] ? save_stack+0x43/0xd0 [ 315.580368] ? vfs_fsync_range+0x140/0x220 [ 315.584623] ? check_same_owner+0x320/0x320 [ 315.590099] ? rcu_note_context_switch+0x710/0x710 [ 315.595058] __should_failslab+0x124/0x180 [ 315.599317] should_failslab+0x9/0x14 [ 315.603136] kmem_cache_alloc+0x2af/0x760 [ 315.607308] jbd2__journal_start+0x1d3/0xa70 [ 315.611738] ? jbd2_write_access_granted.part.8+0x420/0x420 [ 315.617475] ? rcu_note_context_switch+0x710/0x710 [ 315.622429] ? __might_sleep+0x95/0x190 [ 315.626440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.631995] __ext4_journal_start_sb+0x17a/0x5e0 [ 315.636768] ? ext4_writepages+0x17dd/0x4030 [ 315.641198] ? ext4_journal_abort_handle.isra.4+0x260/0x260 [ 315.646932] ? ext4_ind_trans_blocks+0x12/0x80 [ 315.651528] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.657069] ? ext4_meta_trans_blocks+0x25f/0x310 [ 315.661914] ext4_writepages+0x17dd/0x4030 [ 315.666157] ? trace_hardirqs_off+0xd/0x10 [ 315.670392] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 315.675148] ? perf_trace_lock_acquire+0xe3/0x980 [ 315.679989] ? perf_trace_lock+0x900/0x900 [ 315.684224] ? graph_lock+0x170/0x170 [ 315.688033] ? graph_lock+0x170/0x170 [ 315.691835] ? perf_trace_lock+0x900/0x900 [ 315.696069] ? find_held_lock+0x36/0x1c0 [ 315.700122] ? lock_downgrade+0x8e0/0x8e0 [ 315.704263] ? lock_downgrade+0x8e0/0x8e0 [ 315.708415] ? do_raw_spin_unlock+0x9e/0x2e0 [ 315.712820] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 315.717408] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 315.722942] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 315.728208] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 315.732955] do_writepages+0x9a/0x1a0 [ 315.736739] ? do_writepages+0x9a/0x1a0 [ 315.740701] __filemap_fdatawrite_range+0x333/0x470 [ 315.745711] ? delete_from_page_cache_batch+0xf70/0xf70 [ 315.751088] file_write_and_wait_range+0x98/0x100 [ 315.755928] ext4_sync_file+0x2ce/0x1470 [ 315.759991] ? ext4_getfsmap+0xd30/0xd30 [ 315.764053] ? add_page_wait_queue+0x2a0/0x2a0 [ 315.768636] ? current_time+0x180/0x180 [ 315.772609] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 315.777610] ? generic_write_checks+0x37d/0x5b0 [ 315.782269] ? up_write+0x72/0x210 [ 315.785799] ? ext4_getfsmap+0xd30/0xd30 [ 315.789854] vfs_fsync_range+0x140/0x220 [ 315.793912] ext4_file_write_iter+0x688/0x1420 [ 315.798480] ? kasan_check_read+0x11/0x20 [ 315.802614] ? rcu_is_watching+0x85/0x140 [ 315.806776] ? ext4_file_mmap+0x410/0x410 [ 315.810934] ? perf_trace_lock+0x900/0x900 [ 315.815166] ? expand_files.part.8+0x9a0/0x9a0 [ 315.819734] ? graph_lock+0x170/0x170 [ 315.823531] ? proc_fail_nth_write+0x96/0x1f0 [ 315.828017] ? proc_cwd_link+0x1d0/0x1d0 [ 315.832088] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 315.837631] ? iov_iter_init+0xc9/0x1f0 [ 315.841592] __vfs_write+0x64d/0x960 [ 315.845307] ? kernel_read+0x120/0x120 [ 315.849190] ? __lock_is_held+0xb5/0x140 [ 315.853244] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 315.858768] ? __sb_start_write+0x17f/0x300 [ 315.863089] vfs_write+0x1f8/0x560 [ 315.866633] ksys_write+0xf9/0x250 [ 315.870170] ? __ia32_sys_read+0xb0/0xb0 [ 315.874229] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 315.879756] __x64_sys_write+0x73/0xb0 [ 315.883640] do_syscall_64+0x1b1/0x800 [ 315.887691] ? syscall_return_slowpath+0x5c0/0x5c0 [ 315.892608] ? syscall_return_slowpath+0x30f/0x5c0 [ 315.897536] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 315.902891] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 315.907736] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 315.912917] RIP: 0033:0x455a09 [ 315.916095] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 315.935416] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.943118] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 315.950377] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 315.957642] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 315.964900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 315.972161] R13: 00000000000007b1 R14: 0000000000700938 R15: 0000000000000025 [ 315.979601] EXT4-fs (sda1): ext4_writepages: jbd2_start: 9223372036854775807 pages, ino 16532; err -12 [ 316.159271] binder: 18863:18870 got transaction to invalid handle [ 316.165629] binder: 18863:18870 transaction failed 29201/-22, size 0-0 line 2856 [ 316.174767] binder: BINDER_SET_CONTEXT_MGR already set [ 316.180891] binder: 18863:18870 ioctl 40046207 0 returned -16 [ 316.188636] binder: BINDER_SET_CONTEXT_MGR already set [ 316.194406] binder: 18863:18870 ioctl 40046207 0 returned -16 2018/06/05 23:22:03 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:03 executing program 5: socket$kcm(0x29, 0x7, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000300)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r3 = socket$inet6(0xa, 0xb, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@loopback=0x7f000001, 0x0, 0x100000000003c}, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}, 0x0, 0xfffffffffffffffc, 0x0, 0x3}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/06/05 23:22:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800007fffffff00270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c6530ff") 2018/06/05 23:22:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendmsg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r2 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000000)=0x80, 0x80000) getsockopt$inet_buf(r2, 0x0, 0x3f, &(0x7f0000000140)=""/58, &(0x7f0000000180)=0x3a) r3 = socket$inet(0x2, 0x2, 0x0) r4 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000280)="979ba119509815a5467f27b2e5e8d25ebd6a689e96bb4f242b9cd396156cb783bada8bc97a228b877ac36383af427525c9086b8de4321c4c7e2837beb7789a60e08f7262e913b5b89184039eb01e360dba809998a7680f57996c8a5b75c68e16e79df8dab936690b1a7551661997dd8a19dad48242ae1dc10c0a1a99cba211a4edb1c1b3f7d23488bbbf4817c14a1d39f6d852c8e0f0fbc94e71db07328206f629903fa583f716d0a78ed0aab9168f6359221933daffe079bef85d4425bd97a2d56dee8c0b0a5ee76dac", 0xca, 0xfffffffffffffffc) r5 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000400)="17ac724d0aab9b32ab297d3ee4b9b7dd842e240326fc6434a02f3c1e83090da46426faf7c162e8f26bb288c83fa063573364a87c7030d040b769354baf76a8c6ecaf3c33fc1f458a27451c1ec25ff861d6b9c1fa12f342a774487db2019f77bf22a6d4dc36bfb67403e461ebb4fd82414ddb6267afc86bf2c84b65d5b9fb36848a2a7b95fa1b", 0x86, 0xfffffffffffffffc) r6 = add_key$user(&(0x7f00000004c0)='user\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000540)="050effdd9494b7a52ab7315b3831d8b8a171cc196d9dc6d6784b17db1d86a99317931f1f507307cff2f3163837fa6eac7498589418c62d1175d39932ba58834f0cba1912f7538cd2aecfb43a60dc14d2e0e208faa85943701d06dce95b883fbad8fad53294985ece5518e75a5cbabdd73a4ad7779d8aa747df9f1645ceea750ec0f14df71482f32644545bd3f91c3d18db43229472b0f5073bd77bcbe33193c3219728b0d55930797dba9cbf05b1a251f06251cdf83aebb91684d843518231f7a59722f2f5a77aa89ac20ce5f38bf7b67d6e2ad2c7c73c0ee15424f00f0ffcbd51cfada73fceb5e72179cd978d573246630d0c18e37a", 0xf6, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000640)={r4, r5, r6}, &(0x7f0000000680)=""/78, 0x4e, &(0x7f0000001740)={&(0x7f0000000700)={'sha3-224-generic\x00'}, &(0x7f0000000740)="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", 0x1000}) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000080)={@multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0xd}}, 0xc) r7 = socket$inet(0x2, 0x7fd, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0xd}, @rand_addr}, 0xc) ppoll(&(0x7f0000001780)=[{r2, 0x11}, {r2, 0x140}], 0x2, &(0x7f00000017c0)={0x77359400}, &(0x7f0000001800)={0x3e4}, 0x8) close(r3) 2018/06/05 23:22:03 executing program 4 (fault-call:3 fault-nth:38): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) [ 316.209366] binder: undelivered TRANSACTION_ERROR: 29201 [ 316.264100] binder: 18894:18899 ERROR: BC_REGISTER_LOOPER called without request [ 316.291535] binder: 18894:18899 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 316.299941] binder: 18894:18899 got reply transaction with no transaction stack 2018/06/05 23:22:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000fffff00000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:04 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x5, 0x0, 0x0, {0x1}, [@generic="7b6c6e660f"]}, 0x1c}, 0x1}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 2018/06/05 23:22:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 316.307471] binder: 18894:18899 transaction failed 29201/-71, size 0-0 line 2763 [ 316.324219] binder: 18894:18907 ERROR: BC_REGISTER_LOOPER called without request [ 316.335247] FAULT_INJECTION: forcing a failure. [ 316.335247] name failslab, interval 1, probability 0, space 0, times 0 [ 316.347147] CPU: 0 PID: 18902 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 316.353804] binder: undelivered TRANSACTION_ERROR: 29201 [ 316.354090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 316.369033] Call Trace: [ 316.371636] dump_stack+0x1b9/0x294 [ 316.375271] ? dump_stack_print_info.cold.2+0x52/0x52 [ 316.380466] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.386051] ? perf_tp_event+0x91f/0xc30 [ 316.390141] should_fail.cold.4+0xa/0x1a [ 316.394217] ? tracing_generic_entry_update+0x18e/0x200 [ 316.399595] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 316.404700] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.410238] ? perf_tp_event+0x91f/0xc30 [ 316.414319] ? graph_lock+0x170/0x170 [ 316.418138] ? perf_swevent_event+0x2e0/0x2e0 [ 316.422630] ? graph_lock+0x170/0x170 [ 316.426527] ? perf_tp_event+0x91f/0xc30 [ 316.430612] ? __lock_is_held+0xb5/0x140 [ 316.434683] ? check_same_owner+0x320/0x320 [ 316.439032] ? rcu_note_context_switch+0x710/0x710 [ 316.443985] __should_failslab+0x124/0x180 [ 316.448225] should_failslab+0x9/0x14 [ 316.452043] kmem_cache_alloc+0x2af/0x760 [ 316.456210] ext4_mb_new_blocks+0x773/0x4730 [ 316.460619] ? mark_held_locks+0xc9/0x160 [ 316.464765] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.470303] ? tracing_generic_entry_update+0x18e/0x200 [ 316.475677] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.481214] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.486751] ? debug_check_no_locks_freed+0x310/0x310 [ 316.491938] ? ext4_discard_preallocations+0x13b0/0x13b0 [ 316.497413] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.502951] ? tracing_generic_entry_update+0x18e/0x200 [ 316.508317] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.513859] ? perf_swevent_event+0x158/0x2e0 [ 316.518369] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.523910] ? perf_tp_event+0x91f/0xc30 [ 316.527992] ? perf_trace_lock_acquire+0x4f1/0x980 [ 316.532942] ? perf_swevent_event+0x2e0/0x2e0 [ 316.537466] ? graph_lock+0x170/0x170 [ 316.541275] ? perf_trace_run_bpf_submit+0x23f/0x370 [ 316.546392] ? print_usage_bug+0xc0/0xc0 [ 316.550461] ? release_pages+0x7b4/0x14b0 [ 316.554619] ? print_usage_bug+0xc0/0xc0 [ 316.558686] ? graph_lock+0x170/0x170 [ 316.562494] ? __lock_acquire+0x7f5/0x5140 [ 316.566721] ? wait_on_page_bit+0x650/0x650 [ 316.571064] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.576616] ? ext4_get_branch+0x421/0x570 [ 316.580846] ? ext4_block_to_path.isra.6+0xe2/0x510 [ 316.585862] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.591401] ? ext4_inode_to_goal_block+0x2e3/0x3f0 [ 316.596416] ext4_ind_map_blocks+0x1744/0x32e0 [ 316.601022] ? ext4_free_branches+0xb30/0xb30 [ 316.605541] ? perf_trace_lock+0x900/0x900 [ 316.609768] ? find_held_lock+0x36/0x1c0 [ 316.613851] ? graph_lock+0x170/0x170 [ 316.617677] ? lock_acquire+0x1dc/0x520 [ 316.621652] ? ext4_map_blocks+0x871/0x1b40 [ 316.625993] ? lock_release+0xa10/0xa10 [ 316.629969] ? ext4_es_cache_extent+0x6d0/0x6d0 [ 316.634636] ? rcu_note_context_switch+0x710/0x710 [ 316.639584] ? __might_sleep+0x95/0x190 [ 316.643575] ? down_write+0x87/0x120 [ 316.647283] ? ext4_map_blocks+0x871/0x1b40 [ 316.651610] ? down_read+0x1b0/0x1b0 [ 316.655340] ? graph_lock+0x170/0x170 [ 316.659138] ext4_map_blocks+0xe9e/0x1b40 [ 316.663298] ? ext4_issue_zeroout+0x190/0x190 [ 316.667797] ? __lock_is_held+0xb5/0x140 [ 316.671870] ext4_writepages+0x2494/0x4030 [ 316.676124] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 316.680881] ? perf_trace_lock_acquire+0x4f1/0x980 [ 316.685816] ? perf_trace_lock+0x900/0x900 [ 316.690057] ? perf_trace_lock_acquire+0x4f1/0x980 [ 316.694992] ? graph_lock+0x170/0x170 [ 316.698797] ? graph_lock+0x170/0x170 [ 316.702592] ? perf_trace_lock+0x900/0x900 [ 316.706833] ? find_held_lock+0x36/0x1c0 [ 316.710898] ? lock_downgrade+0x8e0/0x8e0 [ 316.715049] ? lock_downgrade+0x8e0/0x8e0 [ 316.719206] ? do_raw_spin_unlock+0x9e/0x2e0 [ 316.723626] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 316.728216] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.733757] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 316.739052] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 316.743823] do_writepages+0x9a/0x1a0 [ 316.747620] ? do_writepages+0x9a/0x1a0 [ 316.751593] __filemap_fdatawrite_range+0x333/0x470 [ 316.756613] ? delete_from_page_cache_batch+0xf70/0xf70 [ 316.761984] file_write_and_wait_range+0x98/0x100 [ 316.766827] ext4_sync_file+0x2ce/0x1470 [ 316.770887] ? ext4_getfsmap+0xd30/0xd30 [ 316.774944] ? add_page_wait_queue+0x2a0/0x2a0 [ 316.779528] ? current_time+0x180/0x180 [ 316.783511] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 316.788532] ? generic_write_checks+0x37d/0x5b0 [ 316.793199] ? up_write+0x72/0x210 [ 316.796737] ? ext4_getfsmap+0xd30/0xd30 [ 316.800790] vfs_fsync_range+0x140/0x220 [ 316.804856] ext4_file_write_iter+0x688/0x1420 [ 316.809438] ? ext4_file_mmap+0x410/0x410 [ 316.813581] ? perf_trace_lock+0x900/0x900 [ 316.817813] ? expand_files.part.8+0x9a0/0x9a0 [ 316.822387] ? graph_lock+0x170/0x170 [ 316.826197] ? proc_fail_nth_write+0x96/0x1f0 [ 316.830701] ? proc_cwd_link+0x1d0/0x1d0 [ 316.834774] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 316.840308] ? iov_iter_init+0xc9/0x1f0 [ 316.844301] __vfs_write+0x64d/0x960 [ 316.848019] ? kernel_read+0x120/0x120 [ 316.851914] ? __lock_is_held+0xb5/0x140 [ 316.855994] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 316.861531] ? __sb_start_write+0x17f/0x300 [ 316.865846] vfs_write+0x1f8/0x560 [ 316.869381] ksys_write+0xf9/0x250 [ 316.872927] ? __ia32_sys_read+0xb0/0xb0 [ 316.876992] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 316.882541] __x64_sys_write+0x73/0xb0 [ 316.886422] do_syscall_64+0x1b1/0x800 [ 316.890315] ? finish_task_switch+0x1ca/0x840 [ 316.894803] ? syscall_return_slowpath+0x5c0/0x5c0 [ 316.899727] ? syscall_return_slowpath+0x30f/0x5c0 [ 316.904660] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 316.910051] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 316.914895] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 316.920076] RIP: 0033:0x455a09 [ 316.923257] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 316.942653] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 316.950362] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 316.957626] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 316.964888] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 316.972151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 316.979410] R13: 00000000000007b1 R14: 0000000000700938 R15: 0000000000000026 2018/06/05 23:22:04 executing program 4 (fault-call:3 fault-nth:39): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 317.188592] Process accounting resumed 2018/06/05 23:22:04 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000200000000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 317.243891] Process accounting resumed [ 317.250639] binder: 18919:18923 ERROR: BC_REGISTER_LOOPER called without request [ 317.258934] binder: 18919:18923 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 317.267126] binder: 18919:18923 got reply transaction with no transaction stack [ 317.274662] binder: 18919:18923 transaction failed 29201/-71, size 0-0 line 2763 [ 317.285296] binder: 18919:18925 ERROR: BC_REGISTER_LOOPER called without request [ 317.315285] binder: undelivered TRANSACTION_ERROR: 29201 [ 317.408048] FAULT_INJECTION: forcing a failure. [ 317.408048] name failslab, interval 1, probability 0, space 0, times 0 [ 317.420303] CPU: 0 PID: 18931 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 317.427265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 317.436627] Call Trace: [ 317.439243] dump_stack+0x1b9/0x294 [ 317.442877] ? dump_stack_print_info.cold.2+0x52/0x52 [ 317.448077] ? __lock_acquire+0x7f5/0x5140 [ 317.452336] should_fail.cold.4+0xa/0x1a [ 317.456403] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 317.461516] ? debug_check_no_locks_freed+0x310/0x310 [ 317.466724] ? ext4_dirty_inode+0x97/0xc0 [ 317.470891] ? perf_tp_event+0xc30/0xc30 [ 317.474945] ? __might_sleep+0x95/0x190 [ 317.478940] ? graph_lock+0x170/0x170 [ 317.482763] ? memset+0x31/0x40 [ 317.486057] ? perf_trace_lock_acquire+0x4f1/0x980 [ 317.491012] ? perf_trace_lock+0x900/0x900 [ 317.495261] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 317.500274] ? __mark_inode_dirty+0x499/0x1530 [ 317.504869] __should_failslab+0x124/0x180 [ 317.509106] should_failslab+0x9/0x14 [ 317.512901] kmem_cache_alloc+0x47/0x760 [ 317.516974] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 317.521995] ? ext4_es_can_be_merged+0x238/0x2a0 [ 317.526774] __es_insert_extent+0x2fd/0x1130 [ 317.531203] ? ext4_es_free_extent+0x800/0x800 [ 317.535796] ? lock_release+0xa10/0xa10 [ 317.539779] ? __lock_is_held+0xb5/0x140 [ 317.543867] ? kasan_check_write+0x14/0x20 [ 317.548100] ? do_raw_write_lock+0xbd/0x1b0 [ 317.552442] ext4_es_insert_extent+0x2d9/0x7c0 [ 317.557054] ? ext4_es_find_delayed_extent_range+0xd70/0xd70 [ 317.562854] ? ext4_get_reserved_space+0x20/0x20 [ 317.567629] ? down_write+0x87/0x120 [ 317.571346] ? ext4_map_blocks+0x871/0x1b40 [ 317.575670] ? graph_lock+0x170/0x170 [ 317.579485] ext4_map_blocks+0xaee/0x1b40 [ 317.583633] ? ext4_issue_zeroout+0x190/0x190 [ 317.588126] ? __lock_is_held+0xb5/0x140 [ 317.592226] ext4_writepages+0x2494/0x4030 [ 317.596485] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 317.601258] ? perf_trace_lock_acquire+0x4f1/0x980 [ 317.606224] ? perf_trace_lock+0x900/0x900 [ 317.610467] ? perf_trace_lock_acquire+0x4f1/0x980 [ 317.615392] ? graph_lock+0x170/0x170 [ 317.619186] ? graph_lock+0x170/0x170 [ 317.622986] ? perf_trace_lock+0x900/0x900 [ 317.627220] ? find_held_lock+0x36/0x1c0 [ 317.631297] ? lock_downgrade+0x8e0/0x8e0 [ 317.635445] ? lock_downgrade+0x8e0/0x8e0 [ 317.639622] ? do_raw_spin_unlock+0x9e/0x2e0 [ 317.644048] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 317.648647] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 317.654184] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 317.659458] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 317.664223] do_writepages+0x9a/0x1a0 [ 317.668023] ? do_writepages+0x9a/0x1a0 [ 317.672013] __filemap_fdatawrite_range+0x333/0x470 [ 317.677050] ? delete_from_page_cache_batch+0xf70/0xf70 [ 317.682438] file_write_and_wait_range+0x98/0x100 [ 317.687281] ext4_sync_file+0x2ce/0x1470 [ 317.691341] ? ext4_getfsmap+0xd30/0xd30 [ 317.695395] ? add_page_wait_queue+0x2a0/0x2a0 [ 317.699977] ? current_time+0x180/0x180 [ 317.703950] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 317.708969] ? generic_write_checks+0x37d/0x5b0 [ 317.713636] ? up_write+0x72/0x210 [ 317.717172] ? ext4_getfsmap+0xd30/0xd30 [ 317.721227] vfs_fsync_range+0x140/0x220 [ 317.725308] ext4_file_write_iter+0x688/0x1420 [ 317.729891] ? kasan_check_read+0x11/0x20 [ 317.734050] ? rcu_is_watching+0x85/0x140 [ 317.738208] ? ext4_file_mmap+0x410/0x410 [ 317.742363] ? perf_trace_lock+0x900/0x900 [ 317.746607] ? expand_files.part.8+0x9a0/0x9a0 [ 317.751206] ? graph_lock+0x170/0x170 [ 317.755662] ? proc_fail_nth_write+0x96/0x1f0 [ 317.760156] ? proc_cwd_link+0x1d0/0x1d0 [ 317.764214] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 317.769744] ? iov_iter_init+0xc9/0x1f0 [ 317.773717] __vfs_write+0x64d/0x960 [ 317.777439] ? kernel_read+0x120/0x120 [ 317.781327] ? __lock_is_held+0xb5/0x140 [ 317.785395] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 317.790922] ? __sb_start_write+0x17f/0x300 [ 317.795237] vfs_write+0x1f8/0x560 [ 317.798784] ksys_write+0xf9/0x250 [ 317.802330] ? __ia32_sys_read+0xb0/0xb0 [ 317.806394] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 317.811929] __x64_sys_write+0x73/0xb0 [ 317.815810] do_syscall_64+0x1b1/0x800 [ 317.819692] ? syscall_return_slowpath+0x5c0/0x5c0 [ 317.824614] ? syscall_return_slowpath+0x30f/0x5c0 [ 317.829546] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 317.834905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 317.839764] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 317.844960] RIP: 0033:0x455a09 [ 317.848157] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 317.867577] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 317.875298] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 317.882563] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 317.889833] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 317.897097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 317.904371] R13: 00000000000007b1 R14: 0000000000700938 R15: 0000000000000027 [ 318.853100] Process accounting resumed 2018/06/05 23:22:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x807e020000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000640)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0x14, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x14}, 0x1}, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x1c, 0x28, 0x5, 0x0, 0x0, {0x1}, [@generic="7b6c6e660f"]}, 0x1c}, 0x1}, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0xc) 2018/06/05 23:22:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c653004") 2018/06/05 23:22:06 executing program 4 (fault-call:3 fault-nth:40): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4000}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:06 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800009effffff00270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:06 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x80800) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="7f00060000000300040900010051f9dd7ba5c7d3c6d8fd10ca82c8e4d2d74c4d92f9aaaf7082f6102d18caffd8fa861968c7a726239bf88d6db0c460dc7813c5fe16db667ceef353d28e3b6d61150b8274dea3bf807dd596093f2f10d7dff6b320645fd6489e7d0e78f395e3c4004cb2a51a8fd5ef8b18186bc49296ac3745cf5c89bffaf446ef22bb9235bd60c2f70e58cbfea6773f9c04064055a0586304b226b800000000000000000000000000"], &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1}, 0x8) [ 319.012546] Process accounting resumed 2018/06/05 23:22:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000ffffff9e00270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:06 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:06 executing program 7: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x5, 0x200000) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000100)={0x1, 0x4, 0x0, 0x2}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 319.079441] binder: 18953:18967 ERROR: BC_REGISTER_LOOPER called without request [ 319.101573] FAULT_INJECTION: forcing a failure. [ 319.101573] name failslab, interval 1, probability 0, space 0, times 0 [ 319.113359] CPU: 1 PID: 18965 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 319.120294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2018/06/05 23:22:06 executing program 5: seccomp(0x1, 0x1, &(0x7f00000000c0)={0x0, &(0x7f00000b3000)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) timer_create(0x4, &(0x7f0000000040)={0x0, 0x0, 0x6}, &(0x7f0000000000)=0x0) exit(0xfffffffffffff03c) timer_delete(r0) [ 319.129652] Call Trace: [ 319.132251] dump_stack+0x1b9/0x294 [ 319.135905] ? dump_stack_print_info.cold.2+0x52/0x52 [ 319.141115] should_fail.cold.4+0xa/0x1a [ 319.145179] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 319.150273] ? trace_hardirqs_off+0xd/0x10 [ 319.154507] ? find_held_lock+0x36/0x1c0 [ 319.158575] ? lock_downgrade+0x8e0/0x8e0 [ 319.162708] ? graph_lock+0x170/0x170 [ 319.166506] ? kasan_check_read+0x11/0x20 [ 319.170648] ? rcu_report_qs_rnp+0x790/0x790 [ 319.175061] ? __lock_is_held+0xb5/0x140 [ 319.179168] __should_failslab+0x124/0x180 [ 319.183415] should_failslab+0x9/0x14 [ 319.187212] kmem_cache_alloc+0x47/0x760 [ 319.191266] ? rcu_note_context_switch+0x710/0x710 [ 319.196189] ? mempool_free+0x370/0x370 [ 319.200152] mempool_alloc_slab+0x44/0x60 [ 319.204391] mempool_alloc+0x18b/0x490 [ 319.208279] ? mempool_destroy+0x30/0x30 [ 319.212328] ? lock_downgrade+0x8e0/0x8e0 [ 319.216465] ? kasan_check_read+0x11/0x20 [ 319.220610] ? rcu_is_watching+0x85/0x140 [ 319.224745] ? rcu_report_qs_rnp+0x790/0x790 [ 319.229153] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 319.234176] bio_alloc_bioset+0x384/0x6d0 [ 319.238313] ? clear_page_dirty_for_io+0x383/0x1200 [ 319.243336] ? bvec_alloc+0x2d0/0x2d0 [ 319.247162] ? balance_dirty_pages_ratelimited+0x1f50/0x1f50 [ 319.252966] ext4_bio_write_page+0xb09/0x1565 [ 319.257452] ? ext4_io_submit_init+0x90/0x90 [ 319.261848] ? do_raw_spin_unlock+0x9e/0x2e0 [ 319.266243] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 319.270812] ? kasan_check_write+0x14/0x20 [ 319.275046] mpage_submit_page+0x15d/0x270 [ 319.279283] mpage_map_and_submit_buffers+0x52e/0x9b0 [ 319.284467] ? mpage_process_page_bufs+0x600/0x600 [ 319.289393] ext4_writepages+0x262b/0x4030 [ 319.293628] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 319.298378] ? perf_trace_lock_acquire+0xe3/0x980 [ 319.303209] ? perf_trace_lock+0x900/0x900 [ 319.307428] ? graph_lock+0x170/0x170 [ 319.311309] ? graph_lock+0x170/0x170 [ 319.315189] ? perf_trace_lock+0x900/0x900 [ 319.319411] ? find_held_lock+0x36/0x1c0 [ 319.323463] ? lock_downgrade+0x8e0/0x8e0 [ 319.327599] ? lock_downgrade+0x8e0/0x8e0 [ 319.331733] ? do_raw_spin_unlock+0x9e/0x2e0 [ 319.336124] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 319.340697] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.346228] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 319.351493] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 319.356236] do_writepages+0x9a/0x1a0 [ 319.360028] ? do_writepages+0x9a/0x1a0 [ 319.364000] __filemap_fdatawrite_range+0x333/0x470 [ 319.369015] ? delete_from_page_cache_batch+0xf70/0xf70 [ 319.374412] file_write_and_wait_range+0x98/0x100 [ 319.379252] ext4_sync_file+0x2ce/0x1470 [ 319.383303] ? ext4_getfsmap+0xd30/0xd30 [ 319.387361] ? add_page_wait_queue+0x2a0/0x2a0 [ 319.391945] ? current_time+0x180/0x180 [ 319.395922] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 319.400937] ? generic_write_checks+0x37d/0x5b0 [ 319.405604] ? up_write+0x72/0x210 [ 319.409134] ? ext4_getfsmap+0xd30/0xd30 [ 319.413194] vfs_fsync_range+0x140/0x220 [ 319.417245] ext4_file_write_iter+0x688/0x1420 [ 319.421811] ? kasan_check_read+0x11/0x20 [ 319.425947] ? rcu_is_watching+0x85/0x140 [ 319.430093] ? ext4_file_mmap+0x410/0x410 [ 319.434228] ? perf_trace_lock+0x900/0x900 [ 319.438452] ? expand_files.part.8+0x9a0/0x9a0 [ 319.443030] ? graph_lock+0x170/0x170 [ 319.446834] ? proc_fail_nth_write+0x96/0x1f0 [ 319.451317] ? proc_cwd_link+0x1d0/0x1d0 [ 319.455368] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 319.460906] ? iov_iter_init+0xc9/0x1f0 [ 319.464877] __vfs_write+0x64d/0x960 [ 319.468587] ? kernel_read+0x120/0x120 [ 319.472471] ? __lock_is_held+0xb5/0x140 [ 319.476529] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 319.482060] ? __sb_start_write+0x17f/0x300 [ 319.486371] vfs_write+0x1f8/0x560 [ 319.489895] ksys_write+0xf9/0x250 [ 319.493419] ? __ia32_sys_read+0xb0/0xb0 [ 319.497477] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 319.502324] __x64_sys_write+0x73/0xb0 [ 319.506219] do_syscall_64+0x1b1/0x800 [ 319.510122] ? finish_task_switch+0x1ca/0x840 [ 319.514604] ? syscall_return_slowpath+0x5c0/0x5c0 [ 319.519534] ? syscall_return_slowpath+0x30f/0x5c0 [ 319.524457] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 319.529808] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 319.534654] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 319.539831] RIP: 0033:0x455a09 [ 319.543011] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 319.562236] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.569932] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 319.577189] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 319.584444] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 319.592509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 319.599775] R13: 00000000000007b1 R14: 0000000000700938 R15: 0000000000000028 [ 319.608915] binder: 18953:18967 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 319.617065] binder: 18953:18967 got reply transaction with no transaction stack [ 319.624593] binder: 18953:18967 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:22:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:07 executing program 4 (fault-call:3 fault-nth:41): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 319.634232] binder: 18953:18968 ERROR: BC_REGISTER_LOOPER called without request [ 319.670974] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000f0ffffff270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:07 executing program 7: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000080)=""/110) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a", 0x4) 2018/06/05 23:22:07 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 319.830612] binder: 18986:18989 ERROR: BC_REGISTER_LOOPER called without request [ 319.838842] binder: 18986:18989 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 319.846991] binder: 18986:18989 got reply transaction with no transaction stack [ 319.854509] binder: 18986:18989 transaction failed 29201/-71, size 0-0 line 2763 [ 319.864279] binder: 18986:18991 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 319.907463] binder: undelivered TRANSACTION_ERROR: 29201 [ 319.917511] FAULT_INJECTION: forcing a failure. [ 319.917511] name failslab, interval 1, probability 0, space 0, times 0 [ 319.928919] CPU: 0 PID: 18990 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 319.935862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 319.945222] Call Trace: [ 319.947809] dump_stack+0x1b9/0x294 [ 319.951452] ? dump_stack_print_info.cold.2+0x52/0x52 [ 319.956657] ? __kernel_text_address+0xd/0x40 [ 319.961177] ? unwind_get_return_address+0x61/0xa0 [ 319.966124] should_fail.cold.4+0xa/0x1a [ 319.970186] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 319.975300] ? save_stack+0xa9/0xd0 [ 319.978934] ? kasan_kmalloc+0xc4/0xe0 [ 319.982828] ? kasan_slab_alloc+0x12/0x20 [ 319.986973] ? kmem_cache_alloc+0x12e/0x760 [ 319.991291] ? mempool_alloc_slab+0x44/0x60 [ 319.995611] ? mempool_alloc+0x18b/0x490 [ 319.999684] ? bio_alloc_bioset+0x384/0x6d0 [ 320.004022] ? ext4_bio_write_page+0xb09/0x1565 [ 320.008692] ? mpage_submit_page+0x15d/0x270 [ 320.013105] ? mpage_map_and_submit_buffers+0x52e/0x9b0 [ 320.018475] ? ext4_writepages+0x262b/0x4030 [ 320.022874] ? do_writepages+0x9a/0x1a0 [ 320.026855] ? __filemap_fdatawrite_range+0x333/0x470 [ 320.032048] ? file_write_and_wait_range+0x98/0x100 [ 320.037066] ? ext4_sync_file+0x2ce/0x1470 [ 320.041301] ? vfs_fsync_range+0x140/0x220 [ 320.045538] ? ext4_file_write_iter+0x688/0x1420 [ 320.050290] ? __vfs_write+0x64d/0x960 [ 320.054173] ? vfs_write+0x1f8/0x560 [ 320.057896] ? ksys_write+0xf9/0x250 [ 320.061598] ? __x64_sys_write+0x73/0xb0 [ 320.065660] ? graph_lock+0x170/0x170 [ 320.069455] ? print_usage_bug+0xc0/0xc0 [ 320.073510] ? graph_lock+0x170/0x170 [ 320.077318] ? graph_lock+0x170/0x170 [ 320.081136] ? kasan_check_read+0x11/0x20 [ 320.085302] ? __lock_is_held+0xb5/0x140 [ 320.089455] __should_failslab+0x124/0x180 [ 320.093693] should_failslab+0x9/0x14 [ 320.097490] kmem_cache_alloc+0x47/0x760 [ 320.101541] ? rcu_note_context_switch+0x710/0x710 [ 320.106457] ? rcu_read_lock_sched_held+0x108/0x120 [ 320.111465] ? mempool_free+0x370/0x370 [ 320.115440] mempool_alloc_slab+0x44/0x60 [ 320.119585] mempool_alloc+0x18b/0x490 [ 320.123468] ? mempool_destroy+0x30/0x30 [ 320.127518] ? kasan_check_write+0x14/0x20 [ 320.131742] ? bio_init+0x138/0x250 [ 320.135363] ? bio_add_page+0x3b0/0x3b0 [ 320.139334] ? kasan_check_read+0x11/0x20 [ 320.143476] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 320.148665] bvec_alloc+0x12a/0x2d0 [ 320.152294] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 320.157303] bio_alloc_bioset+0x455/0x6d0 [ 320.161462] ? bvec_alloc+0x2d0/0x2d0 [ 320.165268] ? balance_dirty_pages_ratelimited+0x1f50/0x1f50 [ 320.171077] ext4_bio_write_page+0xb09/0x1565 [ 320.175602] ? ext4_io_submit_init+0x90/0x90 [ 320.180027] ? do_raw_spin_unlock+0x9e/0x2e0 [ 320.184447] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 320.189048] ? kasan_check_write+0x14/0x20 [ 320.193311] mpage_submit_page+0x15d/0x270 [ 320.197575] mpage_map_and_submit_buffers+0x52e/0x9b0 [ 320.202779] ? mpage_process_page_bufs+0x600/0x600 [ 320.207764] ext4_writepages+0x262b/0x4030 [ 320.212058] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 320.216814] ? perf_trace_lock_acquire+0x4f1/0x980 [ 320.221754] ? perf_trace_lock+0x900/0x900 [ 320.225991] ? perf_trace_lock_acquire+0x4f1/0x980 [ 320.230929] ? graph_lock+0x170/0x170 [ 320.234735] ? graph_lock+0x170/0x170 [ 320.238530] ? perf_trace_lock+0x900/0x900 [ 320.242792] ? find_held_lock+0x36/0x1c0 [ 320.246865] ? lock_downgrade+0x8e0/0x8e0 [ 320.251017] ? lock_downgrade+0x8e0/0x8e0 [ 320.255174] ? do_raw_spin_unlock+0x9e/0x2e0 [ 320.259576] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 320.264181] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.269715] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 320.274989] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 320.279752] do_writepages+0x9a/0x1a0 [ 320.283547] ? do_writepages+0x9a/0x1a0 [ 320.287542] __filemap_fdatawrite_range+0x333/0x470 [ 320.292568] ? delete_from_page_cache_batch+0xf70/0xf70 [ 320.297969] file_write_and_wait_range+0x98/0x100 [ 320.302824] ext4_sync_file+0x2ce/0x1470 [ 320.306885] ? ext4_getfsmap+0xd30/0xd30 [ 320.310951] ? add_page_wait_queue+0x2a0/0x2a0 [ 320.315533] ? current_time+0x180/0x180 [ 320.319515] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 320.324533] ? generic_write_checks+0x37d/0x5b0 [ 320.329204] ? up_write+0x72/0x210 [ 320.332744] ? ext4_getfsmap+0xd30/0xd30 [ 320.336799] vfs_fsync_range+0x140/0x220 [ 320.340872] ext4_file_write_iter+0x688/0x1420 [ 320.345471] ? ext4_file_mmap+0x410/0x410 [ 320.349629] ? perf_trace_lock+0x900/0x900 [ 320.353872] ? expand_files.part.8+0x9a0/0x9a0 [ 320.358449] ? graph_lock+0x170/0x170 [ 320.362248] ? proc_fail_nth_write+0x96/0x1f0 [ 320.366746] ? proc_cwd_link+0x1d0/0x1d0 [ 320.370819] ? __schedule+0x809/0x1e30 [ 320.374721] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.380257] ? iov_iter_init+0xc9/0x1f0 [ 320.384238] __vfs_write+0x64d/0x960 [ 320.387969] ? kernel_read+0x120/0x120 [ 320.391853] ? __lock_is_held+0xb5/0x140 [ 320.395973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.401524] ? __sb_start_write+0x17f/0x300 [ 320.405850] vfs_write+0x1f8/0x560 [ 320.409405] ksys_write+0xf9/0x250 [ 320.412967] ? __ia32_sys_read+0xb0/0xb0 [ 320.417045] __x64_sys_write+0x73/0xb0 [ 320.420960] do_syscall_64+0x1b1/0x800 [ 320.424843] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 320.429689] ? syscall_return_slowpath+0x5c0/0x5c0 [ 320.434620] ? syscall_return_slowpath+0x30f/0x5c0 [ 320.439567] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 320.444952] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 320.449811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 320.455002] RIP: 0033:0x455a09 [ 320.458193] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 320.477675] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 320.485398] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 320.492670] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 320.499946] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 320.507214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 320.514473] R13: 00000000000007b1 R14: 0000000000700938 R15: 0000000000000029 [ 320.616821] Process accounting resumed 2018/06/05 23:22:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000007fffffff270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:08 executing program 4 (fault-call:3 fault-nth:42): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:08 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010004000000084) bind$inet6(r0, &(0x7f0000186fe4)={0xa, 0x4e20}, 0x1c) r1 = fcntl$dupfd(r0, 0x804, r0) sendto$inet6(r1, &(0x7f0000000000)="cd", 0x1, 0x0, &(0x7f00005d6000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000001500)={0x0, 0x818, "e3704168584e365cc6e2c49d6762d3c96acd059819c32f2e44b8bc061de91c59cb46f88524aae188455400a495e8cbbcc8942a9ca4c0f4835c45b4b553f84f5f8cf7fb9fc7025fec05178ae0b1e4a7199e1cfd6044fde0ce5f7b536998d0dd0b77b002bb4528a9f20455fff36e7ab87dd5b44560da91a61333161add5487bbbf5f74a5845b24deded7850ef0a9dd125b20320c462774f12d48fc329c7db842c3e9020db7467f435a81bac7b42fb8fa43937db0bc1a0e9f635582dee345b7e2bfe202f8e7f461c074eebe6c86ccb5d24789b6c674f54176fd7754ea083249ead69d3c49572b200231961e3ded34c4eaa598b758ffb9b703c5e1f3a11d6a7700f5fc65df5fcadbc1dedea724d5518f50e59a1dd454f9f499c885e2ceb3ac37450112c8651b1ce51d20c90445dd9ae0360851ab6fc0091cc4486154972c5c06af0f86e2e1e68460d6d5a5cbaea815b2ff155671ad49952d43a675a0eb3fbebe84906fa1094c504806122e26a3a367660f3b6eae3947245bfef3784c7620b4d6e31118cf2824085a9d2a640b4670950ba8fc4d282db9334af4abb3420cc46c5b62294ba1d67824f28a350083ec480af15390f676a7a408835a7bfd8dfdf331f9cd44d01c52e07a89e1955423853dccdf75fe69fda20365f6b8c04547400d542a61add2cc3dcf7d4a0bdb67ea9220dd4c70e18d8fbc28a6a4f43ef3e53c9bb099e42396709ac0dd5116ce17f57571e75c2c50105920583d4e421099f40463d2b9b1bd70cd67994266d41eec9b93f2f6905bacdbb9c052a34a509d10ce832ba08aba2655091eeaaa44bd5ded25a09611d7d81da271c57b16d9c018bbbcc1a720135de28697da0597cc890a89393e53a19288ee5d743a23107f774acbeb2dc08d84bfda8267345df106e4434878f10b088093aba6436bcde5fdddf96f19c09a68e46b34f449c7f5bb9237f9c33d22bea81474014549011b7604c1eab154ed8519e8fcca40f931edcdb2765fd0fd806b6eea76a2f8167d2c71209c15ab6f00dac4889fd5730e81fd2743d48f465437eaeb668581e0de1264436f7853d79a860fd8200f5ae39a4602a8e9ff76f9ba9a6c54abdc77a1462db4cf7cb56c51f5d8ba28ca1b0f53084015bafec231ce067ad118a5013b7336425cdbb9634c73d7a4c53ce167f8e92411eb73a57be7bc4ebcb7f08a3053dead08d8a2ae099f508f420b0d12ccd58381d08f56d8b79ec0e092133671f8f8005aecd4fa31940fec57ecea8ae7949ab7c29057082e9f404f10c8c7a1c38c1085f2283d79b64e4597dfa54e12b88f1a8d8729f02dbbd283c51ec1d64c67f9c1a5a1925d22fe39ac9aaf7ce17c2ca5e4a24f9551647c16ef1154f854eb28246b7979405549cba6eeab471d354251fb8f72213b86860f4b0120f2df95e56c85edfda0c7b5481cee87d25318a4454d90d022b7573657cea579d7c4e291012cb006d08a3f4f850265fc03f6adcc6621efad94f327a83eb0120a8fd733a59a9ec8850df60ca60b72bf08780f14cffb7a53d307b106c0a7e694cb3706f78212acc2f488a54db89068e46eccf9ea6c50d4adc6c3786de629b87d2194c6012a683a62dc2fa3da0edd98e85193c44364cce82e68c567f42e3acf4f81ab8049e37be6946f54771534a159cbb00fd23c69515beae119a4dcd28237133c6b3875b625ebd6318b530240c9edd48e3f86c5e2e9aa497f5980a7292aac08c2e5d8021e73051b0359dd72a5d1dbc7e1da3e1585d9aa03a6d2aed7325b2d0fee679d5226b5d6fda1d2deee20836308bb1ae18c487950a17936c59683487f15b2c4f511c0b9ba4ed61923d3cd3b18b856cdc44afb7afef7f1ff01770d02fb6136f984621cb6ddc4e8c4122098c8dac5bd798fb1f82e3a733b948ff334e9df02055cb0f9ff3680fb33b21916492f1f3a6c65be16cfa22206a58fcfa7f5a18fdedd2867653e172d4c4f0df12d3c63df24ce176d812af48349b6e570b9950ca0cab7580d955c0ace23a29f08c3cfe79d1bc3584f4685c4e2de7d94656388da1d4187ffcb8a2cf382aec88f227c7e818cd764cbad4483c8f2c059b35be35919808c946ed199fc53e2a24ada4554a15bbfbbf51ad2c38d05079fd2c5ea347bd3711c16f2a306b64866bb8898faeb51e8aa73a7ce0ceb65df45f08b29fbce1cdc55e6ced9dbb7d9b07212471bc822b881822cb06141d68eed5e9ef125af75374a5108c9aac51935249f69706b4057c1d9a8ea0d7d17baa56eb26c3609ff98a6a714dbe6b059259765b32771dc5c443c50d867d55875553f4dc6511eeb09506d18d4981130484f17fc5328d630ce1e2df8078ce1d4d633cc5f07dbe04334996bed75e9b4a54a131bc8bd0956acf216c407cba943c66cdc91d65da22b54a6c86ab57c6952c94fd1583286d76622e11df3f0bf8b0e80e937db01a1487241fc08a637fead6b2accd8acbd2bcef0fd8e6ac1f201d21f59b23666e4824b68b1ce748e71aa40667664b53e739976f34adb1ed6d59f222be92f0c58123348d42d75cd6d89fce6dedf44c31050b5777bde2c3c970ab1e326549fbda084f9f26bc7c3f24d648a441289635f4a930861f8ce985547131133e208c04bf2e027463c1f4272b3eee89751aad03e707b6b543f15f8201b0ab0cff5c73da19ee7062d5e3673df8cbc668a2ccb6a360ef99b9c6a41bed78b86d02b65d67a44ca16f34428d8a7db2129593d866636f3e9a924ef9ff263cd6246b3336343574241553cf99de5a02600a40ad106f3c06c1211d29154456af0f78aefe8ce10df1f747a382c6636c9d7bf83ce9cb475e6274f084df055646f396b865cccc4d9abf7cc3007e1b460b6237661bcb92a2def0e40350825ea70749e5c2c8c6e98b6bce97a2152170a59ae63f8f3162622f6735c00dac1fcd7f6aaf44ef96060b2"}, &(0x7f00000000c0)=0x820) 2018/06/05 23:22:08 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 320.666734] Process accounting resumed [ 320.672789] binder: 19008:19011 ERROR: BC_REGISTER_LOOPER called without request [ 320.682870] binder: 19008:19011 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 320.691063] binder: 19008:19011 got reply transaction with no transaction stack [ 320.698575] binder: 19008:19011 transaction failed 29201/-71, size 0-0 line 2763 [ 320.734661] binder: 19008:19021 ERROR: BC_REGISTER_LOOPER called without request [ 320.771730] binder: undelivered TRANSACTION_ERROR: 29201 [ 320.810671] FAULT_INJECTION: forcing a failure. [ 320.810671] name failslab, interval 1, probability 0, space 0, times 0 [ 320.821957] CPU: 1 PID: 19026 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 320.828874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 320.838214] Call Trace: [ 320.840792] dump_stack+0x1b9/0x294 [ 320.844408] ? dump_stack_print_info.cold.2+0x52/0x52 [ 320.849592] ? print_usage_bug+0xc0/0xc0 [ 320.853662] should_fail.cold.4+0xa/0x1a [ 320.857725] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 320.862831] ? __lock_acquire+0x7f5/0x5140 [ 320.867051] ? free_unref_page_list+0xc9a/0x12c0 [ 320.871800] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.877332] ? mark_page_accessed+0x66a/0xd10 [ 320.881846] ? debug_check_no_locks_freed+0x310/0x310 [ 320.887063] ? perf_trace_lock_acquire+0xe3/0x980 [ 320.891903] ? perf_trace_lock_acquire+0xe3/0x980 [ 320.896733] ? perf_trace_lock+0x900/0x900 [ 320.900951] ? graph_lock+0x170/0x170 [ 320.904747] __should_failslab+0x124/0x180 [ 320.908982] should_failslab+0x9/0x14 [ 320.912782] kmem_cache_alloc_node+0x56/0x780 [ 320.917282] ? perf_trace_lock+0x900/0x900 [ 320.921518] create_task_io_context+0xb5/0x5e0 [ 320.926107] ? ioc_clear_queue+0x5e0/0x5e0 [ 320.930352] ? lock_downgrade+0x8e0/0x8e0 [ 320.934513] ? kasan_check_read+0x11/0x20 [ 320.938662] ? rcu_is_watching+0x85/0x140 [ 320.942814] ? __lock_is_held+0xb5/0x140 [ 320.946866] ? rcu_report_qs_rnp+0x790/0x790 [ 320.951266] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 320.956451] generic_make_request_checks+0x163d/0x2400 [ 320.961719] ? blk_init_queue+0x30/0x30 [ 320.965681] ? blk_queue_enter+0xbf5/0xdf0 [ 320.969908] ? __kasan_slab_free+0x11a/0x170 [ 320.974309] ? blk_exit_rl+0x80/0x80 [ 320.978018] ? ext4_writepages+0x1b7c/0x4030 [ 320.982435] ? do_writepages+0x9a/0x1a0 [ 320.986403] ? __filemap_fdatawrite_range+0x333/0x470 [ 320.991575] ? file_write_and_wait_range+0x98/0x100 [ 320.996572] ? ext4_sync_file+0x2ce/0x1470 [ 321.000796] ? vfs_fsync_range+0x140/0x220 [ 321.005032] ? ext4_file_write_iter+0x688/0x1420 [ 321.009787] ? __vfs_write+0x64d/0x960 [ 321.013665] ? vfs_write+0x1f8/0x560 [ 321.017360] ? ksys_write+0xf9/0x250 [ 321.021069] ? __x64_sys_write+0x73/0xb0 [ 321.025127] ? do_syscall_64+0x1b1/0x800 [ 321.029186] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 321.034546] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 321.039111] ? print_usage_bug+0xc0/0xc0 [ 321.043155] ? kasan_check_write+0x14/0x20 [ 321.047377] ? graph_lock+0x170/0x170 [ 321.051172] ? trace_hardirqs_off+0xd/0x10 [ 321.055406] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 321.060502] ? debug_check_no_obj_freed+0x2ff/0x584 [ 321.065530] ? __lock_is_held+0xb5/0x140 [ 321.069593] generic_make_request+0x29b/0x1790 [ 321.074166] ? jbd2_journal_stop+0x42e/0x15a0 [ 321.078652] ? rcu_read_lock_sched_held+0x108/0x120 [ 321.083663] ? blk_get_request+0x7e0/0x7e0 [ 321.087891] ? jbd2_journal_stop+0x22d/0x15a0 [ 321.092389] ? jbd2_buffer_abort_trigger+0x90/0x90 [ 321.097305] ? ext4_reserve_inode_write+0x146/0x260 [ 321.102307] ? ext4_mark_inode_dirty+0x243/0xb20 [ 321.107061] ? ext4_writepages+0x2fde/0x4030 [ 321.111473] ? ext4_expand_extra_isize+0x590/0x590 [ 321.116398] ? lock_release+0xa10/0xa10 [ 321.120387] submit_bio+0xba/0x460 [ 321.123921] ? submit_bio+0xba/0x460 [ 321.127622] ? generic_make_request+0x1790/0x1790 [ 321.132459] ? __might_sleep+0x95/0x190 [ 321.136436] ? up_write+0x72/0x210 [ 321.139969] ? up_read+0x110/0x110 [ 321.143499] ? down_read+0x1b0/0x1b0 [ 321.147208] ext4_io_submit+0x190/0x220 [ 321.151181] ext4_writepages+0x1b9d/0x4030 [ 321.155423] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 321.160165] ? perf_trace_lock_acquire+0xe3/0x980 [ 321.164994] ? perf_trace_lock+0x900/0x900 [ 321.169224] ? graph_lock+0x170/0x170 [ 321.173011] ? graph_lock+0x170/0x170 [ 321.176807] ? perf_trace_lock+0x900/0x900 [ 321.181047] ? find_held_lock+0x36/0x1c0 [ 321.185112] ? lock_downgrade+0x8e0/0x8e0 [ 321.189248] ? lock_downgrade+0x8e0/0x8e0 [ 321.193389] ? do_raw_spin_unlock+0x9e/0x2e0 [ 321.197782] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 321.202375] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 321.207901] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 321.213163] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 321.217913] do_writepages+0x9a/0x1a0 [ 321.221699] ? do_writepages+0x9a/0x1a0 [ 321.225672] __filemap_fdatawrite_range+0x333/0x470 [ 321.230679] ? delete_from_page_cache_batch+0xf70/0xf70 [ 321.236051] file_write_and_wait_range+0x98/0x100 [ 321.240891] ext4_sync_file+0x2ce/0x1470 [ 321.244938] ? ext4_getfsmap+0xd30/0xd30 [ 321.248999] ? add_page_wait_queue+0x2a0/0x2a0 [ 321.253576] ? current_time+0x180/0x180 [ 321.257542] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 321.262553] ? generic_write_checks+0x37d/0x5b0 [ 321.267236] ? up_write+0x72/0x210 [ 321.270786] ? ext4_getfsmap+0xd30/0xd30 [ 321.274852] vfs_fsync_range+0x140/0x220 [ 321.278908] ext4_file_write_iter+0x688/0x1420 [ 321.283476] ? kasan_check_read+0x11/0x20 [ 321.287609] ? rcu_is_watching+0x85/0x140 [ 321.291744] ? ext4_file_mmap+0x410/0x410 [ 321.295894] ? perf_trace_lock+0x900/0x900 [ 321.300121] ? expand_files.part.8+0x9a0/0x9a0 [ 321.304690] ? graph_lock+0x170/0x170 [ 321.308485] ? proc_fail_nth_write+0x96/0x1f0 [ 321.312976] ? proc_cwd_link+0x1d0/0x1d0 [ 321.317038] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 321.322568] ? iov_iter_init+0xc9/0x1f0 [ 321.326527] __vfs_write+0x64d/0x960 [ 321.330226] ? kernel_read+0x120/0x120 [ 321.334098] ? __lock_is_held+0xb5/0x140 [ 321.338170] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.343701] ? __sb_start_write+0x17f/0x300 [ 321.348046] vfs_write+0x1f8/0x560 [ 321.351582] ksys_write+0xf9/0x250 [ 321.355106] ? __ia32_sys_read+0xb0/0xb0 [ 321.359158] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 321.364695] __x64_sys_write+0x73/0xb0 [ 321.368569] do_syscall_64+0x1b1/0x800 [ 321.372446] ? syscall_return_slowpath+0x5c0/0x5c0 [ 321.377369] ? syscall_return_slowpath+0x30f/0x5c0 [ 321.382300] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 321.387668] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.392497] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 321.397678] RIP: 0033:0x455a09 [ 321.400859] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 321.420156] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.427853] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 321.435201] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 321.442472] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 321.449811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 321.457072] R13: 00000000000007b1 R14: 0000000000700938 R15: 000000000000002a [ 322.380163] Process accounting resumed 2018/06/05 23:22:10 executing program 5: unshare(0x40000000) r0 = gettid() socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) migrate_pages(r0, 0xd26, &(0x7f0000000000)=0xfffffffeffffffff, &(0x7f0000000040)=0x1fc) write$sndseq(r2, &(0x7f0000bce000), 0xffffff36) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sysfs$1(0x1, &(0x7f0000000100)='$+\x00') timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) tkill(r0, 0x1000000000016) 2018/06/05 23:22:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000f0000000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:10 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:10 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x32, 0xffffffffffffffff, 0x0) sysinfo(&(0x7f0000000000)=""/155) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x40, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000100)=""/93) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000240), 0x4) 2018/06/05 23:22:10 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:10 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0T') 2018/06/05 23:22:10 executing program 4 (fault-call:3 fault-nth:43): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) [ 322.542689] Process accounting resumed 2018/06/05 23:22:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000fffffff0270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:10 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 322.612629] binder: 19049:19057 ERROR: BC_REGISTER_LOOPER called without request [ 322.625993] IPVS: ftp: loaded support on port[0] = 21 [ 322.634376] binder: 19049:19057 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 322.642743] binder: 19049:19057 got reply transaction with no transaction stack [ 322.650296] binder: 19049:19057 transaction failed 29201/-71, size 0-0 line 2763 [ 322.667123] binder: 19049:19059 ERROR: BC_REGISTER_LOOPER called without request [ 322.676451] FAULT_INJECTION: forcing a failure. [ 322.676451] name failslab, interval 1, probability 0, space 0, times 0 [ 322.687805] CPU: 1 PID: 19055 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 322.694743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.702321] binder: undelivered TRANSACTION_ERROR: 29201 [ 322.704095] Call Trace: [ 322.704122] dump_stack+0x1b9/0x294 [ 322.704144] ? dump_stack_print_info.cold.2+0x52/0x52 [ 322.704162] ? print_usage_bug+0xc0/0xc0 [ 322.704186] should_fail.cold.4+0xa/0x1a [ 322.704203] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 322.704222] ? __lock_acquire+0x7f5/0x5140 [ 322.738416] ? free_unref_page_list+0xc9a/0x12c0 [ 322.743166] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.748697] ? mark_page_accessed+0x66a/0xd10 [ 322.753204] ? debug_check_no_locks_freed+0x310/0x310 [ 322.758388] ? perf_trace_lock_acquire+0xe3/0x980 [ 322.763259] ? perf_trace_lock_acquire+0xe3/0x980 [ 322.768111] ? perf_trace_lock+0x900/0x900 [ 322.772342] ? graph_lock+0x170/0x170 [ 322.776130] __should_failslab+0x124/0x180 [ 322.780373] should_failslab+0x9/0x14 [ 322.784171] kmem_cache_alloc_node+0x56/0x780 [ 322.788652] ? perf_trace_lock+0x900/0x900 [ 322.792882] create_task_io_context+0xb5/0x5e0 [ 322.797453] ? ioc_clear_queue+0x5e0/0x5e0 [ 322.801685] ? lock_downgrade+0x8e0/0x8e0 [ 322.805826] ? kasan_check_read+0x11/0x20 [ 322.809968] ? rcu_is_watching+0x85/0x140 [ 322.814107] ? __lock_is_held+0xb5/0x140 [ 322.818156] ? rcu_report_qs_rnp+0x790/0x790 [ 322.822565] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 322.827758] generic_make_request_checks+0x163d/0x2400 [ 322.833049] ? blk_init_queue+0x30/0x30 [ 322.837032] ? blk_queue_enter+0xbf5/0xdf0 [ 322.841264] ? __kasan_slab_free+0x11a/0x170 [ 322.845663] ? blk_exit_rl+0x80/0x80 [ 322.849365] ? ext4_writepages+0x1b7c/0x4030 [ 322.853766] ? do_writepages+0x9a/0x1a0 [ 322.857726] ? __filemap_fdatawrite_range+0x333/0x470 [ 322.862900] ? file_write_and_wait_range+0x98/0x100 [ 322.867901] ? ext4_sync_file+0x2ce/0x1470 [ 322.872121] ? vfs_fsync_range+0x140/0x220 [ 322.876347] ? ext4_file_write_iter+0x688/0x1420 [ 322.881090] ? __vfs_write+0x64d/0x960 [ 322.884975] ? vfs_write+0x1f8/0x560 [ 322.888678] ? ksys_write+0xf9/0x250 [ 322.892389] ? __x64_sys_write+0x73/0xb0 [ 322.896440] ? do_syscall_64+0x1b1/0x800 [ 322.900484] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.905833] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 322.910399] ? print_usage_bug+0xc0/0xc0 [ 322.914449] ? kasan_check_write+0x14/0x20 [ 322.918675] ? graph_lock+0x170/0x170 [ 322.922467] ? trace_hardirqs_off+0xd/0x10 [ 322.926685] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 322.931787] ? debug_check_no_obj_freed+0x2ff/0x584 [ 322.936804] ? __lock_is_held+0xb5/0x140 [ 322.940860] generic_make_request+0x29b/0x1790 [ 322.945433] ? jbd2_journal_stop+0x42e/0x15a0 [ 322.949914] ? rcu_read_lock_sched_held+0x108/0x120 [ 322.954924] ? blk_get_request+0x7e0/0x7e0 [ 322.959164] ? jbd2_journal_stop+0x22d/0x15a0 [ 322.963661] ? jbd2_buffer_abort_trigger+0x90/0x90 [ 322.968575] ? ext4_reserve_inode_write+0x146/0x260 [ 322.973588] ? ext4_mark_inode_dirty+0x243/0xb20 [ 322.978336] ? ext4_writepages+0x2fde/0x4030 [ 322.982728] ? ext4_expand_extra_isize+0x590/0x590 [ 322.987647] ? lock_release+0xa10/0xa10 [ 322.991611] submit_bio+0xba/0x460 [ 322.995131] ? submit_bio+0xba/0x460 [ 322.998839] ? generic_make_request+0x1790/0x1790 [ 323.003667] ? __might_sleep+0x95/0x190 [ 323.007639] ? up_write+0x72/0x210 [ 323.011181] ? up_read+0x110/0x110 [ 323.014723] ? down_read+0x1b0/0x1b0 [ 323.018422] ext4_io_submit+0x190/0x220 [ 323.022383] ext4_writepages+0x1b9d/0x4030 [ 323.026633] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 323.031383] ? perf_trace_lock_acquire+0xe3/0x980 [ 323.036233] ? perf_trace_lock+0x900/0x900 [ 323.040475] ? graph_lock+0x170/0x170 [ 323.044277] ? graph_lock+0x170/0x170 [ 323.048068] ? perf_trace_lock+0x900/0x900 [ 323.052291] ? find_held_lock+0x36/0x1c0 [ 323.056351] ? lock_downgrade+0x8e0/0x8e0 [ 323.060491] ? lock_downgrade+0x8e0/0x8e0 [ 323.064624] ? do_raw_spin_unlock+0x9e/0x2e0 [ 323.069019] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 323.073603] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.079130] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 323.084400] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 323.089327] do_writepages+0x9a/0x1a0 [ 323.093124] ? do_writepages+0x9a/0x1a0 [ 323.097109] __filemap_fdatawrite_range+0x333/0x470 [ 323.102124] ? delete_from_page_cache_batch+0xf70/0xf70 [ 323.107479] file_write_and_wait_range+0x98/0x100 [ 323.112307] ext4_sync_file+0x2ce/0x1470 [ 323.116353] ? ext4_getfsmap+0xd30/0xd30 [ 323.120410] ? add_page_wait_queue+0x2a0/0x2a0 [ 323.124987] ? current_time+0x180/0x180 [ 323.128954] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 323.133953] ? generic_write_checks+0x37d/0x5b0 [ 323.138606] ? up_write+0x72/0x210 [ 323.142131] ? ext4_getfsmap+0xd30/0xd30 [ 323.146177] vfs_fsync_range+0x140/0x220 [ 323.150234] ext4_file_write_iter+0x688/0x1420 [ 323.154808] ? kasan_check_read+0x11/0x20 [ 323.158946] ? rcu_is_watching+0x85/0x140 [ 323.163078] ? ext4_file_mmap+0x410/0x410 [ 323.167217] ? perf_trace_lock+0x900/0x900 [ 323.171440] ? expand_files.part.8+0x9a0/0x9a0 [ 323.176010] ? graph_lock+0x170/0x170 [ 323.179816] ? proc_fail_nth_write+0x96/0x1f0 [ 323.184313] ? proc_cwd_link+0x1d0/0x1d0 [ 323.188364] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.193894] ? iov_iter_init+0xc9/0x1f0 [ 323.197854] __vfs_write+0x64d/0x960 [ 323.201551] ? kernel_read+0x120/0x120 [ 323.205425] ? __lock_is_held+0xb5/0x140 [ 323.209488] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.215011] ? __sb_start_write+0x17f/0x300 [ 323.219327] vfs_write+0x1f8/0x560 [ 323.222865] ksys_write+0xf9/0x250 [ 323.226400] ? __ia32_sys_read+0xb0/0xb0 [ 323.230446] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 323.235971] __x64_sys_write+0x73/0xb0 [ 323.239855] do_syscall_64+0x1b1/0x800 [ 323.243743] ? finish_task_switch+0x1ca/0x840 [ 323.248242] ? syscall_return_slowpath+0x5c0/0x5c0 [ 323.253165] ? syscall_return_slowpath+0x30f/0x5c0 [ 323.258093] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 323.263445] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.268287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 323.273465] RIP: 0033:0x455a09 [ 323.276641] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 323.295958] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.303660] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 323.310919] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 323.318188] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 323.325447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 323.332699] R13: 00000000000007b1 R14: 0000000000700938 R15: 000000000000002b [ 323.431908] IPVS: ftp: loaded support on port[0] = 21 [ 324.343553] Process accounting resumed [ 324.386376] Process accounting resumed 2018/06/05 23:22:27 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000073, 0x0, 0x80ffff}]}) 2018/06/05 23:22:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:27 executing program 4 (fault-call:3 fault-nth:44): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:27 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000f0ffff270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:27 executing program 5: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="0047fc2f07d82c99240970") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-sse2\x00'}, 0x58) r2 = open(&(0x7f0000001240)='./file0\x00', 0x10000, 0x1) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000001280)={0x0, 0x887, 0x0, 0x10, &(0x7f0000ce6000/0x1000)=nil, 0xc781}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000a, 0x4000000031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000), 0x0) r3 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100), 0x31b}], 0x1, 0x0) r4 = memfd_create(&(0x7f00000001c0)='$[\x00', 0x2) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000001300)={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x20, {0x2, 0x4e20, @rand_addr=0x7fff}, 'veth1_to_bridge\x00'}) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000001200)=ANY=[@ANYBLOB="7e020401e0fd000e"], 0x18) recvmsg(r3, &(0x7f0000000000)={&(0x7f0000f7ffa8)=@alg, 0x61, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096, 0xfffffe45}], 0x1, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f00000012c0)=""/24) 2018/06/05 23:22:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c6530ff") 2018/06/05 23:22:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000001270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:27 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 340.005011] binder: 19087:19093 ERROR: BC_REGISTER_LOOPER called without request [ 340.030175] binder: 19087:19093 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 340.038429] binder: 19087:19093 got reply transaction with no transaction stack [ 340.045936] binder: 19087:19093 transaction failed 29201/-71, size 0-0 line 2763 [ 340.058518] binder: 19087:19099 ERROR: BC_REGISTER_LOOPER called without request [ 340.073188] FAULT_INJECTION: forcing a failure. [ 340.073188] name failslab, interval 1, probability 0, space 0, times 0 [ 340.079054] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.084517] CPU: 1 PID: 19095 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 340.097025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.106366] Call Trace: [ 340.108954] dump_stack+0x1b9/0x294 [ 340.112568] ? dump_stack_print_info.cold.2+0x52/0x52 [ 340.117743] ? perf_trace_lock_acquire+0xe3/0x980 [ 340.122593] should_fail.cold.4+0xa/0x1a [ 340.126642] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 340.131731] ? rcu_report_qs_rnp+0x790/0x790 [ 340.136127] ? graph_lock+0x170/0x170 [ 340.140010] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 340.145621] ? unlock_page+0x1d0/0x2b0 [ 340.149497] ? find_held_lock+0x36/0x1c0 [ 340.153548] ? __lock_is_held+0xb5/0x140 [ 340.157601] ? check_same_owner+0x320/0x320 [ 340.161908] ? rcu_note_context_switch+0x710/0x710 [ 340.166835] ? ext4_mark_inode_dirty+0x243/0xb20 [ 340.171576] __should_failslab+0x124/0x180 [ 340.175811] should_failslab+0x9/0x14 [ 340.179599] kmem_cache_alloc+0x2af/0x760 [ 340.183734] ? submit_bio+0xba/0x460 [ 340.187431] ext4_init_io_end+0x90/0x210 [ 340.191493] ? ext4_end_io_rsv_work+0x8f0/0x8f0 [ 340.196145] ? up_write+0x72/0x210 [ 340.199672] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 340.205190] ? ext4_put_io_end+0x97/0x2e0 [ 340.209322] ? ext4_io_submit+0x195/0x220 [ 340.213455] ext4_writepages+0x14e1/0x4030 [ 340.217691] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 340.222431] ? perf_trace_lock_acquire+0xe3/0x980 [ 340.227263] ? perf_trace_lock+0x900/0x900 [ 340.231480] ? graph_lock+0x170/0x170 [ 340.235261] ? graph_lock+0x170/0x170 [ 340.239050] ? perf_trace_lock+0x900/0x900 [ 340.243451] ? find_held_lock+0x36/0x1c0 [ 340.247497] ? lock_downgrade+0x8e0/0x8e0 [ 340.251625] ? lock_downgrade+0x8e0/0x8e0 [ 340.255763] ? do_raw_spin_unlock+0x9e/0x2e0 [ 340.260166] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 340.264740] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 340.270272] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 340.275540] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 340.280286] do_writepages+0x9a/0x1a0 [ 340.284068] ? do_writepages+0x9a/0x1a0 [ 340.288032] __filemap_fdatawrite_range+0x333/0x470 [ 340.293043] ? delete_from_page_cache_batch+0xf70/0xf70 [ 340.298404] file_write_and_wait_range+0x98/0x100 [ 340.303233] ext4_sync_file+0x2ce/0x1470 [ 340.307277] ? ext4_getfsmap+0xd30/0xd30 [ 340.311323] ? add_page_wait_queue+0x2a0/0x2a0 [ 340.315887] ? current_time+0x180/0x180 [ 340.319864] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 340.324862] ? generic_write_checks+0x37d/0x5b0 [ 340.329522] ? up_write+0x72/0x210 [ 340.333057] ? ext4_getfsmap+0xd30/0xd30 [ 340.337102] vfs_fsync_range+0x140/0x220 [ 340.341149] ext4_file_write_iter+0x688/0x1420 [ 340.345715] ? kasan_check_read+0x11/0x20 [ 340.349849] ? rcu_is_watching+0x85/0x140 [ 340.353982] ? ext4_file_mmap+0x410/0x410 [ 340.358114] ? perf_trace_lock+0x900/0x900 [ 340.362336] ? expand_files.part.8+0x9a0/0x9a0 [ 340.366909] ? graph_lock+0x170/0x170 [ 340.370694] ? proc_fail_nth_write+0x96/0x1f0 [ 340.375169] ? proc_cwd_link+0x1d0/0x1d0 [ 340.379216] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 340.384735] ? iov_iter_init+0xc9/0x1f0 [ 340.388701] __vfs_write+0x64d/0x960 [ 340.392408] ? kernel_read+0x120/0x120 [ 340.396280] ? __lock_is_held+0xb5/0x140 [ 340.400333] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 340.405865] ? __sb_start_write+0x17f/0x300 [ 340.410168] vfs_write+0x1f8/0x560 [ 340.413694] ksys_write+0xf9/0x250 [ 340.417214] ? __ia32_sys_read+0xb0/0xb0 [ 340.421264] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 340.426788] __x64_sys_write+0x73/0xb0 [ 340.430657] do_syscall_64+0x1b1/0x800 [ 340.434528] ? finish_task_switch+0x1ca/0x840 [ 340.439005] ? syscall_return_slowpath+0x5c0/0x5c0 [ 340.443920] ? syscall_return_slowpath+0x30f/0x5c0 [ 340.448837] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 340.454204] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 340.459036] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 340.464209] RIP: 0033:0x455a09 [ 340.467378] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 340.486605] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 340.494317] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 340.501573] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 2018/06/05 23:22:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:28 executing program 7: mkdir(&(0x7f0000d90ff8)='./file0\x00', 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) recvfrom(r0, &(0x7f0000000000)=""/147, 0x93, 0x40, &(0x7f00000000c0)=@nfc_llcp={0x27, 0x0, 0x2, 0x5, 0x7, 0xd8, "bd6dd073134f28dfd7133d46907f7bf2fde617ac7332e69815614178f3a6291a03e4f12be99070154bd15fc58316cdce3de6e0b05521c7a9107205b52e0204", 0x36}, 0x80) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r1 = creat(&(0x7f0000000140)='./file0/bus\x00', 0x0) mq_getsetattr(r1, &(0x7f0000000240), 0x0) [ 340.508822] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 340.516087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 340.523402] R13: 00000000000007b1 R14: 0000000000700938 R15: 000000000000002c 2018/06/05 23:22:28 executing program 4 (fault-call:3 fault-nth:45): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9, 0x4000) setns(r1, 0x4000000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, &(0x7f0000000000)='o', &(0x7f00000001c0), 0x2}, 0x20) flistxattr(r1, &(0x7f0000000100)=""/231, 0xe7) syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x40000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r2, 0xffffffffffffffff, 0x6cf, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) 2018/06/05 23:22:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000003c7270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 340.784595] binder: 19114:19119 ERROR: BC_REGISTER_LOOPER called without request [ 340.794254] binder: 19114:19119 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 340.802396] binder: 19114:19119 got reply transaction with no transaction stack [ 340.809871] binder: 19114:19119 transaction failed 29201/-71, size 0-0 line 2763 [ 340.821996] binder: 19114:19122 ERROR: BC_REGISTER_LOOPER called without request [ 340.846488] binder: undelivered TRANSACTION_ERROR: 29201 [ 340.871597] FAULT_INJECTION: forcing a failure. [ 340.871597] name failslab, interval 1, probability 0, space 0, times 0 [ 340.882898] CPU: 1 PID: 19127 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 340.889822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 340.899156] Call Trace: [ 340.901732] dump_stack+0x1b9/0x294 [ 340.905349] ? dump_stack_print_info.cold.2+0x52/0x52 [ 340.910522] ? print_usage_bug+0xc0/0xc0 [ 340.914569] ? kasan_check_read+0x11/0x20 [ 340.918700] ? rcu_is_watching+0x85/0x140 [ 340.922833] should_fail.cold.4+0xa/0x1a [ 340.926879] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 340.931969] ? graph_lock+0x170/0x170 [ 340.935759] ? print_usage_bug+0xc0/0xc0 [ 340.939804] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 340.944811] ? blk_mq_queue_tag_busy_iter+0x538/0x9e0 [ 340.949989] ? graph_lock+0x170/0x170 [ 340.953783] ? __lock_is_held+0xb5/0x140 [ 340.957836] ? check_same_owner+0x320/0x320 [ 340.962140] ? rcu_note_context_switch+0x710/0x710 [ 340.967054] __should_failslab+0x124/0x180 [ 340.971281] should_failslab+0x9/0x14 [ 340.975063] kmem_cache_alloc+0x2af/0x760 [ 340.979202] ext4_mb_new_blocks+0x773/0x4730 [ 340.983593] ? print_usage_bug+0xc0/0xc0 [ 340.987660] ? ext4_discard_preallocations+0x13b0/0x13b0 [ 340.993093] ? mark_held_locks+0xc9/0x160 [ 340.997234] ? free_unref_page_list+0xc9a/0x12c0 [ 341.001971] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 341.006977] ? trace_hardirqs_on+0xd/0x10 [ 341.011111] ? debug_check_no_locks_freed+0x310/0x310 [ 341.016303] ? __lock_acquire+0x7f5/0x5140 [ 341.020528] ? __page_frag_cache_drain+0x1e0/0x1e0 [ 341.025440] ? trace_hardirqs_on+0xd/0x10 [ 341.029577] ? print_usage_bug+0xc0/0xc0 [ 341.033619] ? print_usage_bug+0xc0/0xc0 [ 341.037668] ? perf_trace_lock_acquire+0xe3/0x980 [ 341.042490] ? rcu_is_watching+0x85/0x140 [ 341.046620] ? blkg_lookup_slowpath+0xcf/0x260 [ 341.051196] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 341.056197] ? radix_tree_next_chunk+0x5cc/0xfb0 [ 341.060937] ? graph_lock+0x170/0x170 [ 341.064722] ? mem_cgroup_uncharge+0xe0/0xe0 [ 341.069109] ? idr_preload+0x40/0x40 [ 341.072815] ? print_usage_bug+0xc0/0xc0 [ 341.076865] ? release_pages+0x7b4/0x14b0 [ 341.081009] ? lock_downgrade+0x8e0/0x8e0 [ 341.085158] ? print_usage_bug+0xc0/0xc0 [ 341.089211] ? graph_lock+0x170/0x170 [ 341.092998] ext4_new_meta_blocks+0x2f6/0x520 [ 341.097476] ? ext4_should_retry_alloc+0x220/0x220 [ 341.102395] ext4_ind_map_blocks+0x109b/0x32e0 [ 341.106969] ? ext4_free_branches+0xb30/0xb30 [ 341.111447] ? perf_trace_lock+0x900/0x900 [ 341.115660] ? find_held_lock+0x36/0x1c0 [ 341.119701] ? graph_lock+0x170/0x170 [ 341.123483] ? graph_lock+0x170/0x170 [ 341.127263] ? lock_downgrade+0x8e0/0x8e0 [ 341.131403] ? lock_acquire+0x1dc/0x520 [ 341.135357] ? ext4_map_blocks+0x871/0x1b40 [ 341.139661] ? lock_release+0xa10/0xa10 [ 341.143618] ? ext4_es_cache_extent+0x6d0/0x6d0 [ 341.148270] ? rcu_note_context_switch+0x710/0x710 [ 341.153188] ? __might_sleep+0x95/0x190 [ 341.157154] ? down_write+0x87/0x120 [ 341.160851] ? ext4_map_blocks+0x871/0x1b40 [ 341.165158] ? down_read+0x1b0/0x1b0 [ 341.168855] ? graph_lock+0x170/0x170 [ 341.172640] ext4_map_blocks+0xe9e/0x1b40 [ 341.176782] ? ext4_issue_zeroout+0x190/0x190 [ 341.181261] ? __lock_is_held+0xb5/0x140 [ 341.185311] ext4_writepages+0x2494/0x4030 [ 341.189542] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 341.194281] ? perf_trace_lock_acquire+0xe3/0x980 [ 341.199108] ? perf_trace_lock+0x900/0x900 [ 341.203336] ? graph_lock+0x170/0x170 [ 341.207115] ? graph_lock+0x170/0x170 [ 341.210900] ? perf_trace_lock+0x900/0x900 [ 341.215116] ? find_held_lock+0x36/0x1c0 [ 341.219162] ? lock_downgrade+0x8e0/0x8e0 [ 341.223291] ? lock_downgrade+0x8e0/0x8e0 [ 341.227424] ? do_raw_spin_unlock+0x9e/0x2e0 [ 341.231826] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 341.236396] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 341.241914] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 341.247170] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 341.251917] do_writepages+0x9a/0x1a0 [ 341.255699] ? do_writepages+0x9a/0x1a0 [ 341.259660] __filemap_fdatawrite_range+0x333/0x470 [ 341.264656] ? delete_from_page_cache_batch+0xf70/0xf70 [ 341.270011] file_write_and_wait_range+0x98/0x100 [ 341.274856] ext4_sync_file+0x2ce/0x1470 [ 341.278915] ? ext4_getfsmap+0xd30/0xd30 [ 341.282961] ? add_page_wait_queue+0x2a0/0x2a0 [ 341.287530] ? current_time+0x180/0x180 [ 341.291491] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 341.296491] ? generic_write_checks+0x37d/0x5b0 [ 341.301151] ? up_write+0x72/0x210 [ 341.304674] ? ext4_getfsmap+0xd30/0xd30 [ 341.308718] vfs_fsync_range+0x140/0x220 [ 341.312790] ext4_file_write_iter+0x688/0x1420 [ 341.317354] ? kasan_check_read+0x11/0x20 [ 341.321484] ? rcu_is_watching+0x85/0x140 [ 341.325621] ? ext4_file_mmap+0x410/0x410 [ 341.326218] Process accounting resumed [ 341.329771] ? perf_trace_lock+0x900/0x900 [ 341.329787] ? expand_files.part.8+0x9a0/0x9a0 [ 341.329796] ? graph_lock+0x170/0x170 [ 341.329808] ? proc_fail_nth_write+0x96/0x1f0 [ 341.329822] ? proc_cwd_link+0x1d0/0x1d0 [ 341.354763] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 341.360294] ? iov_iter_init+0xc9/0x1f0 [ 341.364252] __vfs_write+0x64d/0x960 [ 341.367956] ? kernel_read+0x120/0x120 [ 341.371828] ? __lock_is_held+0xb5/0x140 [ 341.375880] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.381394] ? __sb_start_write+0x17f/0x300 [ 341.385699] vfs_write+0x1f8/0x560 [ 341.389223] ksys_write+0xf9/0x250 [ 341.392744] ? __ia32_sys_read+0xb0/0xb0 [ 341.396795] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 341.402324] __x64_sys_write+0x73/0xb0 [ 341.406191] do_syscall_64+0x1b1/0x800 [ 341.410059] ? finish_task_switch+0x1ca/0x840 [ 341.414537] ? syscall_return_slowpath+0x5c0/0x5c0 [ 341.419453] ? syscall_return_slowpath+0x30f/0x5c0 [ 341.424366] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 341.429709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 341.434542] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 341.439710] RIP: 0033:0x455a09 [ 341.442874] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 341.462073] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.469850] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 341.477099] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 341.484346] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 341.491606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 341.498958] R13: 00000000000007b1 R14: 0000000000700938 R15: 000000000000002d [ 341.519580] Process accounting resumed 2018/06/05 23:22:29 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:29 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x201, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = socket$kcm(0x29, 0x5, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_ifreq(r2, 0x8930, &(0x7f0000000000)={'syz_tun\x00', @ifru_ivalue}) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x10}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) r3 = syz_open_pts(r0, 0x0) readv(r3, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1) 2018/06/05 23:22:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000fffff000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:29 executing program 5: r0 = socket$inet6(0xa, 0x80000, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f757569642c75737271756f74010070716e6f656e666f7263652c6e6f7265636f766572792c62736467726f7570732c696b6565702c00"]) 2018/06/05 23:22:29 executing program 4 (fault-call:3 fault-nth:46): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:29 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 341.631821] binder: 19146:19152 ERROR: BC_REGISTER_LOOPER called without request [ 341.664898] binder: 19146:19152 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 341.673247] binder: 19146:19152 got reply transaction with no transaction stack 2018/06/05 23:22:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000c7030000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 341.680724] binder: 19146:19152 transaction failed 29201/-71, size 0-0 line 2763 [ 341.707380] binder: 19146:19152 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 341.787916] binder: undelivered TRANSACTION_ERROR: 29201 [ 341.803407] FAULT_INJECTION: forcing a failure. [ 341.803407] name failslab, interval 1, probability 0, space 0, times 0 [ 341.814697] CPU: 1 PID: 19168 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 341.821609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 341.830959] Call Trace: [ 341.833547] dump_stack+0x1b9/0x294 [ 341.837174] ? dump_stack_print_info.cold.2+0x52/0x52 [ 341.842357] should_fail.cold.4+0xa/0x1a [ 341.846405] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 341.851492] ? perf_trace_lock+0x900/0x900 [ 341.855713] ? graph_lock+0x170/0x170 [ 341.859504] ? __lock_is_held+0xb5/0x140 [ 341.863544] ? find_held_lock+0x36/0x1c0 [ 341.867588] ? graph_lock+0x170/0x170 [ 341.871372] ? __lock_is_held+0xb5/0x140 [ 341.875421] ? check_same_owner+0x320/0x320 [ 341.879780] ? rcu_note_context_switch+0x710/0x710 [ 341.884691] __should_failslab+0x124/0x180 [ 341.888909] should_failslab+0x9/0x14 [ 341.892688] kmem_cache_alloc+0x2af/0x760 [ 341.896823] ext4_mb_new_blocks+0x773/0x4730 [ 341.901222] ? jbd2_journal_file_inode+0x680/0x680 [ 341.906139] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 341.911658] ? jbd2_journal_stop+0x22d/0x15a0 [ 341.916150] ? ext4_discard_preallocations+0x13b0/0x13b0 [ 341.921584] ? ext4_mark_inode_dirty+0x243/0xb20 [ 341.926322] ? ext4_dirty_inode+0x97/0xc0 [ 341.930457] ? ext4_expand_extra_isize+0x590/0x590 [ 341.935370] ? __might_sleep+0x95/0x190 [ 341.939326] ? graph_lock+0x170/0x170 [ 341.943110] ? __ext4_journal_start_sb+0x182/0x5e0 [ 341.948032] ? ext4_dirty_inode+0x62/0xc0 [ 341.952189] ? __lock_is_held+0xb5/0x140 [ 341.956255] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 341.961262] ? __mark_inode_dirty+0x499/0x1530 [ 341.965851] ? __inode_attach_wb+0x1310/0x1310 [ 341.970506] ? kasan_check_read+0x11/0x20 [ 341.974638] ? do_raw_spin_unlock+0x9e/0x2e0 [ 341.979028] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 341.983606] ? kasan_check_write+0x14/0x20 [ 341.987828] ? do_raw_spin_lock+0xc1/0x200 [ 341.992055] ? _raw_spin_unlock+0x22/0x30 [ 341.996193] ? inode_add_bytes+0xd3/0xf0 [ 342.000238] ? __dquot_alloc_space+0x4fc/0x8a0 [ 342.004804] ? dquot_transfer+0x5f0/0x5f0 [ 342.008935] ? graph_lock+0x170/0x170 [ 342.012730] ? ext4_new_meta_blocks+0x24d/0x520 [ 342.017387] ? ext4_should_retry_alloc+0x220/0x220 [ 342.022301] ext4_ind_map_blocks+0x1744/0x32e0 [ 342.026872] ? ext4_free_branches+0xb30/0xb30 [ 342.031348] ? perf_trace_lock+0x900/0x900 [ 342.035558] ? find_held_lock+0x36/0x1c0 [ 342.039598] ? graph_lock+0x170/0x170 [ 342.043378] ? graph_lock+0x170/0x170 [ 342.047174] ? lock_downgrade+0x8e0/0x8e0 [ 342.051311] ? lock_acquire+0x1dc/0x520 [ 342.055277] ? ext4_map_blocks+0x871/0x1b40 [ 342.059589] ? lock_release+0xa10/0xa10 [ 342.063545] ? ext4_es_cache_extent+0x6d0/0x6d0 [ 342.068197] ? rcu_note_context_switch+0x710/0x710 [ 342.073113] ? __might_sleep+0x95/0x190 [ 342.077073] ? down_write+0x87/0x120 [ 342.080784] ? ext4_map_blocks+0x871/0x1b40 [ 342.085086] ? down_read+0x1b0/0x1b0 [ 342.088786] ? graph_lock+0x170/0x170 [ 342.092570] ext4_map_blocks+0xe9e/0x1b40 [ 342.096710] ? ext4_issue_zeroout+0x190/0x190 [ 342.101188] ? __lock_is_held+0xb5/0x140 [ 342.105324] ext4_writepages+0x2494/0x4030 [ 342.109553] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 342.114295] ? perf_trace_lock_acquire+0xe3/0x980 [ 342.119129] ? perf_trace_lock+0x900/0x900 [ 342.123344] ? graph_lock+0x170/0x170 [ 342.127125] ? graph_lock+0x170/0x170 [ 342.130905] ? perf_trace_lock+0x900/0x900 [ 342.135122] ? find_held_lock+0x36/0x1c0 [ 342.139167] ? lock_downgrade+0x8e0/0x8e0 [ 342.143294] ? lock_downgrade+0x8e0/0x8e0 [ 342.147424] ? do_raw_spin_unlock+0x9e/0x2e0 [ 342.151810] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 342.156383] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 342.161902] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 342.167170] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 342.171923] do_writepages+0x9a/0x1a0 [ 342.175704] ? do_writepages+0x9a/0x1a0 [ 342.179670] __filemap_fdatawrite_range+0x333/0x470 [ 342.184672] ? delete_from_page_cache_batch+0xf70/0xf70 [ 342.190036] file_write_and_wait_range+0x98/0x100 [ 342.194872] ext4_sync_file+0x2ce/0x1470 [ 342.198916] ? ext4_getfsmap+0xd30/0xd30 [ 342.202959] ? add_page_wait_queue+0x2a0/0x2a0 [ 342.207523] ? current_time+0x180/0x180 [ 342.211480] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 342.216474] ? generic_write_checks+0x37d/0x5b0 [ 342.221123] ? up_write+0x72/0x210 [ 342.224643] ? ext4_getfsmap+0xd30/0xd30 [ 342.228698] vfs_fsync_range+0x140/0x220 [ 342.232756] ext4_file_write_iter+0x688/0x1420 [ 342.237318] ? kasan_check_read+0x11/0x20 [ 342.241444] ? rcu_is_watching+0x85/0x140 [ 342.245580] ? ext4_file_mmap+0x410/0x410 [ 342.249710] ? perf_trace_lock+0x900/0x900 [ 342.253946] ? expand_files.part.8+0x9a0/0x9a0 [ 342.258525] ? graph_lock+0x170/0x170 [ 342.262326] ? proc_fail_nth_write+0x96/0x1f0 [ 342.266804] ? proc_cwd_link+0x1d0/0x1d0 [ 342.270883] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 342.276468] ? iov_iter_init+0xc9/0x1f0 [ 342.280442] __vfs_write+0x64d/0x960 [ 342.284148] ? kernel_read+0x120/0x120 [ 342.288040] ? __lock_is_held+0xb5/0x140 [ 342.292109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.297635] ? __sb_start_write+0x17f/0x300 [ 342.301946] vfs_write+0x1f8/0x560 [ 342.305497] ksys_write+0xf9/0x250 [ 342.309050] ? __ia32_sys_read+0xb0/0xb0 [ 342.313124] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 342.318655] __x64_sys_write+0x73/0xb0 [ 342.322539] do_syscall_64+0x1b1/0x800 [ 342.326413] ? syscall_return_slowpath+0x5c0/0x5c0 [ 342.331336] ? syscall_return_slowpath+0x30f/0x5c0 [ 342.336265] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 342.341620] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 342.346453] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 342.351625] RIP: 0033:0x455a09 [ 342.354811] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 342.374063] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.381785] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 2018/06/05 23:22:30 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 342.389060] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 342.396331] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 342.403618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 342.410895] R13: 00000000000007b1 R14: 0000000000700938 R15: 000000000000002e [ 342.429633] XFS (loop5): unknown mount option [usrquot]. 2018/06/05 23:22:30 executing program 4 (fault-call:3 fault-nth:47): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 342.462231] Process accounting resumed [ 342.476930] XFS (loop5): unknown mount option [usrquot]. 2018/06/05 23:22:30 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002e0019010000000000000000020000000c00000208000100030000005915851bd8ade6c70cef7cfcc029357c84e70effe3a124b20031b77f079b6b75bc5af0898c9d683cb410bff992235887a238fff90896094a75c16918d7bb5b11f1f50ff724a1621ae45a6db2bd4beb8a3031adec867ddf21b03d30b07d492709ad968e9f05e2167fd29f92aa86cfe6fd82249151298c"], 0x20}, 0x1}, 0x0) 2018/06/05 23:22:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000002000000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:30 executing program 5: mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) chroot(&(0x7f00000002c0)='../file0\x00') mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000100)='./file0\x00') r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x7ff, 0x90000) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x2, 0x2}) symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') umount2(&(0x7f0000000180)='../file0\x00', 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000380)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c00)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000001f00000006000000600700001803000038040000080200000000000008020000900600009006000090060000900600009006000006000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00018010000000000000000000000000000000000000000000000002800727066696c7465720000000000000000000000000000000000000000000005000000000000002800434845434b53554d00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000001ff020000000000000000000000000001ffffffff000000000000005b00000000ffffffffffffffff0000000000000000000000000000000000000000000000006272696467655f736c6176655f31000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c00010401000000000000000000000000000000c800f00000000000000000000000000000000000000000000000000028004453435000000000000000000000000000000000000000000000000000003900000000000000fe8000000000000000000000000000aa00000000000000000000000000000001000000ffffffff0000000000ffffffffffffff00000000ffffffff00000000006970365f7674693000000000000000007663616e300000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f00010208000000000000000000000000000000c80010010000000000000000000000000000000000000000000000004800534e505400000000000000000000000000000000000000000000000000007f000001000000000000000000000000e000000200000000000000000000000011100100000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000ffff000000ffffff00000000ffffffffffffffff006c6f0000000000000000000000000000766c616e300000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000002f00880150000000000000000000000000000000f800200100000000000000000000000000000000000000000000000030007372680000000000000000000000000000000000000000000000000000006c0808000a00000500040000000000002800434845434b53554d00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000001ff010000000000000000000000000001ff000000ff000000ff000000ffffffff0000000000000000ffffffffffffff000000000000000000000000000000000062726964676530000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000bf00530354000000000000000000000000000000300258020000000000000000000000000000000000000000000000003801727400000000000000000000000000000000000000000000000000000000060000007f00000020c90000060000000004000000000000000000000000ffffffffffffff010000000000000000000000000001fe8000000000000000000000000000aafe8000000000000000000000000000aaff020000000000000000000000000001fe8000000000000000000000000000aaff020000000000000000000000000001ff02000000000000000000000000000100000000000000000000ffffac14141700000000000000000000ffffe0000001fe8000000000000000000000000000aa00000000000000000000000000000001fe8000000000000000000000000000bbff02000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000170f00000030007372680000000000000000000000000000000000000000000000000000003f0209810400210109000000000000002800434845434b53554d0000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff000000007a5c9c88656bd8ff157a1e4a2aaea56afa43f1796c13ec074e01131f8714b82fedc2869aa96c29b182fed96f19693ddc649d577a4ce23aaf433ce60d975ac01498b9058935d916f1f9ef7597c09b905ba1f67adc900b55506b6b04a3c651a68dae7293ffe2dcd483db4e7841c7e9e99389934118651264dce9eb4e972cf63d1a5371f5d4d9bc9995ae2c616a7b4347a8db938771fd3bb1ba92b1386888c3b90f60111621f9f4409107ab56f4cc4424c593b22526e7e67e55bfe7d5f3893278c897e9ff4e2b333b8860ca408ffc12"], 0x7c0) syz_fuse_mount(&(0x7f0000000240)='../file0\x00', 0x43002, 0x0, 0x0, 0x0, 0x20030) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000300)={0x8, 0x0, 0x10001, 0x7fff}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000340)={r2, 0x4}) mkdir(&(0x7f0000000280)='../file0\x00', 0x4) 2018/06/05 23:22:30 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 342.554868] binder: 19187:19193 ERROR: BC_REGISTER_LOOPER called without request [ 342.593512] binder: 19187:19193 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 342.602048] binder: 19187:19193 got reply transaction with no transaction stack [ 342.609611] binder: 19187:19193 transaction failed 29201/-71, size 0-0 line 2763 [ 342.619608] binder: 19187:19201 ERROR: BC_REGISTER_LOOPER called without request [ 342.634686] Process accounting resumed [ 342.645954] binder: undelivered TRANSACTION_ERROR: 29201 [ 342.776772] openvswitch: netlink: Message has 4 unknown bytes. [ 342.828191] FAULT_INJECTION: forcing a failure. [ 342.828191] name failslab, interval 1, probability 0, space 0, times 0 [ 342.839642] CPU: 0 PID: 19208 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 342.846579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 342.855926] Call Trace: [ 342.858511] dump_stack+0x1b9/0x294 [ 342.862137] ? dump_stack_print_info.cold.2+0x52/0x52 [ 342.867330] should_fail.cold.4+0xa/0x1a [ 342.871386] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 342.876499] ? perf_trace_lock+0x900/0x900 [ 342.880735] ? graph_lock+0x170/0x170 [ 342.884533] ? __lock_is_held+0xb5/0x140 [ 342.888593] ? find_held_lock+0x36/0x1c0 [ 342.892647] ? graph_lock+0x170/0x170 [ 342.896446] ? __lock_is_held+0xb5/0x140 [ 342.900535] ? check_same_owner+0x320/0x320 [ 342.904876] ? rcu_note_context_switch+0x710/0x710 [ 342.909811] __should_failslab+0x124/0x180 [ 342.914058] should_failslab+0x9/0x14 [ 342.917865] kmem_cache_alloc+0x2af/0x760 [ 342.922023] ext4_mb_new_blocks+0x773/0x4730 [ 342.926435] ? jbd2_journal_file_inode+0x680/0x680 [ 342.931372] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 342.936897] ? jbd2_journal_stop+0x22d/0x15a0 [ 342.941400] ? ext4_discard_preallocations+0x13b0/0x13b0 [ 342.946848] ? ext4_mark_inode_dirty+0x243/0xb20 [ 342.951597] ? ext4_dirty_inode+0x97/0xc0 [ 342.955736] ? ext4_expand_extra_isize+0x590/0x590 [ 342.960666] ? __might_sleep+0x95/0x190 [ 342.964634] ? graph_lock+0x170/0x170 [ 342.968439] ? __ext4_journal_start_sb+0x182/0x5e0 [ 342.973358] ? ext4_dirty_inode+0x62/0xc0 [ 342.977501] ? __lock_is_held+0xb5/0x140 [ 342.981563] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 342.986566] ? __mark_inode_dirty+0x499/0x1530 [ 342.991150] ? __inode_attach_wb+0x1310/0x1310 [ 342.995725] ? kasan_check_read+0x11/0x20 [ 342.999861] ? do_raw_spin_unlock+0x9e/0x2e0 [ 343.004258] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 343.008853] ? kasan_check_write+0x14/0x20 [ 343.013084] ? do_raw_spin_lock+0xc1/0x200 [ 343.017329] ? _raw_spin_unlock+0x22/0x30 [ 343.021480] ? inode_add_bytes+0xd3/0xf0 [ 343.025534] ? __dquot_alloc_space+0x4fc/0x8a0 [ 343.030113] ? dquot_transfer+0x5f0/0x5f0 [ 343.034264] ? graph_lock+0x170/0x170 [ 343.038087] ? ext4_new_meta_blocks+0x24d/0x520 [ 343.042752] ? ext4_should_retry_alloc+0x220/0x220 [ 343.047685] ext4_ind_map_blocks+0x1744/0x32e0 [ 343.052273] ? ext4_free_branches+0xb30/0xb30 [ 343.056758] ? perf_trace_lock+0x900/0x900 [ 343.060985] ? find_held_lock+0x36/0x1c0 [ 343.065076] ? graph_lock+0x170/0x170 [ 343.068897] ? lock_acquire+0x1dc/0x520 [ 343.072869] ? ext4_map_blocks+0x871/0x1b40 [ 343.077190] ? lock_release+0xa10/0xa10 [ 343.081165] ? ext4_es_cache_extent+0x6d0/0x6d0 [ 343.085838] ? rcu_note_context_switch+0x710/0x710 [ 343.090764] ? __might_sleep+0x95/0x190 [ 343.094730] ? down_write+0x87/0x120 [ 343.098441] ? ext4_map_blocks+0x871/0x1b40 [ 343.102754] ? down_read+0x1b0/0x1b0 [ 343.106462] ? graph_lock+0x170/0x170 [ 343.110264] ext4_map_blocks+0xe9e/0x1b40 [ 343.114410] ? ext4_issue_zeroout+0x190/0x190 [ 343.118892] ? __lock_is_held+0xb5/0x140 [ 343.122966] ext4_writepages+0x2494/0x4030 [ 343.127219] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 343.131964] ? perf_trace_lock_acquire+0x4f1/0x980 [ 343.136892] ? perf_trace_lock+0x900/0x900 [ 343.141126] ? perf_trace_lock_acquire+0x4f1/0x980 [ 343.146057] ? graph_lock+0x170/0x170 [ 343.149854] ? graph_lock+0x170/0x170 [ 343.153651] ? perf_trace_lock+0x900/0x900 [ 343.157879] ? find_held_lock+0x36/0x1c0 [ 343.161942] ? lock_downgrade+0x8e0/0x8e0 [ 343.166091] ? lock_downgrade+0x8e0/0x8e0 [ 343.170244] ? do_raw_spin_unlock+0x9e/0x2e0 [ 343.174639] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 343.179220] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 343.184744] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 343.190010] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 343.194781] do_writepages+0x9a/0x1a0 [ 343.198577] ? do_writepages+0x9a/0x1a0 [ 343.202546] __filemap_fdatawrite_range+0x333/0x470 [ 343.207553] ? delete_from_page_cache_batch+0xf70/0xf70 [ 343.212920] file_write_and_wait_range+0x98/0x100 [ 343.217755] ext4_sync_file+0x2ce/0x1470 [ 343.221808] ? ext4_getfsmap+0xd30/0xd30 [ 343.225865] ? add_page_wait_queue+0x2a0/0x2a0 [ 343.230439] ? current_time+0x180/0x180 [ 343.234404] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 343.239408] ? generic_write_checks+0x37d/0x5b0 [ 343.244071] ? up_write+0x72/0x210 [ 343.247603] ? ext4_getfsmap+0xd30/0xd30 [ 343.251663] vfs_fsync_range+0x140/0x220 [ 343.255729] ext4_file_write_iter+0x688/0x1420 [ 343.260307] ? ext4_file_mmap+0x410/0x410 [ 343.264449] ? perf_trace_lock+0x900/0x900 [ 343.268678] ? expand_files.part.8+0x9a0/0x9a0 [ 343.273267] ? graph_lock+0x170/0x170 [ 343.277069] ? proc_fail_nth_write+0x96/0x1f0 [ 343.281550] ? proc_cwd_link+0x1d0/0x1d0 [ 343.285606] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 343.291138] ? iov_iter_init+0xc9/0x1f0 [ 343.295119] __vfs_write+0x64d/0x960 [ 343.298826] ? kernel_read+0x120/0x120 [ 343.302707] ? __lock_is_held+0xb5/0x140 [ 343.306771] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 343.312296] ? __sb_start_write+0x17f/0x300 [ 343.316608] vfs_write+0x1f8/0x560 [ 343.320143] ksys_write+0xf9/0x250 [ 343.323674] ? __ia32_sys_read+0xb0/0xb0 [ 343.327731] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 343.333276] __x64_sys_write+0x73/0xb0 [ 343.337156] do_syscall_64+0x1b1/0x800 [ 343.341048] ? finish_task_switch+0x1ca/0x840 [ 343.345543] ? syscall_return_slowpath+0x5c0/0x5c0 [ 343.350462] ? syscall_return_slowpath+0x30f/0x5c0 [ 343.355389] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 343.360763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 343.365609] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 343.370784] RIP: 0033:0x455a09 [ 343.373954] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 343.393393] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 343.401112] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 343.408380] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 343.415635] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 343.422892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 343.430158] R13: 00000000000007b1 R14: 0000000000700938 R15: 000000000000002f 2018/06/05 23:22:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:31 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$inet6_sctp(0xa, 0x7, 0x84) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x4a, &(0x7f0000000180)={'ah\x00'}, &(0x7f00000001c0)=0x1e) 2018/06/05 23:22:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000009effffff270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:31 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f00000000c0)=""/36) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r2 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000140)=0x2, 0x4) r3 = dup2(r2, r2) sendto$inet(r3, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000100)={0x2, 0x4e21}, 0x10) sendto$inet(r2, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/06/05 23:22:31 executing program 4 (fault-call:3 fault-nth:48): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:31 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) [ 343.609248] binder: 19221:19223 ERROR: BC_REGISTER_LOOPER called without request [ 343.617608] binder: 19221:19223 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 343.625809] binder: 19221:19223 got reply transaction with no transaction stack [ 343.633293] binder: 19221:19223 transaction failed 29201/-71, size 0-0 line 2763 [ 343.647597] binder: 19221:19224 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 343.668281] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000003c70000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:31 executing program 7: r0 = socket(0x1000300000010, 0x80002, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) write(r0, &(0x7f0000000040)="1f0000001e0007f1ff7fffe20802007702000600536b8d3d6c39080001454a", 0xfffffffffffffc5c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4) 2018/06/05 23:22:31 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 343.851240] binder: 19242:19250 ERROR: BC_REGISTER_LOOPER called without request [ 343.862391] binder: 19242:19250 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 343.870970] binder: 19242:19250 got reply transaction with no transaction stack [ 343.871276] FAULT_INJECTION: forcing a failure. [ 343.871276] name failslab, interval 1, probability 0, space 0, times 0 [ 343.878533] binder: 19242:19250 transaction failed 29201/-71, size 0-0 line 2763 [ 343.881292] binder: 19242:19252 ERROR: BC_REGISTER_LOOPER called without request [ 343.889816] CPU: 1 PID: 19244 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 343.889830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.921312] Call Trace: [ 343.923911] dump_stack+0x1b9/0x294 [ 343.927554] ? dump_stack_print_info.cold.2+0x52/0x52 [ 343.929774] binder: undelivered TRANSACTION_ERROR: 29201 [ 343.932753] should_fail.cold.4+0xa/0x1a [ 343.932775] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 343.932793] ? trace_hardirqs_off+0xd/0x10 [ 343.932812] ? find_held_lock+0x36/0x1c0 [ 343.932836] ? lock_downgrade+0x8e0/0x8e0 [ 343.959763] ? graph_lock+0x170/0x170 [ 343.963553] ? kasan_check_read+0x11/0x20 [ 343.967685] ? rcu_report_qs_rnp+0x790/0x790 [ 343.972079] ? __lock_is_held+0xb5/0x140 [ 343.976139] __should_failslab+0x124/0x180 [ 343.980363] should_failslab+0x9/0x14 [ 343.984153] kmem_cache_alloc+0x47/0x760 [ 343.988202] ? rcu_note_context_switch+0x710/0x710 [ 343.993141] ? mempool_free+0x370/0x370 [ 343.997122] mempool_alloc_slab+0x44/0x60 [ 344.001264] mempool_alloc+0x18b/0x490 [ 344.005224] ? mempool_destroy+0x30/0x30 [ 344.009277] ? lock_downgrade+0x8e0/0x8e0 [ 344.013411] ? kasan_check_read+0x11/0x20 [ 344.017562] ? rcu_is_watching+0x85/0x140 [ 344.021705] ? rcu_report_qs_rnp+0x790/0x790 [ 344.026098] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 344.031101] bio_alloc_bioset+0x384/0x6d0 [ 344.035253] ? clear_page_dirty_for_io+0x383/0x1200 [ 344.040261] ? bvec_alloc+0x2d0/0x2d0 [ 344.044051] ? balance_dirty_pages_ratelimited+0x1f50/0x1f50 [ 344.049835] ext4_bio_write_page+0xb09/0x1565 [ 344.054322] ? ext4_io_submit_init+0x90/0x90 [ 344.058721] ? do_raw_spin_unlock+0x9e/0x2e0 [ 344.063137] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 344.067721] ? kasan_check_write+0x14/0x20 [ 344.071954] mpage_submit_page+0x15d/0x270 [ 344.076187] mpage_map_and_submit_buffers+0x52e/0x9b0 [ 344.081369] ? mpage_process_page_bufs+0x600/0x600 [ 344.086295] ? ext4_issue_zeroout+0x190/0x190 [ 344.090777] ? __lock_is_held+0xb5/0x140 [ 344.094850] ext4_writepages+0x262b/0x4030 [ 344.099108] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 344.103851] ? perf_trace_lock_acquire+0xe3/0x980 [ 344.108692] ? perf_trace_lock+0x900/0x900 [ 344.112923] ? graph_lock+0x170/0x170 [ 344.116887] ? graph_lock+0x170/0x170 [ 344.120678] ? perf_trace_lock+0x900/0x900 [ 344.124907] ? find_held_lock+0x36/0x1c0 [ 344.128958] ? lock_downgrade+0x8e0/0x8e0 [ 344.133092] ? lock_downgrade+0x8e0/0x8e0 [ 344.137246] ? do_raw_spin_unlock+0x9e/0x2e0 [ 344.141655] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 344.146248] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 344.151791] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 344.157069] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 344.161913] do_writepages+0x9a/0x1a0 [ 344.165712] ? do_writepages+0x9a/0x1a0 [ 344.169697] __filemap_fdatawrite_range+0x333/0x470 [ 344.174702] ? delete_from_page_cache_batch+0xf70/0xf70 [ 344.180078] file_write_and_wait_range+0x98/0x100 [ 344.184913] ext4_sync_file+0x2ce/0x1470 [ 344.188966] ? ext4_getfsmap+0xd30/0xd30 [ 344.193035] ? add_page_wait_queue+0x2a0/0x2a0 [ 344.197614] ? current_time+0x180/0x180 [ 344.201592] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 344.206603] ? generic_write_checks+0x37d/0x5b0 [ 344.211273] ? up_write+0x72/0x210 [ 344.214806] ? ext4_getfsmap+0xd30/0xd30 [ 344.218852] vfs_fsync_range+0x140/0x220 [ 344.222913] ext4_file_write_iter+0x688/0x1420 [ 344.227490] ? kasan_check_read+0x11/0x20 [ 344.231629] ? rcu_is_watching+0x85/0x140 [ 344.235771] ? ext4_file_mmap+0x410/0x410 [ 344.239914] ? perf_trace_lock+0x900/0x900 [ 344.244142] ? expand_files.part.8+0x9a0/0x9a0 [ 344.248712] ? graph_lock+0x170/0x170 [ 344.252507] ? proc_fail_nth_write+0x96/0x1f0 [ 344.256999] ? proc_cwd_link+0x1d0/0x1d0 [ 344.261063] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 344.266594] ? iov_iter_init+0xc9/0x1f0 [ 344.270569] __vfs_write+0x64d/0x960 [ 344.274277] ? kernel_read+0x120/0x120 [ 344.278161] ? __lock_is_held+0xb5/0x140 [ 344.282221] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 344.287742] ? __sb_start_write+0x17f/0x300 [ 344.292055] vfs_write+0x1f8/0x560 [ 344.295586] ksys_write+0xf9/0x250 [ 344.299109] ? __ia32_sys_read+0xb0/0xb0 [ 344.303164] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 344.307999] __x64_sys_write+0x73/0xb0 [ 344.311891] do_syscall_64+0x1b1/0x800 [ 344.315782] ? finish_task_switch+0x1ca/0x840 [ 344.320269] ? syscall_return_slowpath+0x5c0/0x5c0 [ 344.325186] ? syscall_return_slowpath+0x30f/0x5c0 [ 344.330119] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 344.335474] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 344.340308] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 344.345484] RIP: 0033:0x455a09 [ 344.348661] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 344.367901] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 344.375616] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 344.382877] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 344.390132] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/06/05 23:22:31 executing program 5: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000140)=""/113, &(0x7f0000000200)=0x71) ftruncate(r0, 0x8200) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000480)={{0x0, 0x6, 0x2, 0x3, '\x00', 0x9}, 0x0, [0x26c9b676, 0x81, 0x3, 0x6, 0x0, 0x8000, 0x80000000, 0x2, 0x3, 0x10000, 0xe19c, 0x3ff, 0x80, 0x3, 0x7, 0x3, 0x5, 0x9, 0x20, 0x4, 0xfffffffffffffc01, 0x34fd, 0x8, 0x1, 0x7, 0x3f, 0xf2ac, 0x8, 0xfffffffffffffffe, 0x9, 0x2831, 0x3, 0x4, 0x4, 0x80000000, 0x1f, 0x4, 0x1, 0x190, 0xd59e, 0x4, 0x80000000, 0x5, 0x80000000, 0xffffffff, 0x7fff, 0xff, 0x881cab5, 0x2, 0x76, 0x9, 0x6, 0x7, 0x800, 0x80000000, 0x4, 0x2780000000000000, 0x4, 0x9, 0x3, 0xadd, 0x4, 0x4, 0x9, 0xff, 0xa3, 0x401, 0x8, 0xfffffffffffffffd, 0x1ffc000000, 0x0, 0xfffffffffffff800, 0x4, 0x80000000, 0xb3, 0x7, 0x4, 0x8, 0x1ff, 0x9dd9, 0x8001, 0x8, 0x3ff, 0xff, 0xffff, 0x6, 0x0, 0x5, 0x2, 0xffffffff, 0x400, 0xdb4, 0x10001, 0x0, 0x6, 0x5, 0x0, 0xbac3, 0x9, 0x1ff, 0x1, 0xb64, 0x1, 0x3, 0x1ff, 0xf8d, 0x401, 0xf4cf, 0xc823, 0x80000000, 0x4000000000000000, 0x4b10000, 0x0, 0x100000001, 0x7, 0x2, 0x2, 0x6, 0x3, 0x4, 0x5, 0x2f0, 0x10000, 0x4, 0x1, 0xd2, 0x0, 0x1535b84]}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x4800) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000100)={r1}) fchmod(r0, 0x121) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) ioctl$KDSETMODE(r0, 0x4b3a, 0x6) sendfile(r0, r2, &(0x7f0000d83ff8), 0x8000fffffffe) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000040)={{0x709, 0x5}, 'port0\x00', 0x1, 0x1400, 0x7, 0x14a0, 0x6, 0x8, 0xff, 0x0, 0x4, 0x8}) 2018/06/05 23:22:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 344.397402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 344.404664] R13: 00000000000007b1 R14: 0000000000700938 R15: 0000000000000030 [ 344.424746] Process accounting resumed 2018/06/05 23:22:32 executing program 4 (fault-call:3 fault-nth:49): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:32 executing program 7: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) r2 = dup2(r1, r0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46040000000000000000000000000000000000000000000000380000000000000000000000000020000000000000000000000000000000000000008d0000000000000000008704000000000000bf0000000000009cdf"], 0xad) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) r4 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x80010, r2, 0x0) r5 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10010, r0, 0x61) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xf8, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f630c4002000000030000000000000003630840", @ANYRES64=r3, @ANYBLOB="09631040", @ANYRES64=r4, @ANYBLOB="030000000000000000634040020000000000000003000000000000000000000000000000000000000000000000000000000000004000000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[], @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="380000000000000048000000000000004000000000000000600000000000000040000000000000003f0be6b5e043910640000000000000000000000000000000"], @ANYBLOB="07630440020000000f630c400000000003000000000000000763044001000000046304400000000012634840010000000000000000000000000000000000000001000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000000852a627701000000", @ANYRES64=r5, @ANYBLOB="0200000000000000852a62770b000000", @ANYRES64=r6, @ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0700000000030000000000000000000001000000000000004a32734b93189757a19900b11ff01dbba557858b73df380e8b316c4952f7c9bf0c1b9815c24db0278e401aefb1466015c0f0b209978a04a62e5059f24c89bffe330a1442d58bc5ebc4501c731e73796ff25add371cdff43ed03ee8f377be2b"], 0x1e, 0x0, &(0x7f0000000380)="638be235a09aa165406a91b83cd01c076f1a73f9535ce9f0689a2850e599"}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000080), 0xffffff17) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000440)={0x1000000000006, 0x5, 0xfffffffffffff87f, 0x9, 0x2, 0x400}) socket$kcm(0x29, 0x2, 0x0) [ 344.687155] binder: 19272:19275 ERROR: BC_REGISTER_LOOPER called without request [ 344.699450] binder: 19272:19275 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 344.707622] binder: 19272:19275 got reply transaction with no transaction stack [ 344.715128] binder: 19272:19275 transaction failed 29201/-71, size 0-0 line 2763 [ 344.751388] binder: 19272:19281 ERROR: BC_REGISTER_LOOPER called without request [ 344.775301] binder: undelivered TRANSACTION_ERROR: 29201 [ 344.832606] FAULT_INJECTION: forcing a failure. [ 344.832606] name failslab, interval 1, probability 0, space 0, times 0 [ 344.843943] CPU: 1 PID: 19282 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 344.850863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 344.860208] Call Trace: [ 344.862803] dump_stack+0x1b9/0x294 [ 344.866542] ? dump_stack_print_info.cold.2+0x52/0x52 [ 344.871807] ? lock_downgrade+0x8e0/0x8e0 [ 344.875950] should_fail.cold.4+0xa/0x1a [ 344.880013] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 344.885122] ? block_commit_write+0x30/0x30 [ 344.889433] ? __find_get_block+0xa29/0xe50 [ 344.893744] ? graph_lock+0x170/0x170 [ 344.897532] ? __find_get_block+0x365/0xe50 [ 344.901844] ? __lock_is_held+0xb5/0x140 [ 344.905897] ? check_same_owner+0x320/0x320 [ 344.910206] ? kasan_check_write+0x14/0x20 [ 344.914426] ? rcu_note_context_switch+0x710/0x710 [ 344.919347] __should_failslab+0x124/0x180 [ 344.923574] should_failslab+0x9/0x14 [ 344.927364] kmem_cache_alloc+0x2af/0x760 [ 344.931520] jbd2_journal_add_journal_head+0x1e7/0x5c0 [ 344.936791] ? jbd2_journal_write_metadata_buffer+0xef0/0xef0 [ 344.942678] jbd2_journal_get_create_access+0x42/0x600 [ 344.947949] ? rcu_note_context_switch+0x710/0x710 [ 344.952870] __ext4_journal_get_create_access+0x46/0x90 [ 344.958235] ext4_ind_map_blocks+0x12e1/0x32e0 [ 344.962819] ? ext4_free_branches+0xb30/0xb30 [ 344.967322] ? perf_trace_lock+0x900/0x900 [ 344.971543] ? find_held_lock+0x36/0x1c0 [ 344.975598] ? graph_lock+0x170/0x170 [ 344.979391] ? graph_lock+0x170/0x170 [ 344.983176] ? lock_downgrade+0x8e0/0x8e0 [ 344.987335] ? lock_acquire+0x1dc/0x520 [ 344.991307] ? ext4_map_blocks+0x871/0x1b40 [ 344.995625] ? lock_release+0xa10/0xa10 [ 344.999595] ? ext4_es_cache_extent+0x6d0/0x6d0 [ 345.004255] ? rcu_note_context_switch+0x710/0x710 [ 345.009182] ? __might_sleep+0x95/0x190 [ 345.016274] ? down_write+0x87/0x120 [ 345.019980] ? down_read+0x1b0/0x1b0 [ 345.023705] ? graph_lock+0x170/0x170 [ 345.027506] ext4_map_blocks+0xe9e/0x1b40 [ 345.031645] ? ext4_issue_zeroout+0x190/0x190 [ 345.036126] ? __lock_is_held+0xb5/0x140 [ 345.040187] ext4_writepages+0x2494/0x4030 [ 345.044425] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 345.049166] ? perf_trace_lock_acquire+0xe3/0x980 [ 345.054005] ? perf_trace_lock+0x900/0x900 [ 345.058240] ? graph_lock+0x170/0x170 [ 345.062041] ? graph_lock+0x170/0x170 [ 345.065830] ? perf_trace_lock+0x900/0x900 [ 345.070058] ? find_held_lock+0x36/0x1c0 [ 345.074115] ? lock_downgrade+0x8e0/0x8e0 [ 345.078246] ? lock_downgrade+0x8e0/0x8e0 [ 345.082383] ? do_raw_spin_unlock+0x9e/0x2e0 [ 345.086782] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 345.091365] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.096898] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 345.102161] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 345.106917] do_writepages+0x9a/0x1a0 [ 345.110712] ? do_writepages+0x9a/0x1a0 [ 345.114674] __filemap_fdatawrite_range+0x333/0x470 [ 345.119680] ? delete_from_page_cache_batch+0xf70/0xf70 [ 345.125046] file_write_and_wait_range+0x98/0x100 [ 345.129878] ext4_sync_file+0x2ce/0x1470 [ 345.133926] ? ext4_getfsmap+0xd30/0xd30 [ 345.137974] ? add_page_wait_queue+0x2a0/0x2a0 [ 345.142541] ? current_time+0x180/0x180 [ 345.146517] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 345.151535] ? generic_write_checks+0x37d/0x5b0 [ 345.156292] ? up_write+0x72/0x210 [ 345.159817] ? ext4_getfsmap+0xd30/0xd30 [ 345.163865] vfs_fsync_range+0x140/0x220 [ 345.167916] ext4_file_write_iter+0x688/0x1420 [ 345.172495] ? kasan_check_read+0x11/0x20 [ 345.176643] ? rcu_is_watching+0x85/0x140 [ 345.180781] ? ext4_file_mmap+0x410/0x410 [ 345.184918] ? perf_trace_lock+0x900/0x900 [ 345.189143] ? expand_files.part.8+0x9a0/0x9a0 [ 345.193719] ? graph_lock+0x170/0x170 [ 345.197522] ? proc_fail_nth_write+0x96/0x1f0 [ 345.202005] ? proc_cwd_link+0x1d0/0x1d0 [ 345.206065] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 345.211585] ? iov_iter_init+0xc9/0x1f0 [ 345.215550] __vfs_write+0x64d/0x960 [ 345.219251] ? kernel_read+0x120/0x120 [ 345.223126] ? __lock_is_held+0xb5/0x140 [ 345.227281] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 345.232804] ? __sb_start_write+0x17f/0x300 [ 345.237114] vfs_write+0x1f8/0x560 [ 345.240642] ksys_write+0xf9/0x250 [ 345.244175] ? __ia32_sys_read+0xb0/0xb0 [ 345.248237] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 345.253846] __x64_sys_write+0x73/0xb0 [ 345.257719] do_syscall_64+0x1b1/0x800 [ 345.261592] ? finish_task_switch+0x1ca/0x840 [ 345.266070] ? syscall_return_slowpath+0x5c0/0x5c0 [ 345.270984] ? syscall_return_slowpath+0x30f/0x5c0 [ 345.275919] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 345.281269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 345.286107] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 345.291277] RIP: 0033:0x455a09 [ 345.294446] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 345.313657] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 345.321373] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 2018/06/05 23:22:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000002270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:33 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:33 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'eth0'}, {0x20, 'selinuxself'}, {0x20, 'vmnet0keyring)'}, {0x20, '/dev/md0\x00'}, {0x20, '/dev/loop#\x00'}, {0x20, '\\nodev,'}, {0x20, "706f7369785f61636c5f6163636573737df12c3a"}, {0x20, '/dev/loop#\x00'}, {0x20, '/dev/md0\x00'}], 0xa, "beef8a9be091cf74246466cb2f497931a87694f84fad6f2d5659f6060f4106"}, 0x93) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) ioctl$LOOP_CHANGE_FD(r1, 0x4c08, 0xffffffffffffffff) 2018/06/05 23:22:33 executing program 4 (fault-call:3 fault-nth:50): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:33 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000007000/0x5000)=nil, 0x5000, 0x2, r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="920fc8"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 345.328626] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 345.335891] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 345.343148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 345.350409] R13: 00000000000007b1 R14: 0000000000700938 R15: 0000000000000031 [ 345.364377] ENOMEM in journal_alloc_journal_head, retrying. 2018/06/05 23:22:33 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000ffffff9e270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 345.476631] binder: 19293:19299 ERROR: BC_REGISTER_LOOPER called without request [ 345.485959] binder: 19293:19299 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 345.494988] binder: 19293:19299 got reply transaction with no transaction stack [ 345.502511] binder: 19293:19299 transaction failed 29201/-71, size 0-0 line 2763 [ 345.516757] binder: 19293:19301 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 345.548947] binder: undelivered TRANSACTION_ERROR: 29201 [ 345.560381] generic_make_request: Trying to write to read-only block-device loop0 (partno 0) 2018/06/05 23:22:33 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x96b6, @loopback={0x0, 0x1}, 0x1}}, 0x1, 0x0, 0xfffffffffffffff8, 0x3, 0x8}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e24}}}, 0x84) r4 = getpgrp(0xffffffffffffffff) r5 = getpid() perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f0000000000)={r2, r1}) 2018/06/05 23:22:33 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) prctl$setmm(0x23, 0xb, &(0x7f0000950000/0x1000)=nil) syz_init_net_socket$nfc_raw(0x27, 0x1, 0x0) [ 345.661350] FAULT_INJECTION: forcing a failure. [ 345.661350] name failslab, interval 1, probability 0, space 0, times 0 [ 345.672756] CPU: 1 PID: 19311 Comm: syz-executor4 Not tainted 4.17.0+ #85 [ 345.679693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 345.689048] Call Trace: [ 345.691651] dump_stack+0x1b9/0x294 [ 345.695282] ? dump_stack_print_info.cold.2+0x52/0x52 [ 345.700557] ? __kernel_text_address+0xd/0x40 [ 345.705065] ? unwind_get_return_address+0x61/0xa0 [ 345.710015] should_fail.cold.4+0xa/0x1a [ 345.714088] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 345.719198] ? save_stack+0xa9/0xd0 [ 345.722827] ? kasan_kmalloc+0xc4/0xe0 [ 345.726705] ? kasan_slab_alloc+0x12/0x20 [ 345.730848] ? kmem_cache_alloc+0x12e/0x760 [ 345.735160] ? mempool_alloc_slab+0x44/0x60 [ 345.739481] ? mempool_alloc+0x18b/0x490 [ 345.743568] ? bio_alloc_bioset+0x384/0x6d0 [ 345.747888] ? ext4_bio_write_page+0xb09/0x1565 [ 345.752551] ? mpage_submit_page+0x15d/0x270 [ 345.756958] ? mpage_map_and_submit_buffers+0x52e/0x9b0 [ 345.762315] ? ext4_writepages+0x262b/0x4030 [ 345.766730] ? do_writepages+0x9a/0x1a0 [ 345.770700] ? __filemap_fdatawrite_range+0x333/0x470 [ 345.775883] ? file_write_and_wait_range+0x98/0x100 [ 345.780902] ? ext4_sync_file+0x2ce/0x1470 [ 345.785145] ? vfs_fsync_range+0x140/0x220 [ 345.789369] ? ext4_file_write_iter+0x688/0x1420 [ 345.794205] ? __vfs_write+0x64d/0x960 [ 345.798093] ? vfs_write+0x1f8/0x560 [ 345.801791] ? ksys_write+0xf9/0x250 [ 345.805495] ? __x64_sys_write+0x73/0xb0 [ 345.809564] ? graph_lock+0x170/0x170 [ 345.813382] ? print_usage_bug+0xc0/0xc0 [ 345.817445] ? __schedule+0x809/0x1e30 [ 345.821334] ? graph_lock+0x170/0x170 [ 345.825127] ? __lock_is_held+0xb5/0x140 [ 345.829196] __should_failslab+0x124/0x180 [ 345.833431] should_failslab+0x9/0x14 [ 345.837232] kmem_cache_alloc+0x47/0x760 [ 345.841295] ? rcu_note_context_switch+0x710/0x710 [ 345.846226] ? rcu_read_lock_sched_held+0x108/0x120 [ 345.851236] ? mempool_free+0x370/0x370 [ 345.855214] mempool_alloc_slab+0x44/0x60 [ 345.859369] mempool_alloc+0x18b/0x490 [ 345.863264] ? mempool_destroy+0x30/0x30 [ 345.867346] ? kasan_check_write+0x14/0x20 [ 345.871586] ? bio_init+0x138/0x250 [ 345.875220] ? bio_add_page+0x3b0/0x3b0 [ 345.879196] ? kasan_check_read+0x11/0x20 [ 345.883359] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 345.888557] bvec_alloc+0x12a/0x2d0 [ 345.892184] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 345.897202] bio_alloc_bioset+0x455/0x6d0 [ 345.901362] ? bvec_alloc+0x2d0/0x2d0 [ 345.905156] ? balance_dirty_pages_ratelimited+0x1f50/0x1f50 [ 345.910957] ext4_bio_write_page+0xb09/0x1565 [ 345.915464] ? ext4_io_submit_init+0x90/0x90 [ 345.919870] mpage_submit_page+0x15d/0x270 [ 345.924097] mpage_map_and_submit_buffers+0x52e/0x9b0 [ 345.929285] ? mpage_process_page_bufs+0x600/0x600 [ 345.934230] ? ext4_issue_zeroout+0x190/0x190 [ 345.938727] ? __lock_is_held+0xb5/0x140 [ 345.942802] ext4_writepages+0x262b/0x4030 [ 345.947064] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 345.951823] ? perf_trace_lock_acquire+0x4f1/0x980 [ 345.956758] ? perf_trace_lock+0x900/0x900 [ 345.960985] ? perf_trace_lock_acquire+0x4f1/0x980 [ 345.966001] ? graph_lock+0x170/0x170 [ 345.969820] ? graph_lock+0x170/0x170 [ 345.973621] ? perf_trace_lock+0x900/0x900 [ 345.977875] ? find_held_lock+0x36/0x1c0 [ 345.981942] ? lock_downgrade+0x8e0/0x8e0 [ 345.986092] ? lock_downgrade+0x8e0/0x8e0 [ 345.990247] ? do_raw_spin_unlock+0x9e/0x2e0 [ 345.994646] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 345.999254] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.004800] ? wbc_attach_and_unlock_inode+0x643/0x9e0 [ 346.010079] ? ext4_mark_inode_dirty+0xb20/0xb20 [ 346.014867] do_writepages+0x9a/0x1a0 [ 346.018657] ? do_writepages+0x9a/0x1a0 [ 346.022640] __filemap_fdatawrite_range+0x333/0x470 [ 346.027659] ? delete_from_page_cache_batch+0xf70/0xf70 [ 346.033052] file_write_and_wait_range+0x98/0x100 [ 346.037919] ext4_sync_file+0x2ce/0x1470 [ 346.041987] ? ext4_getfsmap+0xd30/0xd30 [ 346.046057] ? add_page_wait_queue+0x2a0/0x2a0 [ 346.050634] ? current_time+0x180/0x180 [ 346.054599] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 346.059607] ? generic_write_checks+0x37d/0x5b0 [ 346.064272] ? up_write+0x72/0x210 [ 346.067806] ? ext4_getfsmap+0xd30/0xd30 [ 346.071864] vfs_fsync_range+0x140/0x220 [ 346.076006] ext4_file_write_iter+0x688/0x1420 [ 346.080593] ? ext4_file_mmap+0x410/0x410 [ 346.084747] ? perf_trace_lock+0x900/0x900 [ 346.088982] ? expand_files.part.8+0x9a0/0x9a0 [ 346.093562] ? graph_lock+0x170/0x170 [ 346.097364] ? proc_fail_nth_write+0x96/0x1f0 [ 346.101859] ? proc_cwd_link+0x1d0/0x1d0 [ 346.105927] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 346.111567] ? iov_iter_init+0xc9/0x1f0 [ 346.115547] __vfs_write+0x64d/0x960 [ 346.119269] ? kernel_read+0x120/0x120 [ 346.123170] ? __lock_is_held+0xb5/0x140 [ 346.127258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 346.133226] ? __sb_start_write+0x17f/0x300 [ 346.137540] vfs_write+0x1f8/0x560 [ 346.141068] ksys_write+0xf9/0x250 [ 346.144597] ? __ia32_sys_read+0xb0/0xb0 [ 346.148647] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 346.154176] __x64_sys_write+0x73/0xb0 [ 346.158070] do_syscall_64+0x1b1/0x800 [ 346.161956] ? finish_task_switch+0x1ca/0x840 [ 346.166535] ? syscall_return_slowpath+0x5c0/0x5c0 [ 346.171481] ? syscall_return_slowpath+0x30f/0x5c0 [ 346.176415] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 346.181777] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 346.186618] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 346.191797] RIP: 0033:0x455a09 [ 346.194981] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 346.214251] RSP: 002b:00007f0dd3650c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.221963] RAX: ffffffffffffffda RBX: 00007f0dd36516d4 RCX: 0000000000455a09 [ 346.229227] RDX: 000000000000fe63 RSI: 0000000020000000 RDI: 0000000000000014 [ 346.236489] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 346.243758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 346.251035] R13: 00000000000007b1 R14: 0000000000700938 R15: 0000000000000032 [ 346.281649] Process accounting resumed [ 346.330403] binder: 19320:19323 ERROR: BC_REGISTER_LOOPER called without request [ 346.354739] binder: 19320:19323 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 346.363129] binder: 19320:19323 got reply transaction with no transaction stack [ 346.370726] binder: 19320:19323 transaction failed 29201/-71, size 0-0 line 2763 [ 346.380721] binder: 19320:19330 ERROR: BC_REGISTER_LOOPER called without request [ 346.400821] binder: undelivered TRANSACTION_ERROR: 29201 [ 346.413223] Process accounting resumed 2018/06/05 23:22:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000f00000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:34 executing program 4 (fault-call:3 fault-nth:51): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:34 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c6530f6") 2018/06/05 23:22:34 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf200000000000000700000008ffffffad03010000000000950000000000000071230000000000006703000001000000670300000100000067030000010000f167030000b600000061124c00000000006113500000000000bf2000000000000007000000080000003d03010000bd00009500000000000000712400000000000067040000050000007704000001000000770400000100000077040020010000007704000001000000b7000000000000009500000000000000c739a7291846478dfd914d1cda389432611721c6ca42bb397a0dcc52dbeb2ca273adbee522c90f4a58e5d3c55b6f4e57"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2018/06/05 23:22:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:34 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x41) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2b6de56d6f7279202b696f2086d8f729181904b5c4e65c49184b6b640336a48a21ce5c1fa689f866cfee261e9a42e1b1e7005398fc5553ef5d456fe2e7f2"], 0xc) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000001dc0)={&(0x7f0000001c00)={0x10}, 0xc, &(0x7f0000001d80)={&(0x7f0000001c80)={0x14, 0x0, 0x0, 0x0, 0x0, {0x2}}, 0x14}, 0x1}, 0xc707b536f76772b6) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000080)={0xa9, @broadcast=0xffffffff, 0x4e24, 0x3, 'none\x00', 0x2, 0x0, 0x33}, 0x2c) write$cgroup_subtree(r0, &(0x7f00000000c0)={[{0x2b, 'rdma', 0x20}, {0x2f, 'rdma', 0x20}, {0x2f, 'cpu', 0x20}]}, 0x11) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000040)=0xe8) bind$packet(r0, &(0x7f0000000240)={0x11, 0x7, r1, 0x1, 0x4, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) socket$inet_tcp(0x2, 0x1, 0x0) 2018/06/05 23:22:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000f000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 346.597405] binder: 19344:19349 ERROR: BC_REGISTER_LOOPER called without request [ 346.623504] binder: 19344:19349 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 346.631851] binder: 19344:19349 got reply transaction with no transaction stack [ 346.639413] binder: 19344:19349 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:22:34 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:34 executing program 5: r0 = socket$kcm(0x29, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000280)) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x7002, &(0x7f0000000040)) 2018/06/05 23:22:34 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x2000400) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_bt(r2, 0x8907, &(0x7f0000000000)) [ 346.651272] binder: 19344:19355 ERROR: BC_REGISTER_LOOPER called without request [ 346.673201] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000c70300270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:34 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 346.846973] binder: 19369:19375 ERROR: BC_REGISTER_LOOPER called without request [ 346.856645] binder: 19369:19375 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 346.864813] binder: 19369:19375 got reply transaction with no transaction stack [ 346.872349] binder: 19369:19375 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:22:34 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2201, 0x709000) [ 346.916650] binder: 19369:19382 ERROR: BC_REGISTER_LOOPER called without request [ 346.991602] binder: undelivered TRANSACTION_ERROR: 29201 [ 347.595614] Process accounting resumed [ 347.632568] Process accounting resumed 2018/06/05 23:22:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='shreaded\x00', 0xfe63) 2018/06/05 23:22:35 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = dup2(r0, r0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") unshare(0x2000400) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_bt(r2, 0x8907, &(0x7f0000000000)) 2018/06/05 23:22:35 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7f, 0x10000) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.stat\x00', 0x0, 0x0) fcntl$setpipe(r1, 0x407, 0x40) r2 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x2, 0x82) ioctl$LOOP_SET_STATUS64(r2, 0x1277, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) 2018/06/05 23:22:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c6530f0") 2018/06/05 23:22:35 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000020000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000f00000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:35 executing program 7: r0 = socket$kcm(0x29, 0x2, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f00000000c0)={0x5ba, 0xffffffff, 0x80000001, 0xffffffff, 0x4, 0x5}) ioctl(r0, 0x8912, &(0x7f00000001c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x101000, 0x38) getsockname$inet(r1, &(0x7f0000000100)={0x0, 0x0, @rand_addr}, &(0x7f0000000200)=0x10) setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000180)=0x1b, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, 0x19) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x2c, &(0x7f0000000080)={0x400002}, 0x4) 2018/06/05 23:22:35 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:35 executing program 5: sigaltstack(&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000000)) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={r0, 0x6, 0x1, 0x1000, &(0x7f0000000080)=[0x0, 0x0], 0x2}, 0x20) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_rfcomm(r1, &(0x7f0000000640)={0x1f, {0x0, 0x0, 0x0, 0x7}}, 0xa) [ 347.816962] binder: 19408:19419 ERROR: BC_REGISTER_LOOPER called without request [ 347.827128] binder: 19408:19419 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 347.835324] binder: 19408:19419 got reply transaction with no transaction stack [ 347.842852] binder: 19408:19419 transaction failed 29201/-71, size 0-0 line 2763 [ 347.856128] binder: 19408:19422 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 347.888685] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='thryaded\x00', 0xfe63) 2018/06/05 23:22:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000003c700270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:35 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 348.059425] binder: 19438:19444 ERROR: BC_REGISTER_LOOPER called without request [ 348.079878] binder: 19438:19444 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 348.088146] binder: 19438:19444 got reply transaction with no transaction stack [ 348.095664] binder: 19438:19444 transaction failed 29201/-71, size 0-0 line 2763 [ 348.105694] binder: 19438:19447 ERROR: BC_REGISTER_LOOPER called without request [ 348.124363] binder: undelivered TRANSACTION_ERROR: 29201 [ 348.722669] Process accounting resumed [ 348.760597] Process accounting resumed 2018/06/05 23:22:36 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x5) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000032c0)=@getlink={0x2c, 0x12, 0xf31, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4, 0x12}, @IFLA_MASTER={0x8, 0xa}]}, 0x2c}, 0x1}, 0x0) 2018/06/05 23:22:36 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threadyd\x00', 0xfe63) 2018/06/05 23:22:36 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:36 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\n') 2018/06/05 23:22:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000200270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:36 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x30) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") process_vm_writev(0x0, &(0x7f0000000180), 0x10f, &(0x7f0000000440)=[{&(0x7f0000000280)=""/195, 0xc3}], 0x1, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa000000000008) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf) mlock2(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x0, 0x40000000000031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) accept4$bt_l2cap(r1, &(0x7f0000000200), &(0x7f0000000380)=0xe, 0x80000) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@random={'system.', '/dev/binder#\x00'}) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="040000000000000062a6986836d12aca5f2d7a11bad08317aa0401688fd38cf01c5280bcef1a27544500dfd48ba44aa521bbe56bbd70da5a41aa25316bceb59346e70d1f1c4feb30e7249f799d7c217f34b2b8f7df8fff999197a575a8f504e5dece78db40eafc08953a119ebad65e14c865f40fe1782deeb9871a2b48402cf130bf8d61d04b84672cd351cf5559aee178157ed5ec631f1f80f47f55cbbcb0b4e5534550c27f14030c6e33a696b4375601d628b40006a89307df5f9f997cfa708e582a2c635b04fd58597e0a2ec8993b03e8b8"], 0x0, 0x0, &(0x7f00000000c0)}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000180)={@remote}, &(0x7f00000001c0)=0x14) 2018/06/05 23:22:36 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000000f0270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:36 executing program 5: socket$inet6(0xa, 0x2, 0x1) [ 349.020490] binder: 19473:19482 ERROR: BC_REGISTER_LOOPER called without request [ 349.055412] binder: 19473:19482 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2018/06/05 23:22:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 349.063617] binder: 19473:19482 got reply transaction with no transaction stack [ 349.066135] binder: 19470:19476 unknown command 4 [ 349.071121] binder: 19473:19482 transaction failed 29201/-71, size 0-0 line 2763 [ 349.074355] binder: 19473:19486 ERROR: BC_REGISTER_LOOPER called without request [ 349.079878] binder: 19470:19476 ioctl c0306201 20a20000 returned -22 [ 349.102110] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:36 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="746872656164656404", 0xfe63) 2018/06/05 23:22:36 executing program 7: prctl$setmm(0x23, 0x9, &(0x7f0000ffd000/0x3000)=nil) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x6, &(0x7f0000001400)=[{&(0x7f0000000080)="5359e139c1a5abc466ba5e74b3bbbf71b7ee4008cd9e562f0c7e81efebf0b0191b85ca7a226208fd4492857131", 0x2d}, {&(0x7f00000000c0)="e76a38973c73dbb83ba298f5c8674934da9f88b3be0be886bc959fd9550fb1c3efd4f258ba9314c81d9b68fb4e22857678526c7501107deb9027379253ba03ef61a340fd04ed1750d5aff919e3239fd57c31d14d217bc5a7f82de07a75bb5aacf88547218c375ac41eb624a056aefcd82263c10747223b92f7f93ed8fdd22ef1379d", 0x82, 0xbd22}, {&(0x7f0000000180)="2cb00d2e99991733ed96a1c13ec7012c4844533a2d44b97cbc835d44506a78f5361891d48c9a8ca6f20787b34b0530f9beb844512bde42c78947010a79e8abea15b183a0e87fc5c55b57e3868634db38bfd5495ec6188f1e860451b66609edcc5e2c8e4c54d03393661185ac6fa9720adb625cb2bcabe2f069ce8f17ed9e05a40dd5c17d645f80b66c28d7fbd83b97174a9323f9e9c0f3cd04818afc89c804d380ebc4e919f1ab1b0dba99bc5b247ae4f5bfb0dda0a4b5c779fe69d7699a55002b8fbeeca879b44576f4fbe732000f98b3b39099613459724e3870bc2b6b2cfe5ba3f42af5bcd3f325cce7fd08fbdde940ed8e0381ea0a132c66c8241fad", 0xfe, 0x2}, {&(0x7f0000000280)="64ca3d6c341f7d45727762283d8b38630f0c33de1c01ce16e3edce746ab50f15d8f0c0908d2f1175634f5c50fea946da095a875a146c68365ef2319f94747a2092345f0365a8b8e1badfad2425187fbd8aa15ba0969a7e0083b1148fb86c1272c4c3182461a300752e7c6c7abae813081e15577daa3f0248324336bf8077f9f40d76150eca4c17909e383a18ab8c3d0c9070c3f80bf4167a3f6b85c46ba4755d", 0xa0, 0x5}, {&(0x7f0000000340)="dffeaf4587758a6e2cccb6b847da278c3c89a74cd594007b892bff03adb30c0c84db09bdd8d568fa12a557e010f0b952ad3789cbf6d700fce86b39eae7187d37bf2d51ca45810e0c67e4ffe7158d863994049870f62b0bc5640655ed600b24aa52584c573f0b067cb1f143a5c7415a4b6f53f46b91464cdd60b595e15a5559e1a8c644c3684330c562089b1f114cc8e8f3302b87efb2fffa82693eca62cf7c4fff5f309cca2f72c266b2bdefb3c78262f7f12310dedad433461856a1d449", 0xbe, 0x49}, {&(0x7f0000000400)="d30ca73fb67e40d5a7bee851dfa671a3924bbc9fa2aabc4a8532f24d4d623df578c4c924d2503d9f56cc57907949224fca2e2d268c55361e50ef7a9daf1aa4449ab5023b754badf2bc857546089d12e6a118bb809cea4badebac38ab321a56b1f65c2d45d6e2f317819b2471790e61e6aa29777604d7977d18904e857221e2416a24f6d12c2cb7eb99083349f5569dc56cd2f580d5aa02224820f6f0291354ecebbca205ab0bb5da0a8d82bcf2a1576b9ac468596bf7eb3e355532a253040444f9dd77c2e9ee53a98dca9ed33270c1c3e725ef58c46e133719afe5fb2b09712fa08dfe035348de8f3645741f0ce7e942f10262cb7cfb5ce7e6ffa8696985391b650d9656258a80f04a054e3faa96f94812e3217f30760ece05b9344ba03cf76f4cd926c5fa2a05d0b7ed69513f7f02d16af3e55b583253a3470ead1170266e486749ecb8c7e7f6ccb9ceeffe4fc3aa5db1ac27c7ff8e6f0e96bcfba3c27417ccceb520d996f467f6ecedf56aef69dad628f0503bbcebf0be64982bc2aab4270d72e83608e7c7cfa3712f0a8ef1f8e64ee5df81b16098e4ebaa7906e38e7dcb2833989fac381c842aae84aa9d3cfea8556774e7a20959bec1e78e688b79ca77bf65ac69bf3a7ce7a490e38dbc6d4adb0441e149b0acd107d1e04df7ef9e77f1d0d04e09ee40d9fc9a70adb47d6c22357df5059454f1b454023a889dc0764cf3efbea2f4a670433cb63356539dd4facb86f9c5c32c3780dfd9d2f3cb930212d9290d75ebbd9f42c3d7b6f8e960d38feff669ce4264905df9821fb74d99ee0aaf7494d0a5a34b0cf9d6063f00d1224e00437bae62425a9c302d04158bb7832d207e6958ebdd453f6317cd7e0ddb493417aa178a54c383533fed28df3a43cd2d5e539af114238cfa8a468abb29a50ccc03f13ca00fc25e1de62092ecccbaa8953c8003e81bf6fc0d8aa0711fc00f81a0636d40ee193b9684ca6fd7e730ddb892af9eb194babe84fd70405d0b00e29adbb022e9dd236e97d2f90035df6800de508b452837b376dd63bda1d91496ec453b3d5ea3c5cedf9943fb44bb679edd90c10e2039970b3f5fa78e5e90bc458f61cdb88db327fb609e5b81720c66f9a7a1d83fc5647087ad1a8a296da470c7fe03c4d5c14ffdcdaf2cb379dc869bf4156a44bf8f8367d296ad6eed2fc794d65a81d74ca077f79c219ea7f4e0d6aea869565c6a6651120488cdda8c7b325254354d7c7532618bd81c54540e69d101caae1740a364843d504fee8823f6db91307ac2cffec9467f4d6d55e09dd25538cc99cb7a156b3b2858d6aa54e9a0ee82ea1b7e53f2ed2c2aaf1b846c1c205d6dc38384986c322261c7b030fe7ab75dcc521f469369d88f02cf76a974bbd5d989ceaa96c1e9230b20e50b3667756b2f406d59f8c49e7125aae9140ec14f681ae0f8246a116471f7427207fc1d6eaac96504dadc38167695213a14991d6976edf847be5ad98d1d3a1de736dc86001255992366f17cdd80a7ad21337e225b0aba9b606576f595a60f58ec0e89284dea8a3a1861389fc1b49518bbc44b017127b864544ca774c60b426c9d0c65da5d2736294b7d6422e2632c143e3b08acb35f6efee6574827a683a74d48785e182bc461ba629d3d06370d33c7a2e0ace70a43ad292b1e8571449299ec2298794fb6a3115509eee7ccbe901a9e6ab272db81eeb57a396e489ed15b461808f55ae883e99f6b480db79c4384bc77254b036feca297980f1f4da5e603caa3255c7034bb4590022eda769ab325c41ae343281c870757fcfa16ef3545a25941a0e6219961c188dbef79c5ce7fa460117e098bc68d4591f942bd6d8bd7c70a50e0bf110a5dc681eddbe19a0afc77fb5e8c7e08d58635f2be9901b67cc206b85b23fe973cc3351f5088a6a1b354386bde378552856d08512818a92247c0fb4ca0581b6bda6001e3fdf4b61a5f027a333ecc3b68e74d6a8e2fd0ec56a3e846d4b3c159c6321a57d035fce91c1ee8f68175fd742bd8f4b26056d0cce1fc96bb75055e4f4f9917d2d78383adf6d112bc8a360ec1406e2f8c51babf604b52330fa21e27388cff56b4410ab087ebbed033e61e345d49695254eb6919604e5b00c7c20dc713d42766c734c813d2ef4b6e2d8318117b3c0e07107e5c9cfa558b06ef4d1cf18d9812bd768942177869e12271cc095c25523eb9be2e4b5e74123100a20628c1ae08067eea11e3198950d66466cadac68934ccdf374f4f9772a3832e0797e169c2e57d40b675601792c655eee7b0a16f32bfe7a4de151775f2b805244b7adee633a3c02f366e5603f4e238bd551d86b4f138d4504dfa2bbc4f90a77d3d981a74a8c169faa303b196c268332390f4f6e7407b223cd4f3309a72dfb1c4f84e6d84869d78c27fec79b7086ba3b12cd331c9a951c0c1d0362cd02b22bcdd55292743749b9d9666b69c3723832db55f24e15a2fe4405fc4b22761f8ae924278802f969375752db30f4d0756678569348f64ed74fbdf6b13f160e7984434de0819a6b18bcaf2b11866874b84c6131c208eb8cf64681a0172f0c3b060163a3d698ad5feb70ed62759297759161055b6bd1a2c73c51ef4a915832103662f37da2e0af03637beef126f3a7d290e0c57a8f2227a2592df6d8598b26f7606c70bf74729518891cb21a82cb905903ac137aa845cf8e772fa3105c130b0137080b900c8a5fd45c6fb969ad13ad50d575a8c1e789b24997c7e489eec619db34d3f2b3adceb18f47f7d3f575b257bd73c2633e930d786f3d60c0a8114a80522d94f2c9ffdcc2b4c3583b1c2a4ce2be2ea8a25361194f563ab5be908249687898dc66b748a13e63a2162fe982ff9af107e169788c3ee7ea4c26b6a278e0ae019e953fd40de39edb43d0e12b14397740ddd6a56f0683f2867f1f9fa7f03d325e897d6fa22bf3eb5f05c63bfce427da14a9b1fe76d2487be324820602b12c343d8a771111d78cae13f48ed84bcdddd96f3f3b29e645e461b6b7246c5ff90ccd6777f9a1247f60f1307bda59ce30edacae8dfe8ea7dc4508576dacf85e0d7781779a36cc1dab1ac1ea7ef78781c17a54a3a6447e420caa36c877993dacee921d247b1db8893b55a05e67ffabfff144c782f79a22d12ea7d5a4ab466211d6d739a6e8f414a7e630ebdba97963c40ef6babf904120d81bc84811c8509d3febcd08a7b72920862ce2b089e2515558c0bd52d49f2c1eafb6880fa26b6439fd38c609422ef2fdb8fd7307205413b2ee91407c1e8858c04291410039605fecfe2e86f67a02f9947ac1990829c038f8f6135a00a486bc48c5947a099e4d49dc3838169de99f92d6160ee531e52a8bd4e143b60ca9a3f2dda45acddb8553a275898ad3dc42e372791a77e05f7a63665f7de6518185a3e92b632d5aede7770d7a60ed4d28b2bff1a255307994e3c85b1f6de0a4fd12d8af9227ff4dd20e4c5e4218e9f38a9b0699b22132abbd9a44569a64a08674be05408847bb5307f97c5ec7f57b184c37ff7859a743b3b05eb15d60f4ed67304d530c7eccfdb5cf630b5c89bfd70a07f1c7abe13d527bac948171ca4a53991dde2d5feb081fef2c5851c6db342eda9897a881dfbc6e680757aa4f59bfaf90737d14823180b675d2449114bbc4391192a9b38b12c01f63f5d381ab6c074b01452522b55d058400ff32df8ec97b3f7bc29980ed739176c2ddbba47d335f27d317a5cb090b5244e6cf8e0bd12e4dc1e1b79b3ed3c6eb97f9a91f5634dd89c2f224ba1988e18f9e6a66ce9a031e4fbb18b00af3038b576718a9e3adb30a6e88b751c264ae68849dbc6cc965ce6dd09a14d27789f9b179b49d51c68d14aa0ff6b352c9c6307ff805946274cea0b683617dedfca7a664f7a8ac9383c3c61d08e327c6ca267e1025ec4c1b2e0bb9ab6e6c6eeeda741f2a19d7cfa03e6a92ee4b2a3badbe3635edede78944143dbf2ea8dc60bd98fbd5e9266db03d94480dc6dc88e66d9021db530e64341cb2ae0c513096e9376c71293a27c1a2518bbdf4d8cacae3d132ead4533e885785ce241edb57c443b8fc5e433b79f8449ad19434e79a38924061b59f8d3a197675492fde6a7c1531254698c8b208c55c171391becfcf9e4e004ff40f26682ca823097f3332fc10b97c27b3be03a328a684370782f921a9bbcd36c74bd91fc170a6f73d79eb328516a0f1554ab46769df9187554abfa18696be766a67ae1c479012b578f2ae24e3d306364c3f4af7e8551ed5db2e2eace4f2f391d5d319925286940a814e370a460bda76bbd8d3409f813fd3892b179c036971c77a06471967a9cdec9cacabc83eb4c6b447f85720999523987ad813cf2f512eb2d9842d948965a9b9e31ff331f4c52e5d087b72a6b22492de000f013ea7c7268a68efe637dd81155ce847b4bfc4d2d598eedc11b5ba24fc073ffe593ef0e221d64c495b4b6924acfca86f690664c129f8e3855bfb9220de1f88799e1a0c98ae39d8ca49787ea790b8384d82f8e130e7b3cb06cf35dc127bb4b4db4a7e0d55ee9edd00b387b417d963b5d0fe38ad7c454e143add4fe2af3c5b6470d91315acbc7bfa60ad095e395dad68839871933e31fd5a31433605e0af78fa468c6127088d2fbf3dcee9525f23a8d8f97dd9b5950df695612a80aafc7a31cd8bbcbfc1a7de4f15245d710d0c5aa5a1e6fbb1a0e5d10bc13b8ffba6c9705b0136bca28b918e9cf4c7e06cb50c09f239216b853d1d4dc6693e8bc6312ce97d700018d659bb9f44db28a16ef2dd42ae87bb7d7dad8691aaa98309cdf78dbf7fefc682eeeb72810bdedcb9f94f0e4939b66e9735afae8b2dbc257fb90b96b8e4fa6f3bf1fcc2615bc44683b02fbed37c2be9ba24f344051f6302e20b1ad0335ead01085ddcc273c2982e45579d51d0afd390331ec1b6423ce2188aabdc4ef96d98ad6b26cafdde0adda164f6c657e85c29deecfe444ae35534bc696255754cff6c284326bf937e260c70a96fee38fa1ebc3d429d2aa33040ddb2e0e78fd6862b2bc22b178582dbc5327e70fbf151f3a7bba8ce41d662993389d99bc740ae83afe0518872586f5c3b636f57c78bc97ee94daf6b907581c7cadc4fbfd8b1d3d1e51057de407830af239982c0de5cc5277acbb70a6ee234224b2dae6930e022a0cbc9af4770d72f5e1bb0e0ac6167b57a5c2c9b8ec193b236d8f425fd538e6296b401ca3dc696ce6154a1d9c9f92ea5509c04eda120b71b2f79d736ed45d4c28ce38b2d2851ec29ce7e0f594acf9c203d1b9651c0dd20b25b529ea9e40f8c9959109e2ccf2400f39c9e863d53e3c0794b91dd01a3cff7f4e6c180399d0717947760d5c7e8e996f274bc2f8e24e819f62d854cef2134679747493ccba6758259edaef9f6bb4ff309420d41814a94ff694a4bfc29fac893cac0eff01fbe639b2dad581894cbe3ee82ee839426d2f9f0ae4bfc2388d32bb08a6ca67cb6a55da83b32793fda0092a902a186f89b291227e57cbade8e3193e576274484c4037bcac706e5067866cc16b073476f8b2f663d4ad852a2c550f866a82b1f5730dc432ae8007b82e93e1a53125f3ba0e492a25f9864dfe56d5f7ad3d484da932da00b261822d0ac2dc40aec46600a927895d0132771049ef89ac5d88dc468010917325d5ba01ce22930bc5fb1ce2a2f5893230dc5d31f7f35626ed28c2158c3f5e66f8a796e360118f390926940ab0813e9ccb5fb10a34a8fecdc2dac11e7cf11994fc85d54da86554d0df6db69df77822343d752f9b13f3d057d0635462415cc3d26e3e", 0x1000, 0x8}], 0x200000, &(0x7f00000014c0)={[{@jdev={'jdev', 0x3d, './file0'}, 0x2c}, {@nolargeio='nolargeio', 0x2c}, {@noattrs='noattrs', 0x2c}, {@acl='acl', 0x2c}, {@grpquota='grpquota', 0x2c}]}) [ 349.141766] binder: 19470:19492 unknown command 4 [ 349.146960] binder: 19470:19492 ioctl c0306201 20a20000 returned -22 2018/06/05 23:22:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000f000270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:36 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 349.280367] binder: 19501:19506 ERROR: BC_REGISTER_LOOPER called without request [ 349.313790] binder: 19501:19506 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 349.322065] binder: 19501:19506 got reply transaction with no transaction stack 2018/06/05 23:22:37 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0x26, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES64=r0]}, 0x1}, 0x40000000000) mq_open(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0xbb6c}) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000009f7c)=""/132, 0x84}, {&(0x7f0000012000)=""/252, 0xfc}, {&(0x7f0000012000)=""/155, 0x9b}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f0000000000)=""/102, 0xfffffffffffffef8}], 0x5, 0x0) ioctl(r0, 0xc2604110, &(0x7f0000000000)) [ 349.329571] binder: 19501:19506 transaction failed 29201/-71, size 0-0 line 2763 [ 349.341345] binder: 19501:19514 ERROR: BC_REGISTER_LOOPER called without request [ 349.378076] binder: undelivered TRANSACTION_ERROR: 29201 [ 349.379739] REISERFS warning (device loop7): super-6504 reiserfs_getopt: the option "nolargeio" requires an argument [ 349.379739] [ 349.932274] Process accounting resumed [ 349.969865] Process accounting resumed 2018/06/05 23:22:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:37 executing program 7: syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000001500), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="7061b35d9437f39d972b72743d352c00"]) 2018/06/05 23:22:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:37 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000003c7270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:37 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="40df6b9bf31f9c6cc35a697e7991714870f2a24549f0b0b550a0f4d30fe2f00dc044b94f493a011d4718f09ee0764dff0580302cba69fd4cc6134272e061dfd674766d1df116b779886abbe92ca77d60c6f27244c74164c730966ac9e0f7bd48c4", 0x61}, {&(0x7f00000000c0)="19ee407a224f76a51a1d37fc109cee3d88d9a9c3d42212e5c5c835088ba938aaacb5284a82786e44a47111bba2915923eefc847741f3cd84c17351856e18d24d7df692d83d3239250ea21c223eaf1a1ffc4161d3f09b01b29186987e3a84aea1e6d970c4c8cc4ae83cc9a879fa004d3cbcb69f67244cac41dac4df43dcf1a779801dfbe2204bfa498b4be7b90ac14bdd1e30cb3f173f065017a172ec389f652a61e8fb2edab70f8e818a54f676648786e7a40bd178ee3ba147f276cdd43379d8d207f0be1553ee381952f424fbb4a7", 0xcf}, {&(0x7f00000001c0)}], 0x3, 0x8) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000240)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xfffffffffffffffc, 0xfff, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, 0x1c) 2018/06/05 23:22:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000c703270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:37 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:37 executing program 5: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x191000, 0x66ceec032d2511c9) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000000080)={0x0, 0xffffffff, 0x1, 0x92, &(0x7f0000800000/0x1000)=nil, 0x8}) mbind(&(0x7f0000868000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x8, 0x7fff, 0x4) [ 350.235521] binder: 19550:19556 ERROR: BC_REGISTER_LOOPER called without request [ 350.246066] hfsplus: unable to parse mount options [ 350.259752] binder: 19550:19556 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 350.268056] binder: 19550:19556 got reply transaction with no transaction stack [ 350.275578] binder: 19550:19556 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:22:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:38 executing program 7: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000040)=[{{0x77359400}, 0x1, 0x51, 0x2}, {{0x77359400}}], 0x30) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x7, 0x80) write$eventfd(r1, &(0x7f0000000180)=0x6, 0x8) fchmod(r1, 0x4) eventfd2(0x2, 0x80000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200000, 0x0) getsockname$netrom(r2, &(0x7f00000000c0), &(0x7f0000000100)=0x10) [ 350.287366] binder: 19550:19562 ERROR: BC_REGISTER_LOOPER called without request [ 350.290871] hfsplus: unable to parse mount options [ 350.320944] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:38 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000002270000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 350.475648] binder: 19578:19585 ERROR: BC_REGISTER_LOOPER called without request [ 350.513428] binder: 19578:19585 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2018/06/05 23:22:38 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:38 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000580)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xc, 0x2, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}]}, 0x2c}, 0x1}, 0x0) [ 350.521767] binder: 19578:19585 got reply transaction with no transaction stack [ 350.529273] binder: 19578:19585 transaction failed 29201/-71, size 0-0 line 2763 [ 350.554870] binder: 19578:19590 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 350.586595] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000000027fffffff000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:38 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}]}]}}}}}}}, &(0x7f0000000040)) [ 350.747459] binder: 19603:19605 ERROR: BC_REGISTER_LOOPER called without request [ 350.785718] binder: 19603:19605 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2018/06/05 23:22:38 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7ff, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000200)={"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"}) ioctl(r0, 0x8, &(0x7f00000007c0)="92f9afcabf362e92c15f917d7d294e555627548a5ea65e7925082de896104dceb60946ec6297692877ce27b6ed61c2928a26bf67e263f6e24c207639afc1d0d01df42d018295a4be4d6301ec78106aefd5d4dcffe915fd5b7b95040083c7bfc19f3d4fbb73f1a4180909252261d4bc35cc81ab9cda48d641d16ad0756a540aa824d416eeb609f7055a800c326c84afaa0f6839efed4837c823b81fae6e29cf3bcd1ecfa4d1c2d58f68ee5fba451d931c27e186fbb2083b404f118df66b6748f399a038144111eb83f2d9c9870c1430a8df45ffba01e483000000000000") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x90) close(r2) close(r1) [ 350.793997] binder: 19603:19605 got reply transaction with no transaction stack [ 350.801525] binder: 19603:19605 transaction failed 29201/-71, size 0-0 line 2763 [ 350.819628] binder: 19603:19608 ERROR: BC_REGISTER_LOOPER called without request [ 350.848545] binder: undelivered TRANSACTION_ERROR: 29201 [ 351.031131] Process accounting resumed [ 351.194454] Process accounting resumed 2018/06/05 23:22:39 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="00000212da7ba3fbfabb6b") setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000300)={0xb, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x108) r2 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0xbbe, 0x3) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000200)=0x1f004) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f00000004c0)) accept4$bt_l2cap(r3, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x80800) 2018/06/05 23:22:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000000027c703000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:39 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:39 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0xd07d020000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:39 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="746872656164656401", 0xfe63) 2018/06/05 23:22:39 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xfffffffffffffffd}, 0x1c) listen(r0, 0x100000000) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0xf90, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x8a00, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x2000000, 0x5, 0x80000001, 0x1000, 0x6, 0x7442, 0x0, 0x9, 0xfe2b, 0x3, 0x2b30}, 0xb) [ 351.856581] binder: 19634:19641 ERROR: BC_REGISTER_LOOPER called without request [ 351.870518] binder: 19634:19641 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 351.878701] binder: 19634:19641 got reply transaction with no transaction stack [ 351.886194] binder: 19634:19641 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:22:39 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x76, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x38, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000000027ffffff9e00ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:39 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7ff, 0x200000) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@can={0x0, 0x0}, &(0x7f00000000c0)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@remote={0xfe, 0x80, [], 0xbb}, 0x40, r1}) r2 = socket(0xa, 0x200000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="c626262c8523bf012cf66f69") getpeername$inet(r2, &(0x7f0000000140)={0x0, 0x0, @remote}, &(0x7f0000000280)=0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000005c0)={0x0, @loopback, @rand_addr}, &(0x7f0000000600)=0xc) getsockname$packet(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000680)=0x14) accept4$packet(r2, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000007080)=0x14, 0x800) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000070c0)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000071c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000007200)={{{@in, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000007300)=0xe8) recvmmsg(r2, &(0x7f00000093c0)=[{{&(0x7f0000007340)=@in={0x0, 0x0, @multicast2}, 0x80, &(0x7f0000008440)=[{&(0x7f00000073c0)=""/83, 0x53}, {&(0x7f0000007440)=""/4096, 0x1000}], 0x2, &(0x7f0000008480)=""/31, 0x1f, 0x8000}, 0x800}, {{&(0x7f00000084c0)=@rc, 0x80, &(0x7f0000008ac0)=[{&(0x7f0000008540)=""/90, 0x5a}, {&(0x7f00000085c0)=""/231, 0xe7}, {&(0x7f00000086c0)=""/218, 0xda}, {&(0x7f00000087c0)=""/217, 0xd9}, {&(0x7f00000088c0)=""/97, 0x61}, {&(0x7f0000008940)=""/127, 0x7f}, {&(0x7f00000089c0)=""/236, 0xec}], 0x7, &(0x7f0000008b40)=""/75, 0x4b, 0x3}, 0xce}, {{&(0x7f0000008bc0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000008e80)=[{&(0x7f0000008c40)=""/223, 0xdf}, {&(0x7f0000008d40)=""/222, 0xde}, {&(0x7f0000008e40)=""/31, 0x1f}], 0x3, &(0x7f0000008ec0)=""/152, 0x98, 0x80200000000000}, 0x6}, {{&(0x7f0000008f80)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000009340)=[{&(0x7f0000009000)=""/36, 0x24}, {&(0x7f0000009040)=""/218, 0xda}, {&(0x7f0000009140)=""/33, 0x21}, {&(0x7f0000009180)=""/248, 0xf8}, {&(0x7f0000009280)=""/182, 0xb6}], 0x5, 0x0, 0x0, 0xfffffffffffffff8}, 0x400}], 0x4, 0x40, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000094c0)={0x0, @rand_addr, @rand_addr}, &(0x7f0000009500)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a800)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a900)={'nr0\x00', r1}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f000000a940)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@dev}}, &(0x7f000000aa40)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f000000b5c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000b580)={&(0x7f000000aa80)={0xae8, r3, 0x0, 0x70bd2c, 0x25dfdbfb, {0x2}, [{{0x8, 0x1, r4}, {0x154, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7fffffff}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x3c, 0x4, [{0xcd5, 0x2, 0x8, 0x800}, {0x0, 0x10001, 0x7, 0xffff}, {0x927048c, 0x5, 0x6, 0x20}, {0x800, 0x4, 0x5, 0xa0a3}, {0x3, 0x100000000, 0x2, 0x101}, {0x2, 0x3f510eab, 0x0, 0x1}, {0x876, 0x1f, 0x9, 0x1}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r5}, {0xfc, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r7}, {0x150, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}, {0x8, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x980}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r8}, {0x138, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x9}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}]}}, {{0x8, 0x1, r9}, {0x200, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0x8, 0x8001, 0x7, 0x1}, {0xffff, 0x80000000, 0xfffffffffffffe01, 0xb0}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0xb4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r10}, {0x160, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}, {0x8, 0x7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}, {0x8, 0x7}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x3c, 0x4, [{0x4, 0x5, 0xffffffffffff31d2, 0x3}, {0x0, 0x7, 0x1, 0x7}, {0x9, 0x2, 0x7, 0x3f}, {0x1, 0x2, 0x5, 0xfffffffffffffff9}, {0x6, 0xfff, 0xd2, 0x10001}, {0x1, 0x9, 0x3f, 0x1}, {0x3, 0x0, 0xe36, 0x40}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r1}}}]}}, {{0x8, 0x1, r11}, {0x148, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x1c, 0x4, [{0x0, 0x80, 0xf3, 0x6}, {0x100000001, 0xc5, 0xfffffffffffffffd, 0x6}, {0x7, 0x9, 0x6, 0x2}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r13}, {0x7c, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x100000000}}}]}}]}, 0xae8}, 0x1, 0x0, 0x0, 0x40841}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0xfffffffffffffffc, 0xffffffffffffdffe, 0xffffffffffffffff, 0x1000000902d, 0x4, r0}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000a50fa79a000000006111000000000000000000000000000095002f6617655aeda3b0b04e184126b6f0086d8d50b7e537da000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffe, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0xffffffffffffffff}, 0x48) [ 351.906504] binder: 19634:19641 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:39 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 351.950496] binder: undelivered TRANSACTION_ERROR: 29201 [ 352.093210] binder: 19662:19665 ERROR: BC_REGISTER_LOOPER called without request [ 352.101520] binder: 19662:19665 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 352.109674] binder: 19662:19665 got reply transaction with no transaction stack [ 352.117178] binder: 19662:19665 transaction failed 29201/-71, size 0-0 line 2763 [ 352.126783] binder: 19662:19667 ERROR: BC_REGISTER_LOOPER called without request [ 352.145162] binder: undelivered TRANSACTION_ERROR: 29201 [ 352.709150] Process accounting resumed [ 352.872203] Process accounting resumed 2018/06/05 23:22:40 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:40 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f000002efe2)=[{0x0, 0x9}], 0x1) semop(0x0, &(0x7f000001a000)=[{}], 0x1) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0xb, 0x1) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000040)=0x7, 0x4) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f00d82c99240970") semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000500)) 2018/06/05 23:22:40 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000340)=0xfc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={r2, 0x6, 0x10, 0x1}, &(0x7f00000003c0)=0x18) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000000c0)={0x20, @time={0x0, 0x1c9c380}, 0xfff, {0x3, 0xffff}, 0x4, 0x800002, 0x2}) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x36, &(0x7f0000000240)=0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000140)="04010000008b00ddb8460900ffb25b4802938207d9033780398d5375a41640939029ef0712f295136f8f6575eb353c72e475f7fd54482c03ac4db09698c0e2d2000011000000fffba371917c4d7e459959e78aa4d5a68caf5a9290bf11dbb68e1934052f", 0x64, 0x0, &(0x7f0000000080)={0xa, 0x200000800, 0x5, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10013, r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x400000, 0x0) 2018/06/05 23:22:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000000027f000000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:40 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000000002700f0ffff00ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:40 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {}]}]}}}}}}}, &(0x7f0000000040)) [ 352.950567] binder: 19681:19688 ERROR: BC_REGISTER_LOOPER called without request [ 352.969581] binder: 19681:19688 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 352.977802] binder: 19681:19688 got reply transaction with no transaction stack [ 352.985309] binder: 19681:19688 transaction failed 29201/-71, size 0-0 line 2763 [ 352.995081] binder: 19681:19695 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:40 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:40 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14, {0x2, 0x4e23, @broadcast=0xffffffff}, 'ifb0\x00'}) [ 353.025943] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:40 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000100ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 353.158640] binder: 19710:19712 ERROR: BC_REGISTER_LOOPER called without request [ 353.187275] binder: 19710:19712 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 353.195505] binder: 19710:19712 got reply transaction with no transaction stack [ 353.203054] binder: 19710:19712 transaction failed 29201/-71, size 0-0 line 2763 [ 353.216265] binder: 19710:19716 ERROR: BC_REGISTER_LOOPER called without request [ 353.250898] binder: undelivered TRANSACTION_ERROR: 29201 [ 353.777123] Process accounting resumed [ 353.932344] Process accounting resumed 2018/06/05 23:22:41 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x3c, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:41 executing program 5: set_thread_area(&(0x7f0000000040)={0x4, 0x20000800, 0x0, 0x7fffffff, 0x4, 0x7, 0x0, 0xe027, 0x8, 0x5}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f00000001c0)={'bridge_slave_1\x00', 0xffffffff}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = getegid() r2 = getuid() syz_fuseblk_mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, r2, r1, 0x8000000000002, 0x0, 0x200060) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000100)='bond0\x00') socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)) 2018/06/05 23:22:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000200ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:41 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:41 executing program 7: umount2(&(0x7f0000000040)='./file0\x00', 0x4) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x511000) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={r0, 0x1, 0x1, 0xffd5, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000001240)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000000180)}}, {{0x0, 0x0, &(0x7f0000002bc0), 0x0, &(0x7f0000000080)=[{0x18, 0x29, 0x5, "f50f02"}], 0x18}}], 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x882, 0x0) 2018/06/05 23:22:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:41 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000000002700f0000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 354.124703] binder: 19740:19749 ERROR: BC_REGISTER_LOOPER called without request [ 354.139058] binder: 19740:19749 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 354.147316] binder: 19740:19749 got reply transaction with no transaction stack [ 354.154850] binder: 19740:19749 transaction failed 29201/-71, size 0-0 line 2763 [ 354.166553] binder: 19740:19750 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:41 executing program 7: r0 = socket$kcm(0x29, 0x10000000000005, 0x0) ioctl(r0, 0x6, &(0x7f0000000000)="00000000000000022409701eb85e1ce52c21f6ed8ed96f7544c7cddb975eac223d78b5021c3b33320d719a6ecda4720541c55cc7c777d7ef1889375d5e76ea22a6cb203c992bc0d4045d29a139b5515511c4f1923349b574") r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x41, "7126f49e11a61ce62e3747b01b044ddff86079a66aef7a33df0324dc05c6619d85a5fdc7756f7ada0d5561499e4190a2bf2d77bb878235f727ef76ab3d4c311dc9"}, &(0x7f0000000080)=0x49) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e24, 0x3ff, @ipv4={[], [0xff, 0xff], @rand_addr=0x8001}}}, 0x1, 0xff, 0x2, 0x2, 0x9}, &(0x7f0000000240)=0x98) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2018/06/05 23:22:41 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0xc408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:41 executing program 6 (fault-call:2 fault-nth:0): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:41 executing program 5: r0 = socket$kcm(0x29, 0x200040000006, 0x0) r1 = socket(0x9, 0x1, 0x80000001) ioctl(r0, 0x8912, &(0x7f0000000000)="0042fc2f07d82c99240970") r2 = socket(0xf, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0xe1a9}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r3, 0x9}, 0x8) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @rand_addr=0xbb}, 0x10) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000040)=0x1000, &(0x7f0000000080)=0x2) 2018/06/05 23:22:41 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="746872656164656410", 0xfe63) [ 354.207799] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000000027fffff00000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 354.426293] FAULT_INJECTION: forcing a failure. [ 354.426293] name failslab, interval 1, probability 0, space 0, times 0 [ 354.438012] CPU: 0 PID: 19768 Comm: syz-executor6 Not tainted 4.17.0+ #85 [ 354.444949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 354.454303] Call Trace: [ 354.456886] dump_stack+0x1b9/0x294 [ 354.460500] ? dump_stack_print_info.cold.2+0x52/0x52 [ 354.465695] ? lock_release+0xa10/0xa10 [ 354.469677] ? check_same_owner+0x320/0x320 [ 354.473995] should_fail.cold.4+0xa/0x1a [ 354.478063] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 354.483166] ? kasan_check_write+0x14/0x20 [ 354.487396] ? __mutex_lock+0x7d9/0x17f0 [ 354.491450] ? print_usage_bug+0xc0/0xc0 [ 354.495504] ? tun_get_user+0x1eca/0x4140 [ 354.499650] ? mutex_trylock+0x2a0/0x2a0 [ 354.503709] ? graph_lock+0x170/0x170 [ 354.507504] ? print_usage_bug+0xc0/0xc0 [ 354.511565] ? reacquire_held_locks+0xbc/0x3e0 [ 354.516134] ? alloc_set_pte+0x1013/0x1600 [ 354.520370] ? print_usage_bug+0xc0/0xc0 [ 354.524441] __should_failslab+0x124/0x180 [ 354.528665] should_failslab+0x9/0x14 [ 354.532460] kmem_cache_alloc+0x47/0x760 [ 354.536504] ? print_usage_bug+0xc0/0xc0 [ 354.540570] __build_skb+0xa3/0x410 [ 354.544200] ? skb_try_coalesce+0x1c70/0x1c70 [ 354.548679] ? print_usage_bug+0xc0/0xc0 [ 354.552738] ? __alloc_pages_nodemask+0xd70/0xd70 [ 354.557569] ? debug_check_no_locks_freed+0x310/0x310 [ 354.562750] ? __lock_acquire+0x7f5/0x5140 [ 354.566991] __napi_alloc_skb+0x19a/0x300 [ 354.571145] napi_get_frags+0x61/0x130 [ 354.575026] tun_get_user+0x1f42/0x4140 [ 354.579012] ? debug_check_no_locks_freed+0x310/0x310 [ 354.584204] ? tun_build_skb.isra.52+0x1dd0/0x1dd0 [ 354.589122] ? graph_lock+0x170/0x170 [ 354.592904] ? do_raw_spin_lock+0xc1/0x200 [ 354.597217] ? graph_lock+0x170/0x170 [ 354.600999] ? lock_acquire+0x1dc/0x520 [ 354.604974] ? __fdget_pos+0x1a9/0x1e0 [ 354.608854] ? find_held_lock+0x36/0x1c0 [ 354.612903] ? lock_downgrade+0x8e0/0x8e0 [ 354.617042] ? kasan_check_read+0x11/0x20 [ 354.621180] ? rcu_is_watching+0x85/0x140 [ 354.625328] ? rcu_report_qs_rnp+0x790/0x790 [ 354.629734] ? tun_get+0x22b/0x360 [ 354.633270] ? tun_chr_close+0x180/0x180 [ 354.637332] tun_chr_write_iter+0xb9/0x154 [ 354.641558] do_iter_readv_writev+0x859/0xa50 [ 354.646042] ? vfs_dedupe_file_range+0xa00/0xa00 [ 354.650782] ? rw_verify_area+0x118/0x360 [ 354.654928] do_iter_write+0x185/0x5f0 [ 354.658800] ? dup_iter+0x270/0x270 [ 354.662414] vfs_writev+0x1c7/0x330 [ 354.666033] ? vfs_iter_write+0xb0/0xb0 [ 354.670006] ? wait_for_completion+0x870/0x870 [ 354.674601] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 354.680139] ? __fdget_pos+0xd6/0x1e0 [ 354.683936] ? __fdget_raw+0x20/0x20 [ 354.687647] ? __sb_end_write+0xac/0xe0 [ 354.691631] do_writev+0x112/0x2f0 [ 354.695170] ? vfs_writev+0x330/0x330 [ 354.698959] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 354.704482] __x64_sys_writev+0x75/0xb0 [ 354.708449] do_syscall_64+0x1b1/0x800 [ 354.712326] ? finish_task_switch+0x1ca/0x840 [ 354.716817] ? syscall_return_slowpath+0x5c0/0x5c0 [ 354.721740] ? syscall_return_slowpath+0x30f/0x5c0 [ 354.726661] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 354.732035] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 354.736890] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 354.742075] RIP: 0033:0x4558c1 [ 354.745251] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 354.764472] RSP: 002b:00007fc36bf2eba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 354.772165] RAX: ffffffffffffffda RBX: 000000000000007e RCX: 00000000004558c1 [ 354.779422] RDX: 0000000000000001 RSI: 00007fc36bf2ebf0 RDI: 00000000000000fc [ 354.786690] RBP: 0000000020000200 R08: 00000000000000fc R09: 0000000000000000 [ 354.793956] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000014 [ 354.801210] R13: 000000000000073e R14: 00000000006ffe70 R15: 0000000000000000 [ 354.878887] binder: 19766:19775 ERROR: BC_REGISTER_LOOPER called without request [ 354.887171] binder: 19766:19775 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 354.895387] binder: 19766:19775 got reply transaction with no transaction stack [ 354.902888] binder: 19766:19775 transaction failed 29201/-71, size 0-0 line 2763 [ 354.917342] binder: 19766:19777 ERROR: BC_REGISTER_LOOPER called without request [ 354.944819] binder: undelivered TRANSACTION_ERROR: 29201 [ 355.006166] Process accounting resumed 2018/06/05 23:22:43 executing program 6 (fault-call:2 fault-nth:1): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000000027000003c700ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:43 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x6, 0x7f, 0x1, 0x6, 0x5, 0x4}, 0x4}, 0xa) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x101000) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x0, 0x1}]}) r3 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xff, 0x4000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000140)={0x3b, @empty, 0x4e21, 0x3, 'sh\x00', 0x20, 0x9, 0x8}, 0x2c) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000180)) io_setup(0xffffffffffffff00, &(0x7f00000001c0)=0x0) io_cancel(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x7f, r2, &(0x7f0000000200)="52d2e39fbddf74c6e4f39c4c3cb60287d02f524df30056c0bd49fca81ad26e2c809341ccf8200691ea3ccb342d09c691d6d49718757e2e412069ef79208d0e3d2f46824469f3d902172feeb8dbabcc1fd77f75b3fa0bd8f894a66de5df7ea2f918fd2feb1b118c7bbf56ba0d4ae67cea0b73e75fff08864bc62196e049ad49ef34c8c6a458d03c7ddd33ea313c60c0ea3c2104ce0ff3d2f112e8", 0x9a, 0xfd, 0x0, 0x0, r2}, &(0x7f0000000300)) ioctl$sock_netrom_SIOCGSTAMP(r4, 0x8906, &(0x7f0000000340)) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000380)={0x4, 0x4}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f00000003c0)="0f32640f0666b9d40900000f3266b8000000000f23d00f21f866351000000c0f23f80f09bad104b0d8ee2e0fc70b2e260fc71e0800baf80c66b806b4528c66efbafc0cb0dbee67652e0f01cf", 0x4c}], 0x1, 0x10, &(0x7f0000000480)=[@dstype3={0x7, 0x9}, @efer={0x2, 0xc000}], 0x2) r6 = syz_open_dev$admmidi(&(0x7f00000004c0)='/dev/admmidi#\x00', 0x0, 0x200) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000500)=r3) ioctl$TUNDETACHFILTER(r6, 0x401054d6, 0x0) r7 = getpid() sched_getparam(r7, &(0x7f0000000540)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000580)) readahead(r1, 0x9, 0xff) accept4$llc(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000600)=0x10, 0x80000) mmap$binder(&(0x7f0000ff8000/0x7000)=nil, 0x7000, 0x4, 0x10, r0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'team_slave_0\x00', 0x0}) accept4$packet(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000700)=0x14, 0x80800) sendmsg$nl_route(r4, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)=@ipv6_getroute={0x80, 0x1a, 0x200, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x14, 0x800, 0xff, 0x1, 0xff, 0x7, 0x400}, [@RTA_IIF={0x8, 0x1, r8}, @RTA_PREF={0x8, 0x14, 0x4}, @RTA_GATEWAY={0x14, 0x5, @dev={0xfe, 0x80, [], 0x14}}, @RTA_METRICS={0x30, 0x8, "3c80e70604b7c2b40e9102b067c67609574294d569a83f8b60bacd9e34eb820600080e58071a2701b21b"}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_IIF={0x8, 0x1, r9}]}, 0x80}, 0x1, 0x0, 0x0, 0x8080}, 0x0) setsockopt$RDS_FREE_MR(r6, 0x114, 0x3, &(0x7f0000000840)={{0x7, 0x6}, 0x63}, 0x10) ioctl$TIOCNXCL(r6, 0x540d) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000900)={0x0, 0x48, &(0x7f0000000880)=[@in={0x2, 0x4e24, @rand_addr=0x7ff}, @in6={0xa, 0x4e23, 0x8ea, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0xffff}, @in6={0xa, 0x4e21, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x3}]}, &(0x7f0000000940)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000980)={r10}, 0x8) 2018/06/05 23:22:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="7468726561646564fe", 0xfe63) 2018/06/05 23:22:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:43 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:43 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c2134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa684020000", 0x0, &(0x7f0000000200)) chroot(&(0x7f0000000080)='./file0\x00') r1 = dup3(r0, r0, 0x80000) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x11) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000100)="2e650f983df3cf0f01751a6a000f320fae29670f01ca0f01dfbaf80c66b8114eeb8266efbafc0cec0f01c8", 0x2b}], 0x1, 0x0, &(0x7f0000000080), 0x0) 2018/06/05 23:22:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 355.445277] binder: 19806:19814 ERROR: BC_REGISTER_LOOPER called without request [ 355.446013] FAULT_INJECTION: forcing a failure. [ 355.446013] name failslab, interval 1, probability 0, space 0, times 0 [ 355.457049] binder: 19806:19814 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 355.465608] CPU: 1 PID: 19815 Comm: syz-executor6 Not tainted 4.17.0+ #85 [ 355.473747] binder: 19806:19814 got reply transaction with no transaction stack [ 355.480572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 355.480579] Call Trace: [ 355.480603] dump_stack+0x1b9/0x294 [ 355.480622] ? dump_stack_print_info.cold.2+0x52/0x52 [ 355.480643] ? perf_trace_lock+0x900/0x900 [ 355.488122] binder: 19806:19814 transaction failed 29201/-71, size 0-0 line 2763 [ 355.497422] should_fail.cold.4+0xa/0x1a [ 355.497436] ? graph_lock+0x170/0x170 [ 355.497454] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 355.533480] ? graph_lock+0x170/0x170 [ 355.537274] ? debug_check_no_locks_freed+0x310/0x310 [ 355.542464] ? find_held_lock+0x36/0x1c0 [ 355.546518] ? graph_lock+0x170/0x170 [ 355.550318] ? lock_downgrade+0x8e0/0x8e0 [ 355.554458] ? __lock_is_held+0xb5/0x140 [ 355.558516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.564052] __should_failslab+0x124/0x180 [ 355.568279] should_failslab+0x9/0x14 [ 355.572068] kmem_cache_alloc+0x47/0x760 [ 355.576117] ? print_usage_bug+0xc0/0xc0 [ 355.580256] skb_clone+0x1ed/0x4f0 [ 355.585071] ? skb_split+0x11d0/0x11d0 [ 355.588960] ? lock_downgrade+0x8e0/0x8e0 [ 355.593109] ip6_err_gen_icmpv6_unreach+0x164/0x8a0 [ 355.598134] ? rcu_report_qs_rnp+0x790/0x790 [ 355.602532] ? icmp6_send+0x2d90/0x2d90 [ 355.606495] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.612025] ? ipip_err+0x3a9/0xce0 [ 355.615643] ipip6_err+0x3c3/0x990 [ 355.619174] ? ipip6_tunnel_lookup+0x1190/0x1190 [ 355.623925] tunnelmpls4_err+0x182/0x320 [ 355.627977] ? tunnel64_err+0x320/0x320 [ 355.631940] ? __lock_is_held+0xb5/0x140 [ 355.636428] ? tunnel64_err+0x320/0x320 [ 355.640387] icmp_socket_deliver+0x27a/0x450 [ 355.644782] ? icmpv4_global_allow+0xf0/0xf0 [ 355.649182] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 355.654357] icmp_unreach+0x3b4/0xc40 [ 355.658146] ? __skb_checksum_complete+0x188/0x420 [ 355.663065] ? icmpv4_xrlim_allow.isra.20+0x540/0x540 [ 355.668247] icmp_rcv+0x8b1/0x1560 [ 355.671788] ip_local_deliver_finish+0x2e3/0xd80 [ 355.676539] ? inet_add_protocol.cold.0+0x21/0x21 [ 355.681369] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 355.686379] ? nf_hook_slow+0x11e/0x1c0 [ 355.690343] ip_local_deliver+0x1e1/0x720 [ 355.694478] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 355.700019] ? ip_call_ra_chain+0x720/0x720 [ 355.704332] ? inet_add_protocol.cold.0+0x21/0x21 [ 355.709164] ip_rcv_finish+0x81b/0x2200 [ 355.713133] ? ip_local_deliver_finish+0xd80/0xd80 [ 355.718055] ? lock_downgrade+0x8e0/0x8e0 [ 355.722192] ? kasan_check_read+0x11/0x20 [ 355.726333] ? rcu_is_watching+0x85/0x140 [ 355.730468] ? rcu_report_qs_rnp+0x790/0x790 [ 355.734862] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 355.739864] ? nf_hook_slow+0x11e/0x1c0 [ 355.743828] ip_rcv+0xb70/0x143d [ 355.747185] ? ip_local_deliver+0x720/0x720 [ 355.751612] ? perf_trace_lock_acquire+0xe3/0x980 [ 355.756452] ? ip_local_deliver_finish+0xd80/0xd80 [ 355.761366] ? ip_local_deliver+0x720/0x720 [ 355.765673] __netif_receive_skb_core+0x26f5/0x3630 [ 355.770678] ? nf_ingress+0xa00/0xa00 [ 355.774472] ? __lock_acquire+0x7f5/0x5140 [ 355.778702] ? debug_check_no_locks_freed+0x310/0x310 [ 355.783882] ? perf_trace_lock+0x900/0x900 [ 355.788101] ? print_usage_bug+0xc0/0xc0 [ 355.792148] ? graph_lock+0x170/0x170 [ 355.795935] ? perf_trace_lock_acquire+0xe3/0x980 [ 355.800769] ? perf_trace_lock_acquire+0xe3/0x980 [ 355.805599] ? perf_trace_lock+0x900/0x900 [ 355.809835] ? pvclock_read_flags+0x160/0x160 [ 355.814316] ? mark_held_locks+0xc9/0x160 [ 355.818458] ? ktime_get_with_offset+0x395/0x4a0 [ 355.823201] ? lock_acquire+0x1dc/0x520 [ 355.827161] ? netif_receive_skb_internal+0xa2/0x7b0 [ 355.832263] ? kasan_check_read+0x11/0x20 [ 355.836397] ? rcu_is_watching+0x85/0x140 [ 355.840528] ? rcu_report_qs_rnp+0x790/0x790 [ 355.844932] __netif_receive_skb+0x2c/0x1e0 [ 355.849242] netif_receive_skb_internal+0x126/0x7b0 [ 355.854246] ? dev_cpu_dead+0xad0/0xad0 [ 355.858220] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 355.863741] ? eth_type_trans+0x2e1/0x750 [ 355.867880] ? eth_gro_receive+0x8d0/0x8d0 [ 355.872105] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 355.877279] napi_gro_frags+0x631/0xc40 [ 355.881242] ? napi_gro_receive+0x5a0/0x5a0 [ 355.885557] ? tun_get_user+0x320c/0x4140 [ 355.889692] tun_get_user+0x3235/0x4140 [ 355.893665] ? tun_build_skb.isra.52+0x1dd0/0x1dd0 [ 355.898584] ? graph_lock+0x170/0x170 [ 355.902376] ? perf_trace_lock_acquire+0xe3/0x980 [ 355.907206] ? perf_trace_lock+0x900/0x900 [ 355.911424] ? perf_trace_lock+0x900/0x900 [ 355.915645] ? __fdget_pos+0x1a9/0x1e0 [ 355.919529] ? find_held_lock+0x36/0x1c0 [ 355.923590] ? kasan_check_read+0x11/0x20 [ 355.927722] ? rcu_is_watching+0x85/0x140 [ 355.931854] ? rcu_report_qs_rnp+0x790/0x790 [ 355.936256] ? tun_get+0x22b/0x360 [ 355.939780] ? tun_chr_close+0x180/0x180 [ 355.943833] tun_chr_write_iter+0xb9/0x154 [ 355.948055] do_iter_readv_writev+0x859/0xa50 [ 355.952554] ? vfs_dedupe_file_range+0xa00/0xa00 [ 355.957314] ? rw_verify_area+0x118/0x360 [ 355.961446] do_iter_write+0x185/0x5f0 [ 355.965318] ? dup_iter+0x270/0x270 [ 355.968935] vfs_writev+0x1c7/0x330 [ 355.972550] ? vfs_iter_write+0xb0/0xb0 [ 355.976512] ? wait_for_completion+0x870/0x870 [ 355.981090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 355.986708] ? __fdget_pos+0xd6/0x1e0 [ 355.990495] ? __fdget_raw+0x20/0x20 [ 355.994202] ? __sb_end_write+0xac/0xe0 [ 355.998174] do_writev+0x112/0x2f0 [ 356.001704] ? vfs_writev+0x330/0x330 [ 356.005493] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 356.011108] __x64_sys_writev+0x75/0xb0 [ 356.015087] do_syscall_64+0x1b1/0x800 [ 356.018958] ? finish_task_switch+0x1ca/0x840 [ 356.023442] ? syscall_return_slowpath+0x5c0/0x5c0 [ 356.028365] ? syscall_return_slowpath+0x30f/0x5c0 [ 356.033284] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 356.038635] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 356.043466] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 356.048644] RIP: 0033:0x4558c1 [ 356.051814] Code: 75 14 b8 14 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 54 bb fb ff c3 48 83 ec 08 e8 da 2c 00 00 48 89 04 24 b8 14 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 23 2d 00 00 48 89 d0 48 83 c4 08 48 3d 01 [ 356.071096] RSP: 002b:00007fc36bf2eba0 EFLAGS: 00000293 ORIG_RAX: 0000000000000014 [ 356.078791] RAX: ffffffffffffffda RBX: 000000000000007e RCX: 00000000004558c1 [ 356.086058] RDX: 0000000000000001 RSI: 00007fc36bf2ebf0 RDI: 00000000000000fc 2018/06/05 23:22:43 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="746872656164656410", 0xfe63) 2018/06/05 23:22:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000000002703c7000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:43 executing program 6 (fault-call:2 fault-nth:2): r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 356.093310] RBP: 0000000020000200 R08: 00000000000000fc R09: 0000000000000000 [ 356.100564] R10: 000000000000007e R11: 0000000000000293 R12: 0000000000000014 [ 356.107819] R13: 000000000000073e R14: 00000000006ffe70 R15: 0000000000000001 [ 356.120237] binder: 19806:19818 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:43 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:43 executing program 7: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x0, 0x0) r0 = epoll_create(0x20) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x4001, 0x0) fcntl$notify(r0, 0x0, 0x284) [ 356.159714] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:43 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 356.282124] Process accounting resumed 2018/06/05 23:22:44 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270200000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:44 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:44 executing program 5: utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x10, 0x1}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r2 = accept$alg(r0, 0x0, 0x0) r3 = add_key(&(0x7f0000000140)='big_key\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)="1de10a2555919337ee4a53e69c668266dbcee3be8feaf32e9bf7712c9d04e26a3574c0f0571bdc6f88f54edd7cc1e7c18018d2c90ee609c4b21bfb660659e7c28c63ee56ec510ece1ef3df0f590c30caa6d55cc3d4bcbeb96df999e60bf66c3927fde58ea916be725609ede5e6d03853f26520992cca364db7e634357be4ffed7cace337a2b5e7b39f6ee6d24a69b760bfe79f9f37d20030c05fd6fa22bd59221f401980bc77f5ab1be45bbe394c1bd74f880d23ff65e3057623d840445d5386f4e248f63d1dbfa38d03963fc758968a1088014696b5fd76ce671598", 0xdc, 0xfffffffffffffffb) r4 = add_key$user(&(0x7f0000000680)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000003c0)="f47126da919d968031b14808f9cfa7d9b576f82ae4180ebb9ec9fdef", 0x1c, r3) r5 = request_key(&(0x7f0000000400)='syzkaller\x00', &(0x7f0000000440)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000480)='hash\x00', 0xffffffffffffffff) accept$alg(r1, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r3, r4, r5}, &(0x7f0000000500)=""/8, 0x8, &(0x7f00000005c0)={&(0x7f0000000540)={'sha224-avx2\x00'}, &(0x7f0000000580)="786c654ca77313194a7a05ae72578b2d684518ef70fb52943e75f65283", 0x1d}) sendmsg$alg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)="b55a3f72918ef67450a719edcec0afad463ad3e8f928d6b00bcadc752f811a8d3f163672e9c84531acb659005120be1e04a839d709b70a4eeb24a3556a05790788a9e0cd4daab4eb9f5a640f1d656ff2b6e682fc8d0b6c7c6a3558ae1576fba7f6c60c1bf86b5e9b521a161b69cefe1a1645fdc0d96aed2ca4669ea195bf45be4041dda5a4a074aff20f3331be12b7150543870e9fa57304980fe92f305129f4fe905462b25ab5f73a2f0a5e3aaf7cec30fe62fcdd929b63", 0xb8}], 0x1, &(0x7f0000000200)}, 0x0) [ 356.512348] binder: 19836:19842 ERROR: BC_REGISTER_LOOPER called without request [ 356.520841] binder: 19836:19842 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 356.529151] binder: 19836:19842 got reply transaction with no transaction stack [ 356.536685] binder: 19836:19842 transaction failed 29201/-71, size 0-0 line 2763 [ 356.547652] binder: 19836:19843 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:44 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x807e0200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 356.573503] binder: undelivered TRANSACTION_ERROR: 29201 [ 356.777929] binder: 19859:19864 ERROR: BC_REGISTER_LOOPER called without request [ 356.798519] binder: 19859:19864 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 356.806783] binder: 19859:19864 got reply transaction with no transaction stack [ 356.814279] binder: 19859:19864 transaction failed 29201/-71, size 0-0 line 2763 [ 356.824522] binder: 19859:19867 ERROR: BC_REGISTER_LOOPER called without request [ 356.844374] binder: undelivered TRANSACTION_ERROR: 29201 [ 357.529083] Process accounting resumed 2018/06/05 23:22:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r2, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x9, 0x240002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00', 0x0}) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in=@rand_addr=0xfffffffffffffff8, 0x4e20, 0x2, 0x4e22, 0x5, 0xa, 0x86f97da6b0db2eb2, 0xa0, 0x3a, r5, r1}, {0x0, 0x46, 0x4, 0x6, 0x100, 0x0, 0x9, 0x7e23}, {0xff, 0x7, 0x8, 0x8001}, 0x0, 0x6e6bb8, 0x1, 0x0, 0x3}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4d6, 0x3e}, 0xa, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x3507, 0x3, 0x2, 0x5, 0x6, 0x5, 0x80000000}}, 0xe8) fcntl$setown(r3, 0x8, 0xffffffffffffffff) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffa, 0x0) connect$can_bcm(r6, &(0x7f0000000040)={0x1d}, 0x10) fcntl$getownex(r3, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r7, 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, &(0x7f0000000100)=0x10001, &(0x7f0000000140)=0x2) 2018/06/05 23:22:45 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:45 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") write$binfmt_elf64(r0, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x400, 0x1, 0x6a, 0x5, 0x3, 0x6, 0x50e95cc1, 0x3a6, 0x40, 0x3c3, 0x2, 0x7ff, 0x38, 0x1, 0x4, 0x8, 0x80000000}, [{0x5, 0x0, 0x180, 0x6, 0xff, 0x6f9, 0x3ff, 0x7}, {0x2, 0x3, 0x1f, 0x5613, 0x3f, 0x8, 0x3f, 0x5}], "cf6c524f31d385f23bb1deed3f5e6958a2fdf4217d5d9944cd5190aca9fc7e7291d6aacca7c77c425d9386f52ee3b5cc643a367a31d0e3ec45111d220228877f57b4d5a645592a12e84dace7e8b1c97d62d540d9cf0a6ac63ea07490586a921b19ca316cfaa85daa2995650afd197a40f4cdba3c8f9a4e56c6ce6327948c27611f5954288c02afa96bbfcd78c352"}, 0x13e) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="7f"], 0x1) splice(r0, &(0x7f0000000180), r0, &(0x7f00000001c0), 0x100000001, 0x4) write(r1, &(0x7f00000001c0), 0xfd1d) 2018/06/05 23:22:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000279effffff00ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:45 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) [ 357.689147] Process accounting resumed 2018/06/05 23:22:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000000027f0ffffff00ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:45 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x2a, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:45 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x4) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x5b03c5243a39199f, 0x0) getsockname$inet(r1, &(0x7f0000000200)={0x0, 0x0, @rand_addr}, &(0x7f0000000240)=0x10) fremovexattr(r0, &(0x7f0000000280)=@known='security.evm\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x450000, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000040)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000000c0)={r0, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x7, 0x5, &(0x7f0000000140)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0xb0}], {0x95}}, &(0x7f00000001c0)="b761f6d9", 0x0, 0xfffffc9d, &(0x7f00001a7f05)=""/251, 0xfffffffffffffffe, 0xfffffffffffffffd}, 0x2a3) getsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000002c0), &(0x7f0000000300)=0x4) [ 357.768187] binder: 19885:19892 ERROR: BC_REGISTER_LOOPER called without request [ 357.783664] binder: 19885:19892 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 357.791848] binder: 19885:19892 got reply transaction with no transaction stack [ 357.799459] binder: 19885:19892 transaction failed 29201/-71, size 0-0 line 2763 [ 357.810655] binder: 19885:19899 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:45 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 357.830655] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:45 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffff801, 0x5, &(0x7f00000012c0)=[{&(0x7f0000000180)="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", 0x1000, 0x101}, {&(0x7f0000001180)="dda82523bd581915d7aba455f45fb4afd463c3fd78144def45977a3d4c819a5dac6d2899b7d46a4ca79797d067b3ff0e291e1ee089847a0fd305eeca6327755f7609bd216b2b6c25a00f4496cfee04a1d912175466bf90e7351051759119874374e854462f72ca2e5a642da92402bb922c4a087b05c223c8323321cf58", 0x7d}, {&(0x7f0000001200)="d0bca4ef0eb2edcd54ea57ff255dfb0de246278d53c4a12ac0a0471cf95b33181172d433be8653216a45d89fd1385ccae5236db816ee35", 0x37, 0x7}, {&(0x7f0000001240)="e90f0a82739e7cad0e2c85e7f49ff9ad29c6ac992b0f664c0232aa9e51b8dbaf50ba48378467a2a6cd11fc7f167390613b27a75485", 0x35, 0x100000001}, {&(0x7f0000001280)="d0270d5a42a7401d3090b601a0b3936134e1b6f74cdcc9868e15e919b5e4ec24aa6a5118d08f70179cb0534bdc93da", 0x2f, 0x9}], 0x54001, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000000080)='./file0\x00') link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00006b3ff0)='./control/file0\x00') dup2(r0, r1) 2018/06/05 23:22:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000277fffffff00ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 358.032325] binder: 19914:19917 ERROR: BC_REGISTER_LOOPER called without request [ 358.043132] binder: 19914:19917 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 358.051361] binder: 19914:19917 got reply transaction with no transaction stack [ 358.058895] binder: 19914:19917 transaction failed 29201/-71, size 0-0 line 2763 [ 358.069214] binder: 19914:19920 ERROR: BC_REGISTER_LOOPER called without request [ 358.105306] binder: undelivered TRANSACTION_ERROR: 29201 [ 358.734102] Process accounting resumed 2018/06/05 23:22:46 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x140, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:46 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rtc0\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000440)=0x7b823f4b, 0x4) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240)='/dev/audio\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000380)={0x7ff, 0x4, 0x8000, 0x2, &(0x7f0000000280)=[{}, {}, {}, {}]}) rt_sigtimedwait(&(0x7f00000000c0)={0x6}, &(0x7f0000000100), &(0x7f0000000200)={r1, r2+10000000}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000006580)=[{{&(0x7f0000001c40)=@sco, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/26, 0x1a}, {&(0x7f0000001f80)=""/68, 0x44}], 0x2, &(0x7f0000002080)=""/77, 0x4d}}], 0x1, 0x0, &(0x7f00000067c0)) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) r5 = accept4(r0, 0x0, &(0x7f0000000080)=0x15b, 0x0) recvmmsg(r5, &(0x7f0000001bc0), 0xfe, 0x0, &(0x7f0000001d00)={0x77359400}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timerfd_settime(r3, 0x1, &(0x7f00000004c0)={{r6, r7+30000000}, {0x77359400}}, &(0x7f0000000500)) 2018/06/05 23:22:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x8c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000001ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:46 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:46 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x0, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) openat$cgroup_type(r1, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 2018/06/05 23:22:46 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) [ 358.894960] Process accounting resumed [ 358.950832] binder: 19951:19957 ERROR: BC_REGISTER_LOOPER called without request [ 358.963803] binder: 19951:19957 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 358.972049] binder: 19951:19957 got reply transaction with no transaction stack [ 358.979566] binder: 19951:19957 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:22:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000000002700f0ffffffac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 358.998193] binder: 19951:19964 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:46 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x4c837cd64763b81d, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x0, "e91f7189591e9233614b00"}, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='schedstat\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000240)="e91f7189591e9233614b00", 0x80080, 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) listen(r1, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x7fffe) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000003c0)=0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000400)=0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r3, &(0x7f0000000440)={r3, r2, 0xa8a}) r7 = msgget$private(0x0, 0x0) msgsnd(r7, &(0x7f000035f000)={0x2}, 0x8, 0x0) msgrcv(r7, &(0x7f0000981000), 0x8, 0xffffffff00000000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xffff, 0x8}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000200)={0x10000, 0x8200, 0x8, 0xb9b4, r8}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) connect(r9, &(0x7f0000931ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xc) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000, r4}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000380)={r10, 0x80000, r2}) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, "e91f7189591e9233614b00"}, 0xf3b8) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa4, r11, 0x2, 0x70bd29, 0x25dfdbfc, {0xd}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x48000}, 0x4004000) dup2(r9, r1) ioctl$TIOCLINUX7(r4, 0x541c, &(0x7f0000000480)={0x7, 0x20}) write$eventfd(r4, &(0x7f00000002c0)=0x4, 0x8) fcntl$getownex(r4, 0x10, &(0x7f0000000280)) 2018/06/05 23:22:46 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0xd, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:46 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x7a000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:46 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 359.063361] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000000002700000003c7ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 359.212722] binder: 19976:19984 ERROR: BC_REGISTER_LOOPER called without request [ 359.234374] binder: 19976:19984 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 359.242563] binder: 19976:19984 got reply transaction with no transaction stack [ 359.250109] binder: 19976:19984 transaction failed 29201/-71, size 0-0 line 2763 [ 359.266973] binder: 19976:19989 ERROR: BC_REGISTER_LOOPER called without request [ 359.291954] binder: undelivered TRANSACTION_ERROR: 29201 [ 359.876099] Process accounting resumed 2018/06/05 23:22:47 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0xfffffdef, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0xc3080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:47 executing program 5: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0xf503, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0xfffffffffffffed1, 0x1a, 0xf7ffffffffffffff, 0x0, 0x7ffe, {0x12}}, 0x14}, 0x1}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x151400, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x600, 0x70bd26, 0x25dfdbfd, {0x3}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x880) 2018/06/05 23:22:47 executing program 7: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000280)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='comm\x00') exit(0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x84, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="03630840", @ANYRES64=0x0, @ANYBLOB="0e630c4002000000040000000000000011634840020000000000000000000000000000000000000000000000000000000000000058000000000000004000000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="00000000040000000000000085616466000000000100000000000000040000000000000037000000000000008561646600000000060000000000000001000000000000001c00000000000000"], @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x008\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="05000000000000000c63000009631040", @ANYRES64=r2, @ANYBLOB="950d0000a3c542ab0b630000cbfe"], 0xd8, 0x0, &(0x7f0000000340)="f13fb5d7cd74f6321371d315f2e41c5815315bd0f5725e0b7281997d9561521406514216dac15babd37522443a1b46f500e6e4ab4645bb302c97a06aa169074cc506dfc8dcbe2ca85253e2d1ffd87a067f2e8fa4415cc0c70ff2ff77783526aa859c009e1f3f6a3c71980a024d0943ce3391acfeac072c2c5e37586db4162c3cb538b118a41935c8079f2336e172854f5cc7bc2617d717bd74cbc0d9f46765f0fa7e565babea96bc88b657b3c79cc6a8acd849ea058db004a107dd20b101089587025263ec1941c4dd79e0e1a499c077f05e2021996e03e3"}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/202, 0xca}], 0x1, 0x0) dup(r1) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000002c0)=0x110, 0x4) 2018/06/05 23:22:47 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000000002700fffffff0ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:47 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c653085") 2018/06/05 23:22:47 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) [ 360.030415] Process accounting resumed 2018/06/05 23:22:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r0, &(0x7f0000001680)=""/528, 0x3) 2018/06/05 23:22:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000000002700f0000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:47 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0xfdef, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 360.106769] binder: 20015:20022 ERROR: BC_REGISTER_LOOPER called without request [ 360.123797] binder: 20015:20022 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 360.132085] binder: 20015:20022 got reply transaction with no transaction stack [ 360.139606] binder: 20015:20022 transaction failed 29201/-71, size 0-0 line 2763 [ 360.149806] binder: 20015:20028 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:47 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 360.186156] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:47 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:47 executing program 5: r0 = syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl(0x800001fd, &(0x7f00000eeff8)='./file0\x00', 0x0, &(0x7f0000000fed)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x7ff, 0x7f3, 0x800c, 0x5, 0x7, 0x9, 0x8, 0x10000, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x775, 0x2, 0x2, 0x7, 0x6}, 0x14) 2018/06/05 23:22:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000000002700fffff000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:47 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x2000027e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 360.315337] binder: 20041:20045 ERROR: BC_REGISTER_LOOPER called without request [ 360.327208] binder: 20041:20045 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 360.335405] binder: 20041:20045 got reply transaction with no transaction stack [ 360.342978] binder: 20041:20045 transaction failed 29201/-71, size 0-0 line 2763 [ 360.353880] binder: 20041:20046 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 360.372651] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:48 executing program 5: keyctl$set_reqkey_keyring(0xe, 0x2) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x23ba65b542e024e3, 0x0) connect$netlink(r2, &(0x7f0000000200)=@unspec, 0xc) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280)='/dev/uinput\x00', 0x1fffc, 0x0) mq_getsetattr(r3, &(0x7f00000000c0)={0x9, 0x0, 0x7fff, 0xffffffff, 0x5, 0x9, 0x9, 0xfffffffffffff800}, &(0x7f0000000100)) write$cgroup_int(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="69a72393870800017df00f7439099420fa3b0000"], 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x7}, 0x1c) 2018/06/05 23:22:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270003c70000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 360.530633] binder: 20061:20063 ERROR: BC_REGISTER_LOOPER called without request [ 360.543723] binder: 20061:20063 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 360.551893] binder: 20061:20063 got reply transaction with no transaction stack [ 360.559446] binder: 20061:20063 transaction failed 29201/-71, size 0-0 line 2763 [ 360.570838] binder: 20061:20064 ERROR: BC_REGISTER_LOOPER called without request [ 360.596948] binder: undelivered TRANSACTION_ERROR: 29201 [ 361.125785] Process accounting resumed 2018/06/05 23:22:48 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="74687265616465640f", 0xfe63) 2018/06/05 23:22:48 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0xc408000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:48 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7ffff000, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:48 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x3, 0x800000000000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x80}) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/183, 0xb7}, {&(0x7f0000000100)=""/25, 0x19}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f00000002c0)=""/71, 0x47}, {&(0x7f0000000140)=""/34, 0x22}, {&(0x7f0000000340)=""/86, 0x56}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f00000004c0)=""/252, 0xfc}, {&(0x7f00000005c0)=""/221, 0xdd}], 0x9, 0x17) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000180)='./control/file1\x00', 0x0) write$sndseq(r1, &(0x7f0000000000), 0x378988c7) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x20002) 2018/06/05 23:22:48 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x5) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000003c0)={0x8000, 0x1, 0x1bc, 0xfffffffffffffff8, 0x0, 0x7d6b, 0x1000, 0x2, 0xfffffffffffffc01}) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000400)={0x1, &(0x7f0000000300)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f00000004c0)={r2, &(0x7f0000000440)=""/88}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000240)=0x4, 0x4) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/netlink\x00') setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000500)={0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x40, 'lc\x00', 0x4, 0x206a, 0x44}, 0x2c) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000340), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000380)) sendto$inet6(r1, &(0x7f00000007c0), 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000280)) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$binfmt_elf64(r3, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xfff, 0x0, 0x7cb, 0x2, 0x0, 0x6, 0x7, 0x35c, 0x40, 0x2ab, 0x100000000, 0xffffffffffff0001, 0x38, 0x1, 0x40, 0x6, 0x8}, [{0x7, 0x8, 0x7, 0x8, 0x0, 0x0, 0xfffffffffffffc91, 0x6}], "c21297f0f767adbdfa3dc6995a6b3a48fb20236a65234ffa1ed141de53a8d45025bee46649e2b5b9222879893cbbe9ddb4f507eb89de314f53e4cbcabc57f0c0740189eea7c13c71105dbf1539348f3bb6901002bae90792c1f2f76e7357627e1fbadd349d0e75261bf0c939d2d70783dbf4d2d4a4565fa55bfcb791c79b6ec7e80f", [[], []]}, 0x2fa) ftruncate(r4, 0x80080) sendfile(r1, r4, &(0x7f0000d83ff8), 0x2008000fffffffe) 2018/06/05 23:22:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000000002700c7030000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:48 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c653010") 2018/06/05 23:22:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) [ 361.163430] Process accounting resumed 2018/06/05 23:22:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270002000000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 361.227377] binder: 20090:20099 ERROR: BC_REGISTER_LOOPER called without request [ 361.246437] binder: 20090:20099 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 361.246648] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 361.254753] binder: 20090:20099 got reply transaction with no transaction stack [ 361.268636] binder: 20090:20099 transaction failed 29201/-71, size 0-0 line 2763 [ 361.288741] binder: 20090:20102 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:49 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 361.348825] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:49 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000000027009effffffac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 361.534412] binder: 20111:20112 ERROR: BC_REGISTER_LOOPER called without request [ 361.565546] binder: 20111:20112 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 361.573782] binder: 20111:20112 got reply transaction with no transaction stack 2018/06/05 23:22:49 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x8fc, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 361.582363] binder: 20111:20112 transaction failed 29201/-71, size 0-0 line 2763 [ 361.599167] binder: 20111:20117 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000002ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 361.654838] binder: undelivered TRANSACTION_ERROR: 29201 [ 361.916151] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20000 [ 362.317931] Process accounting resumed 2018/06/05 23:22:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x2c7e0200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:50 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:50 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x833, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000000002700ffffff9eac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x8000, 0x0, 0x1, 0x62c4, r2}, &(0x7f0000000140)=0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000002ff4)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000005c0)=@bridge_newneigh={0x30, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0x14, 0x2, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}]}, 0x30}, 0x1}, 0x0) 2018/06/05 23:22:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0d') 2018/06/05 23:22:50 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1ffffffffffff, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dffffdfffaa9a9d325ebac7627ffe7a54cdbd77b3", 0x20000004}, 0xffffff48) recvmsg(r0, &(0x7f0000001400)={&(0x7f00000001c0)=@can, 0x80, &(0x7f0000001380)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, &(0x7f00000013c0)=""/33, 0x21}, 0x40) [ 362.357903] Process accounting resumed 2018/06/05 23:22:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000000027007fffffffac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 362.425616] binder: 20151:20157 ERROR: BC_REGISTER_LOOPER called without request [ 362.447443] binder: 20151:20157 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 362.455669] binder: 20151:20157 got reply transaction with no transaction stack [ 362.463213] binder: 20151:20157 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:22:50 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x85c, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:50 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f00000007c0)='/dev/dmmidi#\x00', 0xda0ce9b, 0x80) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x200000) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0x401, 0x4) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x1005, 0x0, 0x0, 0x0, 0x0) chmod(&(0x7f00000008c0)='./file0\x00', 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000780)={0x95b, 0x8000, 0xf97, 0x1, 0x6}) umount2(&(0x7f0000000100)='./file0\x00', 0x9) sendmsg$kcm(r0, &(0x7f0000003d80)={&(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x1, 0x4, 0x4, 0x2}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001900)="e17d7b22183b97569bbaa9bf49cfe6368569f24edaef45dc65187869d4a164e4cab071466f48ded2d2ab717219317ea716b662ab653b7025806338bd7e2e453846f8d354eecc6612bbf89be795f76db3d32f007a993fd661ca654b1b", 0x5c}, {&(0x7f0000001980)="a28dc15f9e2b3e7d6407a9aa356d8a7f2fb9d743208c514c703d7913785cadff2cfa45fc70fda8ee7270942d1fc58f80128b77bc882018dea0fe418580307933ad057f97f28d94bb1f2138dad4886fca0b419ee07179a4509c18423e1175e4aaeab03ceed0427055c3", 0x69}, {&(0x7f0000001a00)="37d564c158824eb6f8a39fcc4bdcc5c6c68f2aa728c04b8b41be997869d1cada0615a606117233c9a536a16d5b5e4fd998f8976caa761d064e6f191ed4e38c7c5d229dce34cd0393d84dd7e0e9b286c5157406566cae58c66ff7312376ca877f8b638e40954f56a129632dc15874d8d6b57ec2975c4603a9fa3226c5b438ff15712a801adc93108c44a15359fb009e3462e170c0c5c2a8eece7880713701f475389399572b92799d961cfd539e3507a1d0623c4f696acc", 0xb7}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000000880)="4e37ddbb616502c4641024bf084d9542c6e8fda7", 0x14}, {&(0x7f0000002ac0)="bff11f4e3f86a0c6fe31d187ab9feb", 0xf}], 0x6, &(0x7f0000002b80)=[{0x1010, 0x1ff, 0x7, "4dac2a64a4026ba65aabf836dbfbf87d3bea89c26f6d32f9a6002c1a99b57a91571a3c24f98e353c5062d5840a689322e683661b53759b62385fd495b8ddaa41193fd37d3bdc562d0eccd034a0d6cfc4d351a83c7e7c81b438d26e5141eb91f467ff7adf34dba5741b3f548a020a4f14810a050adc1f2bbeedc07d80f7820e4d0b702903809578024210869db25e475955aada7eb8ab4b05576f1458fc63c1969c6239d13f889e14500d760c7e86907e97457c2c3e235dc0f877eae92e0c254b333be78ae2c936191906bc31d3bbe88283d115dbb517f845195bf795b8d2d1c4f876fe34abf8e0c9ce28516732ae893af657c00a56b25bd3ab8bcff797a396a5e9025874947818b6dc678c601d62418df939516d5d6fa95ea7a60a94ab8f3d601554dc168caaeceba4aa335e26bce7d43ee16d47394b44bee029994bba82a9d6488fdc927b28c303aa42e9cce43cef931633290c017c5a827b6e03c75ca16241951e6a951c0f6d88864441c4977793a1d486112221293af38ff8ed3ab7af0b467f12418639c6d64db37d055105b2876b99675bd50f6afc28ffc7253d9dd081f3ea6b5d54e453c70adc523b727d0fbbb6a152cde01d39db80dfd23e1d78fe4f4823ae42b2a5438f3ac60076a47e14845aa4dbc88d68888f1ce3057559637f0fae5d21d27b035f926c1323f59bd6c67bb79de4e77c0b4fcc76765e32fa20ace051c4e7759ecac9eaec30be31d92b0fdf703f69081a84e33b7e548bbaa987cb711ab20e7f83e889ba0db4e477f9a8f9c61b1c77b9dedaf0bb10aaacf7c8a1eca4e57bfbf02c395999834481ef977c8c0954763362ee4fdd6a9dba9c20cea277c63c3f4197cd0e6d22b42d73a4dec3551f9d2c1ee1da034e091488b35fda7a1209eabb11aa0ab157658b56657df8a24bd2f1c9e52d95fbd4290fac8713be2faff4a0ab6ce497b165980af4cffbc5146c95554592a7dcd06607ffdc4ba37d5e0e0323b61c3201bcc3aef6c0335c4128c712d15329b81fd1d0027cfa43816d278c618fcacddf4822e18ad12c69a227b7aad96458389f8a264f65eadb277cf1ff985d1819d7b52605aa631c84ed6bb181b12a77964114b3c22789e2631aa85fe6505b12ac27f3ebe4bbfc548511bd8d646f4df5ecc8e9359be1cfd369ac7a30cb79bebf911aab64d6bbba8939fb142a772a269b3c3c0547de942d450f1379863b1332f357cfa8f7676894470546fd3d31e405bf7590aff43cb7cbc95b37084f6e00b534f109346d84ef39adbebc11869761e647cc2958e456f61546b4efb0387a4b211a81a678a8bdbfd8d4529654f8fa1e420bd4d479e5130be81378f796586776ad2a73af28c4eb3eee8d431e0f3bf4f1afd8a9c73f542bf7b63eefad6e13f0340d92e395aff2e6a81eb5fa00958620aef8faf625a2eeb21f098a9851a73ff8399ec3d0b58c83dded59413c1799f901ba4efe6be6b7d360e02a43eec20ae4afd1fa4e26d9f3b9f751614fe3d9bf26736aaaffee74b45c7373d7e059fa6a200d741eaa16be44ec942e4de2f75e4851f746315ca37997b7b3a33131e86bf635d6587ceb82b2dbd011c9815d0340eda4961a84715c60ea2ddaa2e6e9d3bfef8508a2feb7cdf514987ef7c580aed230b148351cd1ababe80e5e3f00e35ab684b2723c466243bc55913ef07a59c7a3872dc483a0984ee394c886285d92717265f76fc05b824d6ba1875236c015871cd659ae8613da49548a2b12f4527740a3f9894dfddc6be954d2f0ab90820da36ca6115ec225d778102aabc70fb8ca3d0ebec435154fa367dbbd53544b29fe599417bbab8d8ee35577915deae5ed368ce094f80804dd051a9de874960ed7eb764a0332abc1a24d77dff9c58af9ce5c936447e6b3d5f975cccdbcd73dfe45044afc2122cae6d976e2b5496a3bf918290a735047e9545f4b3359a09c6117bfb51e541c78e601d0122c96669df79aace577aba0d3f5f22d30994f4bcee8d7f76cfa904c53f55697eb80b72ab0794dca2e2c2903fc2b07f4aeec570fbfc918c939df6ee0fcdd99d7839e490434266b35896d402ac340f677f867f7dafc301a7062d86eb096dc7580d113fd60de3f1e001b4d8f6c445a63bb05e47dc20e1b4ca21033522991eb3445a895423929e7c0d736fc54a4205d80dda67df1b9e86a9fe40a619206b9e278212478e1c1d15f3c5ea2f5f0ec7f3159b802937e3c7d9cd97330559c1b89e9b8dd87cd5af1136b4d4cc699e55ef466b95485e227d1df6da8afc85d28eb6895acd0f09b6fbc6ff64688de56f13c1a5c69a9a92c6f392758953b5441a46d51023853ca32eb2d007d8c5aad782838cb49e04ff6ec1f505def59ea8fbe36d2133da0f11ba44eacbf41bfb7516665b159c81301ada9c4a4bfdec730c28d757afa435c649827840fc262fb4ab2a5d6a3b65459855a357a1915fda7c939ca5be5c1ddc468d3585124b59f17034321c8f3b938db2d4ec72895dfd6049eaeee7e40b57a773567b0cc8c204e1c30fcc6b8059ccd32968865ead37819611a9eda848169a4fd182c8a11b93f10c831557dc68a767a3efb6f901a6814071f52e5bfcc4a9a05453401571daa4e72ee50b3d44f256987c624c6dc9f4b9da4ed5aef323ff6bdb78c90cc950cd298ef2673ecd71cec207ee54f38cb58c310ba2044e2726eade8a8ea4cff21becd230c45ccc734d59c7556e03d6d681a5fc30e5477d1f87c5be48dec2ec7d5e5e5da57bdb67ef4061d85e83715bee86126e9bd87c3014d88877b3fa18ae462f22fe0b9f6f13b36debd634ea2a897f2c82070da21b16807c14f8ab7246cb1f19b1711b0aa8c40e46b2edab30bf50223a41f0c8c9683fed36e1ce810d0c6ad05f1d80f2da133cbd7f17a6cbc6e2522bec08b56391856106ba7b4e236a5b535d16a1ffae34feb87df0447c2601bf58023650ee95a812b0ac32e5c66ebfa100e6cf0f9a832073aa0742b11a4fec04b187f192cc59b14ff8406fde0119dcc6eb90816c9325e7b235743d75f543e95330ebd4ff53d37d330d47eddd5cf99a009c8198d29224d19c33ad25fedde4260ede07d5d3c69fc7f762263505f862d33680ac85a2eca105b1a11b65770c29ee17110eea7c45383068613a6df6fb331b928b02ea5d11c2f46661af38aa2e3e5e94ab6549c198875f44b32dfa330bf9ca16dda821fc89efc34cf2a91408d996a071a58d141f9066a9b394b77b67e6c7aa5269a51cf6361cc44e7e96385c8e4fc117d6f71aab1b6d65e63c14052ebbec820074ca6cd83ed5283cafbe60f5d083cbbffebb0eb7f1da2ac88b6e3c4c62586c9ee4ed1481aad005ec44dd2b7e795411849d73602d0cfadd1b6281eb5e08b1b3427fce40b397ae2cb11c53d0b9aae433455d4a3dc8ee293781afddbc540035156c1be1f768e06066928ad9b08544f0e940f99e282a13142a0fe82061cfaf224766244fd27acae584d334b7189b9e64c52f945aa13f7d2b76a4a4d50ad15284f2fae071dc140b379f7f35d2f9300ed9881f1f309f1b58c3d7428d988a0724ace31e86c7522bf26ce42bc80087c19879fda0fd5f4e1e2d7f27405c8a6ec251a8599cef03eb61c51c420192e52953c67a490630ffc77b821e990453571eb01088586f6e062a18a6aadc799999ffeb63a6071b8f914c63e5d0f03ebd1bc3699152da96df086c7fc30c72eed6d21119e7a307ccb11f2f154a743845d98bbeea0f86507c64fc90f11fd70e09c8d1a99219df94156e6bc6f62729238db7d6cf1eed053f96a263ec2d672327f00f9022387a01f47d6e5232d60e9873173ecdbf76f3f4a1ea37c8adb2ad4387c4073ae18c1f9b36f8fe15e2aed47c357d13948519b56b2bb0b025b7345554ddac18e25b00153bd833d6b5612ff7787a9cc723b0562998ea1490a81331403a500affb38757fb5abbb1266c9b18bbba644641fd0670247ba07e5d72f23acf3320d86bc2017afc3fcf6a9bd98020a9f574a34c00ec1486d20cc4091b4ce94e8674faa39c014cfe6f1d03c4a7c7c29005ef9fa783dd0bd52dccd4b3a18dd653b92df2d7d124acf041c48013f3280ce66cc017a6524a07e191f56161ce0565320eb2b6dc01d84d39c09e27637f97ac6e85bd3a1dde00657eabe018efcb4405db4f65d33c28ccafa2a8c53e41a12bee0781fba35e3bdc8480e690d95a82d3edb60484b7e45a4c38cb05893f5da7e5aaad7a5eea55e298fa3dd2ddb6c74ed97a4d013d51d0e44e300df8a078faedeea56d9ce67d89d5465b453a97f415de2e51805e1b057677b8f54712e9d3b2c8d226456a3a483b6173368a32b0d000f8e7560e409d98fd5a9894e4f99b44d8feb27f5635e7d5bd66a353ffef3aafdc77fd8b683974ba763530eafe0ee12c04a836a5ad15d902832d9335e9e18da3cb26c3ba3f7421a7902f556575d2ceca3401cfbb457b097a7d46a3764549deb3940f54ed19287e52fcdfa600722a98365139499773cb03161dfac1e8c5822ffc3d9d983e573b0f46d41dc9640b75b76faa3c3f39e6cb7e12ef0f926e028d3f9446be10eefa7a70d2857f55b42788a351f889a82e51ee4a5e43a3444bbf2b71ee2bfe990571bb8427cc0f74a2d9d1e83c229e44f0a3708ef538a0032b354d8f52ece71b55d8859ce61dac0db06d39a8065658b42ce9f37549c335feacf9f8fd11ac507b7f79dd3e31732ced92c1b13bbef5e397cbd243bda12d82744e0000aa4b6a803307d433e200c80876b88fd82301553da7e503d2c63bde369b6a83e82381c417d976d00d20c8b61a858e809592a400563f8f7493ca73a496af79d126511c3d363c8efe7653654c7eb19fa614a47a9d14200ee29ddbba53e8f42ce28efea151ae12881df8b5b6a21f37b047e295f4a3f550283436daa6daa1299e91d85a7b11380282e304be55f403bc82bfd70d53876ecb075bba822724cf7747562cfa15100deeda3d14a526601be07e1c5d42e56db39af78b2ef5a205cc64f35eb9ead7f7669410300943cb1e054fb5d3fa7bd0f418c512e7c438eb21ea308e96fe0302993a366a317ebb59a41f7eb9a273385ab981fb28f9c8c794240c172b75af67f2fdcf6de4cd0fa58e957bb28236b089a5395935a0a4bab16bd60e53bbf327dc38ef839f28431ed83cb3872bd27d7dcbd64a964e2ed10a455c2a39410fb14175a3ace7bc4dc0022cb7ce4d3b84637c6b2a1aefa592c4d64c10dbefd2b18ee0b480f28a9f9838574841ff94c3f23bc3aaf3498843bfadf70b48e435552191d586511b67bf9f9c55ee6ad620069f6160929e7ce0f3580dec8f3b9c9789f1cc9e8a9152ec4bd43fda1d8ef6cadff971ee535b4e59956295403ab3212204a6004c597072f5f1e2328a75c9cfcf3070791629950436907aebbe2c32dab0635233039eb29f1507bf8d68a6be6a77ae58174a400b9c315898588bccfefcf86b3de51461544952976ce48df08393a8bef0fd6deb8a8132b011555bf4de2ea8a6f7cfc603768c54bf0e2631a0cf17e3beb0e59b3e228193a0792bb858ab72a22415db6a8f6826c615b7fc1f4bb88917dc12b0fcf06b9744b38e818db35a4a429b4b951dc7d5ba5df779c6a6d7141942a86299a1e219ce9a7fa37afe9326888aff57da5f557f1b230f23bccebfc15369c3d5c7347996b75af7242356c9930175a9e7b5c28cdfc4a97fe1ce5151cbba5e373016711917b582eb3e720b947167eaf7b278609fa4f950e1b35b5af6dcd268e25c98a6310d75d32e26290d31506ae95dc248c3814acd16b9838f9a04104687332329406716215"}, {0x28, 0x117, 0x20, "f60097b0b95acfdb22d1add76778b2809df17d44a1"}, {0x98, 0x11, 0x1000, "5e2f12542f02aa92712d37e6e7af23b96f78f4167a6d26f2cd2b9487255bef8adc75cc80dd1e7d7120cbae16bd69903b548fa21ff1f80b3a36fc4903341c228efee2af529709e270c58d60cc4d1fc1eb2f13eeffeac348812bd127cfe9b8a65ead19d5dc2b2b2533b46ada46d6cc59635a0155951d02df22aea0aa46985173ce8168e7"}, {0x20, 0x18a, 0x5, "c97bf6a3c34b81a722dab8d1fb61"}, {0xe8, 0x110, 0x3ce60000, "3862353e93d3d108faa5693db12278a84221ef75c652562ba8c176807707188cf22eb520e3bb06eb7700ed5a0b7c0890fb1a3e1ba026d2e4c3d879e86965ddb20e2d85cadc99edda0d5d7b0d35f1f8376b3e4a88cc519c68cad1193efc580890523d47d3a1991a03eae46dbf1c346c0a18e80fe260c8700f50f792d874a57a089a00ef439f8b550566db4d60ef5261f40fb0a67feab819ed39d71474708739130afadb37110eb068edc83053af17d049497ff953f45fdfe24dde5473a90d13de436c8986c753dd6ee7b0afebde8d1ca38c75"}], 0x11d8, 0x10}, 0x0) syz_mount_image$bfs(&(0x7f00000001c0)='bfs\x00', &(0x7f0000000200)='./file0\x00', 0xc98f, 0x9, &(0x7f0000000680)=[{&(0x7f0000000240)="41bca1a432c3bf3008130a6a64d713df3cbdf28d3b1442c64a7065af5a5d80d1f0108d73cba5975b537098b0a84713d258c3eeedcb138e856b0401151c7d313a211929d1bf267a61f5dce0be87b36c955d3e124727bfa6868d5f48847f2c2df83a9c77f6b198bf40c45c87d0e41c3db67d152dc3fd4e0ea32b8eb8e37a0ee66f78309dafaea3e7a0320b8f07c5f9f907f1103a", 0x93, 0x4}, {&(0x7f0000000300)="06eb907631acac6539a10a", 0xb, 0x7}, {&(0x7f0000000340)="872e5d3d149a9c9599b62a525faa3d773e94ca9c836bb095446553b030dff56a1ce527c8d8b2531b76356b0d79e80242810e72efa7f4c1d4b33b5acd9311bcd7ebef4db18a63506ce16e6c5274c712fe2d93e65215", 0x55, 0x9}, {&(0x7f00000003c0)="3d67470e232069cd18a44feeadf6eaa052e72a962c6304893619f233e59243b2faf8a90f2d251fd182d7090eabfa6a28c0ad83e532a1e8048c12dd8fb0b4af62cc9c7d2d2c4072267a3c467456a8648750367d1bdfe3738079abda09b5a19166e19ddb249bd46f9f6ff566ca11a3fad1a56a94e51bbb2d2ce0d4ce7e1984f5ab0c92972921dac98fde3b4591c58f2a8959358b2aa3331fc8ea03", 0x9a, 0x51}, {&(0x7f0000000480)="e597c1fb56dd243db27ac690f6f67d9bf5b47291667ccc748658a1710f1a6eff42f4eb6f366691f1e8f4547a4e190bb02acdaa06c40823590b3e9ebc9dec828d059c3dbc895c7bb4720e3bc057db47f99a6f66e16b6e1bcebd3f238bf0f6f0e56093a9941c9480b3f12eaa7d197bb17a10bd2f59b5cadcbed3906cacb72cbe7488850bc4ecec3c2955601aca2aa5395cd95e61d828683b7126702ac67fb7d0", 0x9f, 0x100}, {&(0x7f0000000540)="d157d81388df7eb9e458f0d9ff1b50db0d7d0215fbdb2847803e91264a484b9359e898fc", 0x24, 0x80000001}, {&(0x7f0000000900)="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", 0x1000, 0xfffffffffffffff7}, {&(0x7f0000000580)="0237f7d05bbed076ef6e79b95c9722df7190e98e3fd49cdb42a2254a15d6c0adf2bd5fb3bb7ae92bfa03e2d3512442148502e37cc3194efc8ef0f1c7485d5e65ca54fda980040d333721a6e8d4d92fcb3a3afa4880f69ec11d146e2d4e3c1129d610d4bd5f275fb8a39926b806e2deea9c537bde64d0850fe445602aa4480bc7267ac4470bd0220aca77d2", 0x8b, 0xa2c}, {&(0x7f0000000640)="e5044364e4fde988c8f6a063ee6fe8d535b24df1305ea682d4112feeb6742eead3ec871becd90b967f821f009235e187d83149b9", 0x34, 0x7}], 0x8000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000140)={0x10001, 0x2, 0xa723}) 2018/06/05 23:22:50 executing program 7: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000040)=0x2) close(r0) 2018/06/05 23:22:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x27e2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:50 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 362.475412] binder: 20151:20162 ERROR: BC_REGISTER_LOOPER called without request [ 362.499430] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000f0ffffac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:50 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x803, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 362.663703] binder: 20177:20182 ERROR: BC_REGISTER_LOOPER called without request [ 362.679902] binder: 20177:20182 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 362.688152] binder: 20177:20182 got reply transaction with no transaction stack [ 362.695666] binder: 20177:20182 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:22:50 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x8c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 362.708181] binder: 20177:20186 ERROR: BC_REGISTER_LOOPER called without request [ 362.730184] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:50 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:50 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0xf00, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000f00000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 362.824288] binder: 20195:20198 ERROR: BC_REGISTER_LOOPER called without request [ 362.842396] binder: 20195:20198 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 362.850636] binder: 20195:20198 got reply transaction with no transaction stack [ 362.858158] binder: 20195:20198 transaction failed 29201/-71, size 0-0 line 2763 [ 362.868269] binder: 20195:20199 ERROR: BC_REGISTER_LOOPER called without request [ 362.887541] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:51 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 363.466639] binder: 20223:20225 ERROR: BC_REGISTER_LOOPER called without request [ 363.475189] binder: 20223:20225 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 363.483520] binder: 20223:20225 got reply transaction with no transaction stack [ 363.490321] Process accounting resumed [ 363.491052] binder: 20223:20225 transaction failed 29201/-71, size 0-0 line 2763 [ 363.494842] binder: 20223:20228 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c653003") 2018/06/05 23:22:51 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x8864, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000f00000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:51 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:51 executing program 5: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x4) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000180)={'mangle\x00', 0x2, [{}, {}]}, 0x48) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x28200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r3, 0xffffffff}, 0x8) [ 363.538709] binder: undelivered TRANSACTION_ERROR: 29201 [ 363.549236] Process accounting resumed [ 363.784813] device bridge_slave_1 left promiscuous mode [ 363.790463] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.803869] device bridge_slave_0 left promiscuous mode [ 363.809564] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.857352] team0 (unregistering): Port device team_slave_1 removed [ 363.869240] team0 (unregistering): Port device team_slave_0 removed [ 363.882113] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 363.896530] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 363.926943] bond0 (unregistering): Released all slaves [ 364.647152] Process accounting resumed 2018/06/05 23:22:52 executing program 7: r0 = socket(0x2, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) r1 = accept4(r0, &(0x7f00002c0fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00003bd000)=0x14, 0x0) shutdown(r0, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x12}, &(0x7f0000044000)) timer_create(0x7, &(0x7f0000000100)={0x0, 0x7, 0x1, @thr={&(0x7f0000000280)="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", &(0x7f0000000380)="a2650d36cff4ccaecd6ec036387b05c921821f9d65ba0b5e165992a230c9d2af2fde05017b88be5cff60f342b669718f7a850c3ced193a3d9ac08a2e102ceddb8aed76ee386f36bde6b328667c68b9da69c7a061dd4449e7de7ada702f98da26b71923f9ee2ae6c44f71336a7f6d90be482c6981b9f8317673c5e8defb1abeec2b938346dc9d5766bc1d411f62ce7a42ef18770c9e39e413b4eaf28fd7cbf74dfe6cc337bcad32cd7f7c2b39c302a5d850e0f6271b16b1fd59ec90c13e9e906b1a4fa03d2690df68afe0bef9028b32cd16d4e5212ccb1890175b58be3a58baf66120c7cb3739336e485cd0"}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000000c0)={r3, 0x5}, 0xffffffe4) r4 = socket(0x2, 0x1, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") tkill(r2, 0x1000000000013) 2018/06/05 23:22:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000000027000003c700ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:52 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x8906, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:52 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="3b003900315725c6aa930133e096"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/05 23:22:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:52 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 364.695633] Process accounting resumed 2018/06/05 23:22:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000c70300ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 364.764293] binder: 20264:20269 ERROR: BC_REGISTER_LOOPER called without request [ 364.794479] binder: 20264:20269 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 364.802802] binder: 20264:20269 got reply transaction with no transaction stack 2018/06/05 23:22:52 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x83a, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 364.810384] binder: 20264:20269 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:22:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0xd07d0200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="7468726561646564ff", 0xfe63) [ 364.838724] binder: 20264:20276 ERROR: BC_REGISTER_LOOPER called without request [ 364.869222] binder: undelivered TRANSACTION_ERROR: 29201 [ 364.927583] IPVS: ftp: loaded support on port[0] = 21 2018/06/05 23:22:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000020000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:52 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x80d, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 365.002115] binder: 20288:20291 ERROR: BC_REGISTER_LOOPER called without request [ 365.016085] binder: 20288:20291 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 365.024484] binder: 20288:20291 got reply transaction with no transaction stack [ 365.032080] binder: 20288:20291 transaction failed 29201/-71, size 0-0 line 2763 [ 365.049418] binder: 20288:20295 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:52 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 365.077640] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:52 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 365.196099] binder: 20310:20312 ERROR: BC_REGISTER_LOOPER called without request [ 365.234515] binder: 20310:20312 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 365.242773] binder: 20310:20312 got reply transaction with no transaction stack [ 365.250284] binder: 20310:20312 transaction failed 29201/-71, size 0-0 line 2763 [ 365.278144] binder: 20310:20319 ERROR: BC_REGISTER_LOOPER called without request [ 365.334071] binder: undelivered TRANSACTION_ERROR: 29201 [ 365.656498] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.662920] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.670166] device bridge_slave_0 entered promiscuous mode [ 365.678146] Process accounting resumed [ 365.704466] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.710935] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.718168] device bridge_slave_1 entered promiscuous mode [ 365.745813] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 365.773895] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 365.834932] Process accounting resumed [ 365.874534] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 365.905259] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 366.015695] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 366.022845] team0: Port device team_slave_0 added [ 366.047917] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 366.055162] team0: Port device team_slave_1 added [ 366.082974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.111202] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.137645] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 366.144741] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.153245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.174910] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 366.182074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.190097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.410947] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.417332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.423968] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.430341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.211751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.290271] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 367.368346] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 367.374554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 367.381744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 367.458438] 8021q: adding VLAN 0 to HW filter on device team0 2018/06/05 23:22:55 executing program 5: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x14002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f000028a000/0x1000)=nil, 0x1000, 0x0, 0x8031, r0, 0x0) mremap(&(0x7f000009e000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f000058f000/0x4000)=nil) mlock2(&(0x7f0000469000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000390000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000977000/0x400000)=nil) 2018/06/05 23:22:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:55 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:55 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="7468726561646564a5", 0xfe63) 2018/06/05 23:22:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000000027000000f000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:55 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/fscreate\x00') getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x4}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e23, 0x8001, @mcast2={0xff, 0x2, [], 0x1}, 0x6}}, [0x0, 0x10000, 0x8001, 0x7fffffff, 0x4, 0x9, 0xfffffffffffffff8, 0xd83e, 0x8, 0x9, 0xec, 0x7fffffff, 0x100, 0x0, 0xf78d]}, &(0x7f0000000200)=0x100) setsockopt(r0, 0x1, 0xb3, &(0x7f0000000380)="73638e5a7126e8dd36de9816ae449a2d7510015dadba50f3dfd16ffd26aae515c1773645d43bb3f469e9ad7d49ccb22b1a4113e92bfbd62189d5f49ccba42d214af703b019eb6efb19bd26085c30d0f3a2e006c183e93cfc9a153f6b41ddcb1c981b886c6ed8b5397bf8ffff4cde0f60966f66e846b0eb76c63cd3a25d21850d54eae9db33cffab14a9c21cefdb039ae5a8bb2201f332d91fa03dfcff464cba084ce155ea8f9a5cf47b2e90d07b0792468e91cab6d113570f1a8414d3478192f5743fb389c146d5650701edc34259e", 0xcf) r2 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000300)={r1, 0x1, 0x20, 0x3ff, 0x9}, &(0x7f0000000340)=0x18) read(r2, &(0x7f0000000240)=""/177, 0xb1) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r0, 0x4010ae74, &(0x7f0000000480)={0x4, 0x7fffffff, 0xff}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)={0x5, 0x0, [{0x0, 0x3e, &(0x7f00000004c0)=""/62}, {0x10f004, 0x52, &(0x7f0000000500)=""/82}, {0xd000, 0x9d, &(0x7f0000000580)=""/157}, {0x7000, 0xd, &(0x7f0000000640)=""/13}, {0x10000, 0xb1, &(0x7f0000000680)=""/177}]}) 2018/06/05 23:22:55 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x82c, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:55 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x80b, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000200ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 368.000183] binder: 20583:20589 ERROR: BC_REGISTER_LOOPER called without request [ 368.012752] binder: 20583:20589 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 368.020991] binder: 20583:20589 got reply transaction with no transaction stack [ 368.028529] binder: 20583:20589 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:22:55 executing program 7: syz_mount_image$btrfs(&(0x7f00000002c0)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000440), 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="737562766f6c3d362c647562766f6c69643d76626f786e65743165756830776c616e31776c616e312747504c2c008b612769e279124276c31b413147c6ba5416e1ffbd5098bfda193a2fcc450cf3bb16dd13"]) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffffd, 0x800) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)="7465616d3000000000000000000100") 2018/06/05 23:22:55 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threadedb', 0xfe63) 2018/06/05 23:22:55 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 368.079854] binder: 20583:20600 ERROR: BC_REGISTER_LOOPER called without request [ 368.117921] binder: undelivered TRANSACTION_ERROR: 29201 [ 368.241322] binder: 20609:20618 ERROR: BC_REGISTER_LOOPER called without request [ 368.269765] binder: 20609:20618 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 368.277981] binder: 20609:20618 got reply transaction with no transaction stack [ 368.285546] binder: 20609:20618 transaction failed 29201/-71, size 0-0 line 2763 [ 368.309339] binder: 20609:20625 ERROR: BC_REGISTER_LOOPER called without request [ 368.344200] binder: undelivered TRANSACTION_ERROR: 29201 [ 368.814088] Process accounting resumed [ 368.974706] Process accounting resumed 2018/06/05 23:22:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:56 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0x40000, 0x120) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x2, 0x80000001, 0x3, 0x7}) sendto$inet(r1, &(0x7f0000f7db7f), 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r1, &(0x7f00004b3fff), 0x380, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/06/05 23:22:56 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000009000100090aa8f7410400000000fcff", 0x58}], 0x0) 2018/06/05 23:22:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000000002700000000f0ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:56 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x2c7e020000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:56 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:56 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x500, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:56 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000000027000000c703ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:56 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x806, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:56 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x141001, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000080)={{0x0, 0x1}, {0xf}}) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000001c0)={0x4, 0x356, 0x2, 0x80000000, 0x5, [{0x1000, 0x8, 0x8, 0x0, 0x0, 0x80}, {0x8f6, 0x80, 0x5}, {0x80000001, 0x6, 0x2d9, 0x0, 0x0, 0x2000}, {0x3, 0x3, 0x6, 0x0, 0x0, 0x1000}, {0x4, 0xfffffffffffffff9, 0xe66, 0x0, 0x0, 0x8}]}) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000180)) 2018/06/05 23:22:56 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x34}, &(0x7f0000000240)=0x0) timer_gettime(r1, &(0x7f0000000300)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xa) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f0000000280)=&(0x7f00000002c0)) sendto$unix(r2, &(0x7f0000000040)="3495342466c8fdc38d27d0fc19a4ad93c3e2c464ca89135d4b076715d98dad03664a5ae8470a375c69a8f9ea5a78094d50ef31671823ba7eda1dd62b17211b174a1749dbd190c08b17f763c4ae72cbd3cfa6433a1b776e8d939028bba8b2b87d9d5a807097fb11c16180b8e2f5", 0x6d, 0x4b501fd12a84f3be, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r3 = accept$alg(r0, 0x0, 0x0) r4 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r4, 0x0, 0x0, 0x73e0) sendfile(r3, r4, &(0x7f0000000200)=0x6, 0x2002) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000340)={{0x3f, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e21, 0x4, 'wlc\x00', 0x10, 0x1703, 0xd}, {@empty, 0x4e21, 0x2, 0x712c, 0x7, 0xfffffffffffffffe}}, 0x44) [ 369.065356] binder: 20643:20653 ERROR: BC_REGISTER_LOOPER called without request [ 369.090093] binder: 20643:20653 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 369.098409] binder: 20643:20653 got reply transaction with no transaction stack [ 369.105994] binder: 20643:20653 transaction failed 29201/-71, size 0-0 line 2763 [ 369.125375] binder: 20643:20658 ERROR: BC_REGISTER_LOOPER called without request [ 369.146301] binder: undelivered TRANSACTION_ERROR: 29201 [ 369.875085] Process accounting resumed [ 370.035411] Process accounting resumed 2018/06/05 23:22:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:57 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x8c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:57 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:57 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x8035, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac28000000000000002700000003c7ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:57 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184908, &(0x7f0000466000)={0x200000007f}) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)="b3310238efacd36780bac674581b83c391ccb44a0f7f6d645693317a6f8dd7092cd5f86e48d3e38aa7f0723c5c0b30a5c41e22936c7034be7d7f84f9013fadaf88b4becb3fb9b54d5611523545ba6a1d52cf9f86bebd84cddeb92605bda2dcb3ac31b72cd3a8e5985116c1038efe13443e5951047c8b4fe3d071d7f750f966f662f42bfcedc7b2788fb413d432e7e0472ddcaa70aa7908531276b7db5e8ae8088a83d0b7da", 0xa5, 0xfffffffffffffffd) syz_mount_image$bfs(&(0x7f00000001c0)='bfs\x00', &(0x7f0000000200)='./file0\x00', 0x4, 0x2, &(0x7f0000000380)=[{&(0x7f0000000280)="8f23d06ef1a36cd53323dbef3a9aaf5b4085ca9c042e564f3e138328343662a46df9f6010adb6ec7fc1e84a09f39c91c9f4207eb1010c6cb1284ad1853a28cfa6e35884a", 0x44, 0x4c}, {&(0x7f0000000300)="898cec27f49eee7ff491e99a07e0eefd170e2a4b648900b279611b589f21216ef15078fbf51f3a343315a240feb8995f72373271eed30dc2a0de5d18106e4f", 0x3f, 0x101}], 0x4, 0x0) r2 = request_key(&(0x7f0000000180)='.dead\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)='securityeth1\x00', 0x0) keyctl$unlink(0x9, r1, r2) 2018/06/05 23:22:57 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:22:57 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\b') 2018/06/05 23:22:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac280000000000000027000000f000ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 370.239252] ion_ioctl: ioctl validate failed [ 370.251718] binder: 20694:20705 ERROR: BC_REGISTER_LOOPER called without request [ 370.269342] BFS-fs: bfs_fill_super(): No BFS filesystem on loop7 (magic=00000000) 2018/06/05 23:22:57 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x804, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:22:58 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) fcntl$notify(r0, 0x402, 0x80000025) exit(0x80000003) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000014c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='m', 0x1}], 0x1, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:22:58 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x101000, 0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x8) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) [ 370.282515] binder: 20694:20705 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 370.291282] binder: 20694:20705 got reply transaction with no transaction stack [ 370.298796] binder: 20694:20705 transaction failed 29201/-71, size 0-0 line 2763 [ 370.312863] binder: 20694:20709 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:22:58 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:58 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 370.358440] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:22:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000002ac1414aa00000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:58 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x814, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 370.485981] binder: 20721:20726 ERROR: BC_REGISTER_LOOPER called without request [ 370.500578] binder: 20721:20726 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 370.508782] binder: 20721:20726 got reply transaction with no transaction stack [ 370.516398] binder: 20721:20726 transaction failed 29201/-71, size 0-0 line 2763 [ 370.534438] binder: 20721:20731 ERROR: BC_REGISTER_LOOPER called without request [ 370.559323] binder: undelivered TRANSACTION_ERROR: 29201 [ 371.146586] Process accounting resumed [ 371.183594] Process accounting resumed 2018/06/05 23:22:59 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:22:59 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) fcntl$notify(r0, 0x402, 0x80000025) exit(0x80000003) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000014c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='m', 0x1}], 0x1, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:22:59 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:22:59 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0xc2080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:22:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000fffffff00000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:22:59 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x7fff) r1 = perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x2, 0x5, 0x100000001, 0x0, 0x0, 0x3, 0x8, 0x1, 0x100000001, 0x4, 0x5, 0x0, 0x100000001, 0x7fffffff, 0x2, 0x0, 0x80000001, 0x10000, 0x8, 0x100, 0x0, 0x8000, 0x7, 0x8272, 0x3, 0x100000000, 0x1, 0x0, 0x4, 0xffffffffffff7fff, 0x3, 0xd8, 0xa6, 0x1, 0xab, 0x8, 0x0, 0x6f44, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x4, 0x0, 0x800, 0x4, 0x1f, 0x0, 0x734}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x1) futex(&(0x7f000000cffc), 0xa, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, &(0x7f0000000080), 0x20) 2018/06/05 23:22:59 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="74687265616465640f", 0xfe63) 2018/06/05 23:22:59 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x8848, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 371.537553] binder: 20763:20770 ERROR: BC_REGISTER_LOOPER called without request [ 371.567379] binder: 20763:20770 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 371.575678] binder: 20763:20770 got reply transaction with no transaction stack [ 371.583273] binder: 20763:20770 transaction failed 29201/-71, size 0-0 line 2763 [ 371.597429] binder: 20763:20777 ERROR: BC_REGISTER_LOOPER called without request [ 371.618201] binder: undelivered TRANSACTION_ERROR: 29201 [ 372.355109] Process accounting resumed [ 372.517814] Process accounting resumed 2018/06/05 23:23:00 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) fcntl$notify(r0, 0x402, 0x80000025) exit(0x80000003) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000014c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='m', 0x1}], 0x1, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:00 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="7468726561646564fb", 0xfe63) 2018/06/05 23:23:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0xc4080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:00 executing program 5: r0 = socket$inet(0x10, 0x3, 0x4) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="480000001400ff10fffefd956fa283b70aa6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc88", 0x48}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 2018/06/05 23:23:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00f0ffff000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:00 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:00 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x4305, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa03c70000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:00 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sendmmsg$nfc_llcp(r0, &(0x7f0000002c40)=[{&(0x7f00000000c0)={0x27, 0x0, 0x0, 0x5, 0x4, 0x7, "66aeec39d05821d9d658c78788d590e9847246e3f2e47e6a57af0299684118eadb7cb897a79ac3b72b94f45a3f56114246b57ae10c835ad3bb5d2bbd049232", 0x13}, 0x60, &(0x7f00000005c0)=[{&(0x7f00000001c0)="19aad18a801b65c24c3372d7bcdaee1f9618b11dc2c4f11ca848208b4eb99dc111e8753a3c440f6ab8c31848d81da25b72eaea986d74fe8a151e5647fd760c9c9f601471f340cdda12cd60382abf29aca129b17cc874edc150558d74d4efeff6c11ea3486ffe28cd2d24ef707243e366f4b5092d50be9ecd747349859a9623feacbd63aaffec12d35d0bb0eeb4b40a57042d657fac723a7d893a43f85afee0570a0b8331047bd2daaeb0ff7e085199efdf98055c511c70be86a93a19e1f6a5989662f45f3471f73937b664236771270968cf85adee83019e5be0", 0xda}, {&(0x7f00000002c0)="f842842a827f240493224bd5201c01d03243f68126ecfb", 0x17}, {&(0x7f0000000300)="8d2897ef33fc36c8f5ebdb83adf6d202f01195b5778863d37c868ca814942bc05a63195aee070158f1678d3fc46f0ea03332228690f9587d84226102e88db4927f76e59def14ab58b540302c954f1bfc98f0f2241474cc425bf6c122a3ad670cd6041bf8406920f8b261fe0b36563f4e89e7ed97b39d32fc6dfa7c77250f0976055f7c9f44745c2f0aa5486295818afe94b2d69771c22bba3e4edb4df81cc7f01f825952cc4978831f2c7922cfaeef624a806909c410d0e977159787d7a48b", 0xbf}, {&(0x7f00000003c0)="00e88a187ecab377e47e0fbdd31dccb8b21e87f82f27e780b03e0f27fa711b4d25d2f776a21e33410aa9018f9746a25697feb7787a09d9f2268b8f8a28cc2b371f51dbf5d26884f0355e671f843a8e827b07eab794c8aa01dbba", 0x5a}, {&(0x7f0000000440)="f2884f689efdce85d0aa3ca9d44e1430e9251545ccaafc4cd3856bb0a16a27a80688f87bafeaba2e2bbd0fa81916bb413f9ef6d935f0c6a9736f7e13136bed", 0x3f}, {&(0x7f0000000480)="821ba8c2be2ef010b6990e36106cf42d2d827199504f6b1725fae6d2f816bd5419033fa69036b83e", 0x28}, {&(0x7f00000004c0)="992f0b65ec604b4d86701740b88c4c79d26517334c2deefefc1ec7f5eeb8c0a2c6daed3b61690f08befa9427b2047338adcbcea3d44b77644f0cd0bf9638e4c0d86dd7b52b2013899d272e0d7989f10e96ddd93419eb24dc6b862692d17ec9bd0b7e5cfb73d2f95d2e2082dda76457d23e980ed7670f44b8ddd32139fb70d508ba4a309713bc2d48fd11ce02db74dbb91ddf15f66c7cd556ff4001b125d175bf509a711d809e27fa47a1d6b432a8371c64b33d1d9aded8a817e3288b7663cbc7f0db23e94bac99aa4450d006bcfe5d0106293f02b699fe2b1e702424c3e03b646aef9719e4032b732c3d78", 0xeb}], 0x7, &(0x7f0000000640)={0x100, 0x11, 0x9, "88e68bf33e576c6f17627411bd86cbf44d36622d203010bc710dfb31f3f3a0f2cbc36b0d075564e502ba0292ad82682986eeef42db69bafb1c9988fc90e9c975e50cdaf3d490d2fd2699acd704fa1499004b3da3835cc83552ba55e4fcc5349619e91ac77281d6b8fcb4df3f6eb5a3e9b88e411d9855fc39080be6cc54173bc319df88734f2620e876ffb7bbdd8656718f3946dce549cb5a4d1d51d2083b9e318749e69ce680a627529e9befd2ca8a488e091ec8fae04cb9f66f8ea99917f2ba741f1a984d5651dc78260eb5ccb5e0812e3f159ba006803dbeed7c6aae1218d7d1ca952cc6d924834d3664905f87"}, 0x100, 0x40000}, {&(0x7f0000000740)={0x27, 0x0, 0x2, 0x1, 0x7, 0xffffffff, "335590874011dcd81fb8cc9bbac30ec36ffd201c5c4bed20648a24b773329196cc01b432b77bc4e2f91526f0c4d60484d249ad1d32ec1f530952a9f5f0be16", 0x25}, 0x60, &(0x7f0000000d40)=[{&(0x7f00000007c0)="e3f892c294591318d9a7db745cc248b3cf81c5bbd15c11821d89015a7fffcd4f8a61cb128c9ba4a2e6d756360b51159f00e2f9222ebe2644821374af25539a589542cd5b8f29fdbbc19b0905721e2e8b32baf507fd284e28ceaf77f4167072b4be2f77cf08bdee66b31430b09978aa0ac575cb8a1d6c114fe895a2f740b2ad241a1035e61cdbfa995e01614f9711db88f8081e137e6a3f60d5e29897083ab4dea02d4c5bfddb5d4827c1a8d780ae2f4bdad7b242fb7433679b35e8de3ea73c7ef540438d4aede6ce4c177e1cfe", 0xcd}, {&(0x7f00000008c0)="a4c9fadcb6e7665db807c0cd27d85ba9ee268dc9266e0d31bdb53c25d8f698b6294de8ac40d5c80178b00fc2e2d586cf5174a531cef611ad9f3272739b81cb5ccd2f580a4f485f4d614e3bd4fca46c7eb9c1cab2b9ae724fdd46889708afe3e5d00a8df47995f5c52a90d519329fc54c313888df890bf7330c515c06493ff850c0f2421ad255a4c2fe06fe3f8c623a538046889ff1cd32bf6712e976ea75ec286e689d6fe585aba7a7f5f531c80596b1b215ac4120a1582f2b2e7008f11e619a2423d1cc126c734d89d2a5de4698636b29a64ada274e1d9bc7a9bc7f7f", 0xdd}, {&(0x7f00000009c0)="61067c3b1c1e258724eb514589a2b7cd6825ba69814c5aed2fa787b5ce36348f83b4a404f610422a6e150e62b31e227ee19b9145658bc8ff3e2e829ded9301fddef7258b1e29ae5f35b164db9802918222f4697263834b421c958ada1bc0e837175d58e35540dd1c46e1f4c3fab4ad5da37c86fcf3c4125723bd5e6f573148928de344e58125eb3f081bdefbbb4f8473c6dee5307db8509a7997743ef24c1ebf195684e27ecf4822431b8bae8665", 0xae}, {&(0x7f0000000a80)="c634b98404af2b69bc9ca6e2729b4fabee22010b43704edeb5dcf01343f6ea433cb3d034b0fb81294d8d7e4c2c3d1a1a35b1940fce6fdec89cb13ea3202e45b9b93066f12d5b3c6a2f0e24dbaa5064c6ee9ee49b51d84f9c466a7621b095ef8b622036f40b25dc14eed8ff82f6221b61d72d9a86f39eb86c3d183d29ad0ee8e2b39dc5daea13ec3dc3cc166fb24a30fe07d9a3b058e4f6076014111b35f5cdb5db7e2471e61b040ba75d730cb219b1c0cdfdcc1bb55ff77faab7ca73b9596725b50c9d9c709f2dc4eb93f873dff8588a016d7763b2db2b6f0f2b7e2b97308cf181b4700d0cef321cfdbe5804d3b1e73a9d14c79270", 0xf5}, {&(0x7f0000000b80)="521229a73620c8d2ee108efbb5b075e1f5c1758dff49083092c3f58dc4d44d0f79cb0ad77bde1708ce64b0edb3c4f2e29ebcfc65881cf3dad0134640c5ae45f14654de62987ecc02664c6d3a7398da6712d4ed0e45ec60279679ac7281c48200ff68360c64680d8bb8473427838d1f0a0f035853ed0c268217facbbda5d990d184", 0x81}, {&(0x7f0000000c40)="cd304bfbb8cc14edd9dca795f7e8976c89451acc6f8306d66f91ed578639c69671f4b64aad9c27ae237ed7a60192cf0ad0909a4ea32fbc58ba41900ba329f6f9a3fcaf6ae619e687674e68104d2726316d98a9ede9ebda5a1094acb3ca9cd9f9f6ac9101773a2593b2ddee7bda699e92c96bbf982d6ae8a63f8f37ba4f67ce619af00765330a2f06872a15bc959de79c04c2f709ffea4b697151f58e9227d6b63887b3f666d40e4af28188e6a43237297a2fac26aa95b1a9966fd8b031ebba9af720d7a067a1aff977bd7efedf6addc81c55e49c8b1cbcd04fb943e1fcaa2d609b95ab21", 0xe4}], 0x6, 0x0, 0x0, 0x4000041}, {&(0x7f0000000dc0)={0x27, 0x0, 0x2, 0x6, 0x2, 0x6cd, "6da15ab91f113a30f96d6516ee7ea8fca84b855d9399d60fa9745f8529b46dc89ced29c1b647eb721c451b119c3a0b4a7556274347fc452b812589d9064ff3", 0x9}, 0x60, &(0x7f0000001400)=[{&(0x7f0000000e40)="991fcaccbd47800e5aed207c8a3f635a1ba792cf9c889f34fba798f08e69f069a8f6c2ff7f13c9430bc1e4823a7eafadfe608c4e09e80d1725ab3cc6f7c5416e4d0ab8260108fc223d890d3b3f54b20fbd1c5f2eb4f6e905e2f123537dbbcf2917800b81674285ada55cb356b45eb555115f38182b4a22b6a35e0bcd", 0x7c}, {&(0x7f0000000ec0)="129ecad2bedb04b6768ce810ff51f19484ff3d1db78a9caab886002e24d6be20bb60e59ddbb319e357f704c53f69b7c77389f79707861d2ac9fb045cd67ababc517d878abfc77e050b90aeb392a10efd74d3afc570cb635bb91c9482b3983281a81bfb099bf5ffd527ee8c1fed2829ec534fda2ad0d358d1618ed7946136479f503338a8a7a1d4d20d98265637f1dc77cf27c795d897e0aa215cb5efe40813f6c8a975e71715d573f831", 0xaa}, {&(0x7f0000000f80)="2ed2b724dbe51ff3a45e262e37471bb2c37651444f3f484c04bc0b62a24ea8314e65bdf0683e1db7f0d20c886f4a8a4dd7346270c24ab8ab054a080e077db296bbc02d77b27bbb18f845a6fbf4629b20361d", 0x52}, {&(0x7f0000001000)="272014aa8da200d189b1ee5ead739b904403a53006c90a0b3da0a1a5a59c388d9847f6471ca1d6051c0a7c8fc04cac75584313dc03b0c263d5d980eb6972a0e141a2351e419d", 0x46}, {&(0x7f0000001080)="c138d4b58ec23454b3725427f16076777dc90fad92fd7fd71ac9b74c518c8834ab725f757f5dc6931d3dc61d5f88c032069e1f7c0baac43805d34f93e24bafa111cc83b39321223c0be7172f12666c9fd27b3a8110570216a8c9952cacc61589a6c9a83b4c78a2e905721dd46d40c9433b941f4b14e419a396f82a3b0540993278ad9e42f50b739770d065d1260a0cfeaf68b51551e167b36d025de784ad198c96c937abc96174c6cbddf24a7ba2d3a84203244b8749291de15b717e1878596f3fff2480a271", 0xc6}, {&(0x7f0000001180)="f42680a1f8978a0ee9af5c2a24a438ddff910d5e5607d1072d7a2aafe1e5f1ea9d56645575d098bf0afefba0e23e087c9f70c31f5e6bf248117a3534421ed0553652026d366ce7597d6496e082be6c46f37d441302f517ec0365d90efe849104d658e76fd7ed3740baaba1844c3e7d81f303dba2d1796b182a0a635ee6c37137c1fc6a57190075789d1629592e4ddd74b99272d6f6906b7730812ecd231e5576e9578f05", 0xa4}, {&(0x7f0000001240)="22cfa53b4c5bd37ffa4b05017bb8ca", 0xf}, {&(0x7f0000001280)="f031c8b40d733dd06df37122fb0f5e12fbc14f41ff", 0x15}, {&(0x7f00000012c0)="aac3caa8780d72fadd1a97d6bfed062d5837da3497357e64583be94cb91cb4dd583d6f40c509605116cbd96455521d3f6e0402004e15dc3ea690b75a", 0x3c}, {&(0x7f0000001300)="f7f4b5eae33c73845e03fa2d5c91e1ab90e195a01b1c49fd3062904051b8c801e44356b33555016aa07ddfa03cbc95b7600fb5baf75b89bc640466e7abad9a6b513765f8764bfc9010373e710a6bc244531d4fb14a99ae4bdc0d00558da50b7faa3711294bcda00311adf2534a373a61d0f9b4d6c406e0de5393dd41f1aaf6cdd087a4b2d9f71aacf450c736b072cbb81c62a290e70eba63376d08e8413f2fc1caa2f57040a1a3e0928044cd4205b1cbb99a121788cc1edb418a9f1c8f5044c0b73776d54042040546beff23c84403d5209c79b6abe2d78a73de99af96d157cf44084400006f61", 0xe7}], 0xa, &(0x7f00000014c0)={0xa8, 0x0, 0x0, "57c75daf8c1532492a945260f8af693736e204fc2d3b545676711e3d559da7f26a8c25bb490e998f6a02a99611a7328cf79402a27904cdab4aef270989649163580a219127a07d0c732522a361071c01892c961569d9a134be74a6e6cf2d3dddeddb591ef6edf5289b4527216796e6e98bfb4e4257f70452ae142ed0b854ec649b22af80af2315d4aa6cfc5246d71ca0d875534688"}, 0xa8, 0x4000}, {&(0x7f0000001580)={0x27, 0x1, 0x0, 0x2, 0x800, 0x4, "4f590b4e1a4d2d455ba6ccc827117acdc9c1ff79e389fd0a371b051b636eef55aca3ca26f3af2b83286e38d2ab991d05bc379d3af29e3122fd1032491db9ce", 0x26}, 0x60, &(0x7f0000001980)=[{&(0x7f0000001600)="997f2e5890745a541e63933950ed5a858fa2cd5f2b45e09f5f1bc61a140522a708a3d5751e284ab26871326e7f5416e49d2e57ce335680936c85998055fead60e52f6f373aaf83320385d873c3a6186fbb967962563101ce233eff86f9b4245b6f8e2f97647fb6e0da4f2b0098b7243292d7bf96917b4bf922c8a2b9021226c87f2c166a8b552766e2ee66e798ba3830ba4f57048219c393b44aa9b9e7fd372c55936cafd0448a42b12d869b5692307051995326026d7588574eb5b05d8ba56bc63af32fbc77fecb5aa4e7b05999f8645785f199692b2327c01d0c36b3455af6be0ee00cfb42c28232ee94741d", 0xed}, {&(0x7f0000001700)="b228da482fed578e6eccf3e70f06aaba93c58df8400381f03b23c797096086691de309c0cffc7007db98eba699eb1ca7f497a72b997d07866a3e7bab165fd5bc5a1ddee4177a246f09b28c3a76715474b25d53da39a6bec95f2d1c1b6bd72543b6a5e62fde997eab172002896afac93b703619450678897a2c62759ff83563eb", 0x80}, {&(0x7f0000001780)="738b5cd3b8d52c51f98c809d3fa98fbeb89308a42a0bb6fbcc5fb360359e1e5d81cf906f5901725609f8f04b291d903adce17fa5ff2636b9d6ed0ac004fe", 0x3e}, {&(0x7f00000017c0)="eca9d688717948b7571456c9946f1d4caab84a13f79510ce7e6f1c4644753166147d4b27c0c9ace089749f0546fe93860605a1bd7e00cd94bc6f520dd0e5336c125569323a8c085e21aabb5356ad228f03e025943e706b19", 0x58}, {&(0x7f0000001840)="2f615421433d5b9b2462c1db3f952f15b2568ecbc5c3afd2e7e1763ed19c97648a22e826df109cc28f086c5c330e08a29ec68a59e5c955b08fb1982a2b404fc62c14a37771c38f9df7f274daa8b6f74ee00a5213dc35d33ebf53f3d2c97bb43cda58554eca120378714c5828da472890b3fe580af4fe13e9aa851e6b3e9e83670cd4b42347bd1587c75f25be783b", 0x8e}, {&(0x7f0000001900)="b5b20e95844dccb90a3ff28b04f72e7cbb966398d826b43e37b0a7cd4975b85ce7bfe5606e5088840d553f515497e258ad0deec602f50c4049c65ef1b7d97038722f6d0cf45e7d7f08a14f27", 0x4c}], 0x6, 0x0, 0x0, 0x1}, {&(0x7f0000001a00)={0x27, 0x1, 0x1, 0x3, 0x81, 0x9, "4e83c6febbe229e2920ac7c7bacec1ebba07bfe87e308a579b608c35e47de06f4c4ef2224ab5493b13049efeeea8cd18cf7cdfe5edf1a9bed2caef8f21a27d", 0x1a}, 0x60, &(0x7f0000002bc0)=[{&(0x7f0000001a80)="07f71e285eccd7cf373cffbbd0a179e3b0fd704e00ae66746ff6e6f5a23a305bce6ab5214d27f7ff4ae5713e9cf578d2c36656f33fef89bbb328d2e32b63ce", 0x3f}, {&(0x7f0000001ac0)="1ecad8fad9614967819b974f2d852884ec9457ff24daf6c43a6a7dab5288ea09ab0781997684d2d3", 0x28}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="ba9cbc7060a9d5cc4859d0cf1242a1feb88ff8e0bf4170ddc1374bbb611819ac1ec6ae9f94ee77fced2f10fe79d1d9c4ce1486956b687a8ba66222ab460f6b", 0x3f}, {&(0x7f0000002b40)="6dc4db71f101bf5ed35b3995b5d05997f56c21f4ea3558cfccc949cec201440a896f4b156ade7a0ea5ea66fb045acef9e628be97a491f4a2ca18ebe90e3cfc63594e7f9fb370495881a4936cb653ec1612ddfb3c0fd5b90933490565189a410a62627185264ef4a34a6d", 0x6a}], 0x5}], 0x5, 0x4000080) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x3, 0x4b) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000004061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000040)="76626f786e6574302b25c96367726f75702b00", 0x1) openat$cgroup_subtree(r2, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) [ 372.627470] binder: 20798:20803 ERROR: BC_REGISTER_LOOPER called without request [ 372.649410] binder: 20798:20803 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 372.657661] binder: 20798:20803 got reply transaction with no transaction stack [ 372.665202] binder: 20798:20803 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:00 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x802, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:00 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:00 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\v', 0xfe63) [ 372.677894] binder: 20798:20809 ERROR: BC_REGISTER_LOOPER called without request [ 372.713278] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:00 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x168, &(0x7f0000000140), 0x16d, &(0x7f00000004c0)=[@cred={0x20, 0x1, 0x2}], 0x20}, 0x0) arch_prctl(0x1004, &(0x7f0000000040)="ea9d88944224badc146d16e1d5dd10de4af917bde2418ff15fbffa4b6e77c42f9e86da37ebab8845c8c183753d1c801bb0fbcda5ce4ed7c1cad887ebc58a5f991b2f17c65c3de621371c3f500229ba90e6b43b311ea23a3231fb6ca2dc6262fb417423439073ee1cd356c93e896cdc797ac48a310f") sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000000300), 0x1b5, &(0x7f0000000600)}}], 0x2, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000180)) 2018/06/05 23:23:00 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x870, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aaffffff9e000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 372.864251] binder: 20826:20830 ERROR: BC_REGISTER_LOOPER called without request [ 372.873814] binder: 20826:20830 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 372.882138] binder: 20826:20830 got reply transaction with no transaction stack [ 372.889635] binder: 20826:20830 transaction failed 29201/-71, size 0-0 line 2763 [ 372.899631] binder: 20826:20831 ERROR: BC_REGISTER_LOOPER called without request [ 372.918271] binder: undelivered TRANSACTION_ERROR: 29201 [ 373.451141] Process accounting resumed [ 373.607339] Process accounting resumed 2018/06/05 23:23:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aaf0000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:01 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) fcntl$notify(r0, 0x402, 0x80000025) exit(0x80000003) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000014c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='m', 0x1}], 0x1, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:01 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:01 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x808, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:01 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x4a02) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140)={r2}) r3 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x6}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000600)={{0x2, 0x0, @multicast1=0xe0000001}, {}, 0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 'syzkaller0\x00'}) 2018/06/05 23:23:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa02000000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:01 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x8847, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 373.800781] binder: 20866:20873 ERROR: BC_REGISTER_LOOPER called without request [ 373.812262] binder: 20866:20873 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 373.820414] binder: 20866:20873 got reply transaction with no transaction stack [ 373.828187] binder: 20866:20873 transaction failed 29201/-71, size 0-0 line 2763 [ 373.841102] binder: 20866:20878 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x0, {{0xa, 0x0, 0xffffffffffffffff, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}}, 0xfffffffffffffe9a) 2018/06/05 23:23:01 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 373.872329] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa9effffff000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:01 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x8100, {{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:01 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) mlockall(0x3) [ 374.014548] binder: 20889:20895 ERROR: BC_REGISTER_LOOPER called without request [ 374.026500] binder: 20889:20895 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 374.034757] binder: 20889:20895 got reply transaction with no transaction stack [ 374.042270] binder: 20889:20895 transaction failed 29201/-71, size 0-0 line 2763 [ 374.055457] binder: 20889:20899 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:01 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0xc208000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 374.076715] binder: undelivered TRANSACTION_ERROR: 29201 [ 374.214548] binder: 20908:20913 ERROR: BC_REGISTER_LOOPER called without request [ 374.222658] binder: 20908:20913 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 374.230877] binder: 20908:20913 got reply transaction with no transaction stack [ 374.238474] binder: 20908:20913 transaction failed 29201/-71, size 0-0 line 2763 [ 374.248363] binder: 20908:20914 ERROR: BC_REGISTER_LOOPER called without request [ 374.258941] binder: 20908:20913 got reply transaction with no transaction stack [ 374.266549] binder: 20908:20913 transaction failed 29201/-71, size 0-0 line 2763 [ 374.291068] binder: undelivered TRANSACTION_ERROR: 29201 [ 374.297497] binder: undelivered TRANSACTION_ERROR: 29201 [ 374.604132] Process accounting resumed [ 374.770795] Process accounting resumed 2018/06/05 23:23:02 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:02 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) fcntl$notify(r0, 0x402, 0x80000025) exit(0x80000003) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000014c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aafffffffffffff0000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:02 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:02 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x4, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:02 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000091004b0081003700000d010000e01b03000068d438fbf151f94d496b654dc0a0c76eb99f924351cf438335506db4cdb1afb2679408fc07d9414e0fbe52d60b89f9e4ea918b664b3deadea988553687fc8121"], &(0x7f0000000040)={0x1, 0x4, [0x548, 0x660, 0x54e, 0xba2]}) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xbe39, 0x0) syz_emit_ethernet(0x182, &(0x7f0000000180)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [], {@ipv4={0x800, {{0x6, 0x4, 0x1000, 0x7, 0x174, 0x67, 0xfffffffffffffe00, 0x401, 0x2f, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001, {[@end]}}, @gre={{0x0, 0x0, 0x1, 0x7, 0x0, 0x7, 0x0, 0x1, 0x880b, 0x1b, 0x3, [0x7], "929fcad0a51cdd102a66ed467bf534abb00be7520151c855fb75c9"}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x1f, 0x9], "5d745e8ae7957fb50dd8012f9d476029478f4f91262db4eb01ba16ffe10a1087595f56f77874eb0a461888f4f249dc642025e34ac4bd727c50f0abd7060ec14fb1746e1eb93d8bc34538603d22281d4c630029cd5c13e728da1e0ab159000a038247b9a0b5333059ea635136a0c30c1913d08a9e36a5a8df0f85b7adcd273de6ab06ad53cea382cc60e55ffb92d3faf1b4deb3b3942ad6e929e15ddcdb3e2946a29a3ba563"}, {0x80, 0x0, 0x1f, 0x9, 0x0, 0x0, 0x86dd, [0x2, 0x0, 0x2], "e7de7a5a40acda8b94b787df5289ca16e90002618327899ded77dfcc43f7facaf734fc8964fd93a260db9dfc531e2e2571a691e5eaa27f6622ff1db82f5deb80eb38ce20"}, {0x8, 0x88be, 0x4, {{0x3f, 0x1, 0x9, 0xfffffffffffffffc, 0x8001, 0x100000001, 0x5, 0x7}, 0x1, 0x8001}}, {0x8, 0x22eb, 0x4, {{0x0, 0x2, 0x7, 0x2, 0xae, 0x100000000, 0x1, 0x5689}, 0x2, 0x0, 0x40, 0xffffffffffffffff, 0xffffffff, 0x3, 0x6, 0x2, 0x439e8f85, 0xfffffffffffffffa}}, {0x8, 0x6558, 0x3, "ca2e1a289392dff9"}}}}}}, &(0x7f0000000340)={0x0, 0x1, [0x868, 0x8d6, 0x879, 0xadb]}) r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x20000000001) write$tun(r0, &(0x7f0000000480)={@void, @val, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/06/05 23:23:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa7fffffff000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 374.985572] binder: 20936:20942 ERROR: BC_REGISTER_LOOPER called without request [ 375.001626] binder: 20936:20942 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 375.010141] binder: 20936:20942 got reply transaction with no transaction stack [ 375.017734] binder: 20936:20942 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:02 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 375.030824] binder: 20936:20947 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = memfd_create(&(0x7f0000000100)="2d6c6f935c2d00", 0x2) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000640)="2e2f66696c65302f663c6c6530f0", 0x40003ffe, 0x0) syz_open_dev$random(&(0x7f0000000200)='/dev/random\x00', 0x0, 0x100) mkdir(&(0x7f0000000280)="2e2f66696c65302f663c6c6530f000", 0x20) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/06/05 23:23:02 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x27dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 375.061437] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:02 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="74687265616465647f", 0xfe63) 2018/06/05 23:23:02 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aafffff000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 375.223727] binder: 20959:20966 ERROR: BC_REGISTER_LOOPER called without request [ 375.245170] binder: 20959:20966 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 375.253507] binder: 20959:20966 got reply transaction with no transaction stack [ 375.261087] binder: 20959:20966 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:02 executing program 5: r0 = memfd_create(&(0x7f0000000040)='b\n\x00\x00\x00', 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x5011, r0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000080)="d4947e6d83ee614246c9fe21a3bc878451e92f2b0642835fb6c629f5e8b7d6fa5c95edc53be6a7e590a84298f631c71d272c6fe0f3558144eab897e822c2360807e78e2cfb4480fed62476a518a52ee9dcc6400b2a052ccbd24c43fcfcfa7c58081d64dd164202b19c9152eacd9eb345ccc6324c3dd775a5bbbb71879a0f06a1e9a7e7c6ba79368480e8a34aa38fa56546ac137ac30ac8d7d3652ee99c9f2838481582620aee9454704435d0dd961ba22add24585d1f3ebdb00abc2d48cfa8f35144d7889ccaabf90cc8295f91", 0xcd) ftruncate(r0, 0x0) [ 375.276482] binder: 20959:20971 ERROR: BC_REGISTER_LOOPER called without request [ 375.300883] binder: undelivered TRANSACTION_ERROR: 29201 [ 375.799163] Process accounting resumed [ 375.958290] Process accounting resumed 2018/06/05 23:23:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000002000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) fcntl$notify(r0, 0x402, 0x80000025) exit(0x80000003) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000014c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:03 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x6, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c65300f") 2018/06/05 23:23:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x27e80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:03 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="7468726561646564ff", 0xfe63) 2018/06/05 23:23:03 executing program 5: futex(&(0x7f0000000ffc)=0x5003ffffd, 0x84, 0x0, &(0x7f0000000000), &(0x7f00000acffd)=0x2, 0x2) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000080)=0x4) 2018/06/05 23:23:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aac7030000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 376.189536] binder: 21000:21007 ERROR: BC_REGISTER_LOOPER called without request [ 376.197985] binder: 21000:21007 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 376.206179] binder: 21000:21007 got reply transaction with no transaction stack [ 376.213693] binder: 21000:21007 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:03 executing program 5: r0 = accept4$vsock_stream(0xffffffffffffff9c, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80800) sendmsg(r0, &(0x7f0000000780)={&(0x7f00000000c0)=@generic={0xa, "3b38ce7d886938394a5b01cf9d7d34a26b5830aff7c9a483f4173ef9c718fc4eec144b5560557cd6f8a744dc01f47f784113449d8a9d80744d5b08d101daa8411f43e9a2e4a089c38e7597b220192eb1a5725770af9b93e6cf2f2ed259f16d2469431aca68814bcc6bead56f024ee3dca3533194f21465b6fa7534e00562"}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000140)="c0e8290c8a4aa2fade845d3a996ecfb1f2bb06b5a7f01e7af6acee97b1c6c2dab7d979e6cd5044684763c2fc6714f3260d6b33094a662778a9ef11c30b6c97ce67f9fff8d0bf77a2214173b61c310577b3769de9f31fa62f1d7e7d14a10b1c848826c2d5f5cd469b7e90404956adea775f9d5410051071898074bc88606264160e65e1472b264c5455c26e2d1faa9714aa19c1d209ae22f1e2442492d3853b89fa852cf477c77aa76abc569ff501d9152d20765b8d214e233ca340d77d4d8896a5f15ae08d4f1c059f45d670b51f7408529027795945457ffffc31c226ba17598d3912eae62013ce727ad1", 0xeb}, {&(0x7f0000000280)="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", 0xff}, {&(0x7f0000000380)="26708a3c30db8e69142b0d6c41ea5e4d43c81cd11e34510752c67676d6668fa3c83f36c441d902fbb631020148ec1f6224e014b3fce5d20ed67044692be65a9333326bf92af36348712c1476b02e31873e77b72f20eb9d15080f4c99d9a4f354c084224a8720ec0de5bfdde93aab042522bf55f609fdaa40183edb67f31a95078cbeaeaed771d168349b10d033665aef25c0287d6e4ccfd7e059ae898588a0bddf57088d26f4c105ee74e4a1d12e44d9f865d6e9574323549d73f261df388c6b0ac8a2b1ae1e670236", 0xc9}, {&(0x7f0000000480)="d60e966ff747181b8bb7", 0xa}, {&(0x7f00000004c0)="3ae6c7788541e22d22fb92e8b70ba73787d9f943b2978e0a42147b8e1d4ca0c2ea8cb80aecc9bd0c77b106c698a2223fd48473e4a6616d34325320f6b631a8a308107ee8640b37ec386370e8932cab55a02a8e6ab64e54b4173a6d3091a4ce291f005677d871fd0c946b76703b2c562b178ed66d762b51a072edc06b7de310147716e3a6", 0x84}], 0x5, &(0x7f0000000600)=[{0x40, 0x10f, 0xffffffff00000000, "1f46e73a5fcd0d88c2081505ef605bb0a15032d89b3f5446a5edcf49a893d6a8551b1438067e3813ce4ed8"}, {0xe0, 0x11e, 0x3, "b7e9f34e09300599fca5d1ae95ec15137edf0badf7a92e34a9654446c5624849f46183aba62c73891613575eb3ea6c92f8d80b67196ec0693ce277464ba09b0a49859584ad5099110b9b77c054af9212e91d027c6907668bd8b9091ffeda0181299b159a7be126462f5122a3c5cbf2e0fe28f460dc6ed9093c31c3271c020f6d25f3ebf0557674e443ba1e83c66b8bba43fbce6f219c985f2c5221407673a52d42068b677ef2153b519a6741424588ccdee9bcb810a50725221bc6e377fd9c59717a28a22450e8d137fec8ad758d"}, {0x20, 0x1ff, 0x1ff, "164ddc7fbed48165e5d580"}, {0x10, 0x118, 0xc61}], 0x150, 0x4000080}, 0x4000000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) ioctl(r1, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = socket$inet(0x2, 0x8000000000002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) sendmsg(r2, &(0x7f0000001680)={&(0x7f0000000000)=@generic={0x0, "ce2b5adf0a9556e925ee4c65104b3c9067bd773f19f98209ee0184c10acce5ec40c61afa931b82ec62c988c14c7130eda0649996b6be401cc40bb3cdfdfe8075531af61045c646f94345b15f1d72f4bc59d0648d078cb11bd4e709444f753367bc1c2306b351c2b795c34d39e199e915c2f640b28d4efafcada71eb3db81"}, 0x25, &(0x7f0000001480), 0x0, &(0x7f00000016c0)=ANY=[]}, 0x0) dup2(r1, r2) 2018/06/05 23:23:03 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x2, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:03 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x2c7e020000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 376.250379] binder: 21000:21016 ERROR: BC_REGISTER_LOOPER called without request [ 376.284891] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:04 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00f0ffffffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:04 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x3, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:04 executing program 5: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) r1 = socket$inet6(0xa, 0x805, 0x2) ioctl(r1, 0x8912, &(0x7f0000000200)="0047fc2f07d82c99240970") setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f0000000040)="e23b934d", 0x4) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7fff, 0x452040) sendmsg$inet_sctp(r2, &(0x7f00000003c0)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000001100)="1df25fd9b368dbb7561165b6b06b7d7732f2cad5c7b2d434276a6f669dcf93c046f02c9344716abbd348c94b6e08dbe7aa0bb36e2f9db707745a546ee7d92d2e44fc798ba68a885c20bd6f61389609bafe1ff68226ee74670dd94fe361900e504962ef09946ce4874ae813294af2a1122bac29f1f383a864c72f60579cf304f2740e599768a149285202a9763639d9c0e9c2281494e6584c0ed6ac974c9030ad81bec294d9d07a41408ada1fb9dc38fbc18c9922490b30a1f6367438b44e13e0f9f132afe598c67c386352b893b00197c6d1cd6f6f1f38d0d2c6837710badef55565df9c03218f3f82fa13f877d13d3125a52828dfb40066d7722af80fd4b20a71ea536878372b1cb951f07ac47cdeb203a387e4870302ecc3f189250a60fe8f6050f5473fce195f0ce0738e6477d015e9e205c70e2597b1eb256a6c1139fabbe6d300134b9e76c043a51e7c8aeae89b5337e86ae01dfe6c9fdbdcf327a421c3fdfaed65a4c386d3945ffb9059d5363b9250ed568787811fd9e550556c907a6df11568e102988ace87e2f644ce998f5d63ee37fbbbb88a1b5f50ca57ecc48ca315425aacd1aea07e84b7ca0c13f80c697e8afdb79ff01e57c0fe5e5c859fb1b80c24a9b0548280bf8f6012fcbfc3b10ec27a752d12343b434155de57fb4f497e0392c3d00a1229e25d232cd949f12e13f5e129aa27e406697851811795333e84255a1feab0edd48e86f51240057196906ed2f7fae062d952e0e55927e98d8ac68c24097717bfd8239f8c6c57eeed3784644f5c6da94aa7af2ebe92e1844ba815ba671b8d54ece6f784858255b288b30c03e833c97ffe1be539781ffac032a3068db3119bd2bbd5557e05918c5fa41b54b6c8cfb41878f7ae3e04c6995fed967c2cbee431c8f2425567a231bf5e47782579a483987eb9a0ff29db50dd1dfcc8d45add79de854314aad8cfb103edf57e8ac30cc5809a4615ad57d39b2b9c224856cb6e9492238377693fd428a94e26b2dd6435169c33fde747eef0b7aeefc3b5261d1c12dece5c5c8d45eacc1491d50f32412ba757b6635e38b90aba796a7a9fafd1b875037ba22546f353713bf4cd2eff10bf7d69f6e18fcac4fb2ec78f18529081a081dc93a6de11b5329dedd8eb24509859937896508faaea23037d12cce28cea43eb608e39892aa942b609b3c27ccebbe390fb425452bd69af7e922a649225f65650ac00aa1ad43629f3e3769fe5a6aa1597989fd5a89847072a9ced5d347ba5ac100f8331d7038eb1932a102f027f5e3186f35760a42d7ad20e43f959025ff97ab8ce36f47ae3a54758dbc806981c0b42485afb84b0b485b4c2d8a70fb87c84b1716943211aaa0d5263f501d25edaa7b9c51c19a5a3504e902a953ac993a3f3cd161835bdcc6e2ae53586487e2119145417cd965977bcde1042b8d91d7825749bd8780557e1e2ef8316cd7176e41d3ace7014f399f9e64551b0f6dba5863a23ba6fd1eb76a01f2bd7f7ed8a4027150af7ce9411cee92067938a983c216928e35b299d8bbf33edce17fc4d6e41e0d86d14ee124494a2027c2b594c3cf146a228dace40e917e2d9b27bef8303c0f401f7ee50310edafcfbb99051dd71016671cab38caf5777f84724b35f198924e299ca0219ba592ae006c121931776b945bde77abfdadf3d5728b3fc27c1cbac6506472d4337cc51d9b35cc441180d6b0d25cf1dde1b15d0d92fb91641227dc3646f45546689e13acf58aed4ebc3e2974f8a998beb8d0e5bfa0af3804f88dcb2ef0d47776595d2d5bcf5497ac3538210527bf78d329d11ab03508c8f142fad58a83c31391b72be1b0538b68baeb2f0b9ccaf8bce6094986b0239ba6efbfe1c8d83eb703a56a2cfd2be8f10e285e6b13f6644311cd59cf16d5c2f0b33a81b6d4c54ab548ab3e000eaf7ecf7889067c70df1b191e21769b46ada9556ed674d196af05761a644c42278e2a6d4e0427e9c555076a179cae3d7edebb12e567d29c89652feca5e2c23ffe722e36a283072e66cb1ccdcb562a7f3e3548a48782a46d9f38700a17775012e32fac0d8318e51255ed15c5c98d944e1e72610dd4fa7b8b8f212b73b66b67df0be692036e4b22e7fb23e091b5564e9bab93e5e0941fefcf3e517aebb1f7f43edb28975dd01c349e1df12e88800459b894cb9613ca2568b591a2c5ebe3fe72e21c25f89044f68bc3f65d42deda2a35f94d9c5128b1a80af854e93736950ea793a3bbc51cae50336c7b03076b887538c609b40e8754569cd65d2597b9848ea6cf6692a3a3f4deb8138e671c8462c03b937e1cde76f0e5602ddab2a2b8002f70b02ae5020e706e442f39fa51411d0772f3bc2970d7ecbcecdbfc36a5b6e700edbb2c10d5244b8efba4b31be365af4fcb8e333d5f0fb67759fb3c6441ee1cac8a73c95e5d0b6a2c467371f95b0db6fb75e18100bad3cc8b592121a60c94aacc9e71edee2dfa12f2c19b91e64dd6bc8160ef5e8068dd496fd3b53614b090c340fbd149bbf007f9c5875b638a3fe287af95e8044db3d7204c38ff546e55915cb3712ed630015257ebb63f66740fb7c9c5afdfefbf119a04571e67fa3d51981532b849a633174e777dd6247d4d82cff55def9d53446afd11a6ddfe9b6be78ed1d1c25621d918a633898ecdeb84e5009cbe6fc17fab9b6ca547d98d9e122a302629fc2d53c1a84721ec146bbaa5bb6fae096907705e70b8ee30501d0768b164e68724701f952a8f003b17f0c26079c77430dff490ef11885edd35d069fdd12c00ed4fca2da1fcc788bce3caca478d601f9347d11172a3cbe1defded22876f6561f34d9d7fab7df8d7f4751e8629102421590a1d50a8f10361f59f4b00c1c2e3b97eb16f618cc70b60508e4a8052e28bf6fdc02a069260779a9e232683d3844759e7c27907b05b36e0056e9eec7a341f2ef1019fa1374de64cd367356091f7b62321a4abc681c28fd5374f099beadf06fe53de63ed8c13ab5e673d0485e83944c7e98cbac5faa23b195634ebffb9f467833b9a6721b7fce2cb9c3f2070a160c8ff1f908be7783be053310bcfeae0e0f46a5c2339b9a4fa59ef3ce46944f1ec406e45ad0cb3357b2f09119cdb201ed439da1f4d3e242e1c7ed59d1175266a2a0e562b0036973493166716e0c447868233fc4c70cde70c28fdace8dace8d7cff9d8f904372b62371242a35fe37e773c88c6ce4e6f9c6f0835ab5c4d071453bdff7251f04263e35dd4c926d9a4266e427722374fce49cb08c7d82ba4bcabec2410f388161898863adcaa3e111a52feee13b42dfc94389c28427b249368034e90edeebbd72ff7ddf3160d91e7f091bae68a4379400f33c2f5f0bffb8ec852e5c8b9257fa35182fdd841d70e5b2909eb5cab0f45dc1910879c1c2874245995a455b512b046a60a7231a44ce81cba59470692a9eaeff804af90230477198f60d3c89063722a5c96cc0f361c7c55151b6d7c1d1ae5de300512e229cc5d7102837079db61bac756f074cc44ff8545afcfa0b6ab6ccb5ec7fd232a1385e30947ed661b6a86de869c48f8f435ad9c154956438dcada6f8a7c3c136dc5f547a4305a098e8bf039155068ef17f8395ddb592d1cef35437f513a5154fce3c19c84e04303810385f734f2a968978153a668506024c325092705282fc2c2f8fa991ce343c9f44533e807d48fef7cb6c2c2757bca9550d3027f5dac3a87ee2a35668597fdaee921212f8f36270033acf6c7df36cd810e8728018243baa90552ebba41c4674130d24a8b6d6d94163b0b1d7f5d122039e647a422c941b97f509672835b73c378c369c5c334ab6020d88e767968b34e0ec33876a05968345807c51c904d9e739f02c89cb2b08a8fb03693be2fac30fd23b6f20e1a6139726f42f9fdc3774cbae6ad469c65d41c3f81e1304695a007f6fb76621049122237989e93287be2aa98750894af344056af94c55e570e155631474d2b2de50cf8934ab604520b742ec0d0bdd497f382baae9a85625430a9c858ab27c0c74d0413626cf87250e1535027301d9c1f0e5e318a66d4059b5a7d9b5b8051bb148257a443972527120fc98acf8894c224f3c1c08f975cb7500e0aac063f260c5971fed80130c80bd79a848a23f29101103f191acaf586af90fcd493c25655e4ff4720a50abd59b72fb0e76161b126d5037b52c11eac955d275a74ed2ea90307e205d2686d561197890541ba9916c7e8b719f1db660d99ded478ba5689d04a120d79cbc1122ccc5e08e38842d552d8c8a355c06baba3148ee11a7dd194c17956308b5ed8ccd0a5e5a7602501dabe8bd9d43ba5a8ee47cfbb107e91fe18149222798d64456892bd91bbc81099c6ab22afe5f43cfc6c608eb68a98bb43cf767b29a0f5bb80ddd8ae0b465d78962e7416ae9f4dea4c0c57a1a50e652aa993b5faf70ba98a9b44f82cca4d408ad7a5e90b42f529d3c0935b905f84ee69f7a6bebdd842752e13158b7b1e54d4ee4eaf8742ac038e63a74199b21bb23febe4afe7189a29156848dd8ced8049addf185cb79b89cc061bb09586731b7aa52cb2f6b185295460288c490cd6cac4adf1719c17cb2536723cf969a102075f693c0f3ca79ef0ea3a5dac856c5f8498153c2198b9a2959d7ae660d84d38eade65f6a97bbb9a7deb6c967aebfc3987113d8e414a582b3e196537bef8a45e1c5e0f14730f9ef601792da4da01f60ceb4b5d1c059d1adc2fd52a17f4f59e267cc168f80ebc7d9d31c9472daf6caf598c7a02e575297cbc188f7412fb01bf08f5a0e6656e92a5d627f7b17022e5aaebca21f110c21e9c49a92b4bff392f095683d86296bb1ef21538280222660a4a60e36af81d29c8649255cbc430dcae9aeecf4efd9d47fad74809f907a1c614390c02fc05901315cc8337a98846f2afb29189dac6483b98ae73af0b24aa5f48baad862b442ffb3a8b74a91c1621b823a6c427d9cf59f7b0c2242596354a3e2a31acd9a1e3f46001cea9ae30035427a10b1bf0816da8fe77ed9ea2dcbe20f11d3104689bc5c6575ba2919df93d2eb526815a61e1862abdeb4d5f0d44ebcea514093ce822a0caad89d687ae1b6b090ae89bd5e06406b4a6d5e82ceaa8a1eb2a21c2fd2e5f4aabce61954640878ab2d953803d3ba7f8d47937a2d3eca3ed4cdecba6a5af55c6e7402d1e7eaa629c5a5e69b466fb48b3f028d7b1bec237909168cced9b124be9fb5d6641a1fb2c65ff8fc69901ea7b253cec9f438e324a86440db45ca5342dc694ccbc1085e757e454ad1db5df1b6826af24c80fc38fe133248aebdb7cdeca649ded24a3f068d9dee43ebad9193175943cd6baf863b61f4a2936449ec418fcc81e097ff26e28b3f9dd8cd7dc4c5e198dc8a3481969d3c3984c32b48f8b659d608605b613766aa8f76fb577914d7f0dc778bd09e0cbe5fe22c978c2fd4c1e0ed3f7c6d4b673967f80e5374616119b515eb0065427c771e878188e76481f6df5a0274c60787dca658f01c37759acdc9455f3268afb1232ad1d049ed68c074f7835391ed162e1ec52daac44832ac304be6a39f6de2320f8d807765c5576a0b25865b88d42b4e093ec4f858707f2695c7b44f8b7da04736b425a146b3e20257bec609a66695c5b1ea65d8246cdbd51461b9235277192387c99c7063a580880010d78e9cdc011b9efdbe16d5494415e55416120bce039dc196bfb45ee881abc842a92be043a4d4d2e7b4f27d7d1326e1316990f18e0c8fc683054c0f1c6e4de4963aaa0dd6fcc51125c0a8bfbe44519662be69b1eb329c382", 0x1000}, {&(0x7f0000000100)="56b770241878c33dc3b3487e89e8fb20daed1e862425ee68cba789f9db09cbcabe1068f2f0b37f45bfb2d5fed5f7753da0b9999238a0db9e9f9f3afe1a598985801ef57cc248a15bac4ec81b990c6fdcd32b1f", 0x53}, {&(0x7f00000002c0)="e8d5a2f2246c317025d8207fc04ec012e5a48817c3cd66d23b63e1125ef72a5604b80c0b8e766f9e8835d879a6490521c8a62613594d2145faf6f53467eb7c5bcd73c1dad2093c49ff0cf33c4ded726da70d02d26245ef3d9b18f42670eebe04c8b4fda0c07f7fd4f0806c4939413054aa3f3cbe87fe8235097e6a8b0c87890438a9667f5e47c97f98b5c05ddc3477679cdaaa65cb2965b0534c8402dea7a6ff476f13ce68ed325b3345809576d76024e3cac9d3c0c2a3929c61729211908a568d0dff137dabab34a93325571f8ce39f21ee0c714a9af7218f03a85796ecb4510a4047e808cc3ed1998fc16f54", 0xed}], 0x3}, 0x10008000) sendto$inet6(r0, &(0x7f0000000b40)="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", 0x5ad, 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x80001, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000280), 0x4) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000080)=""/9) [ 376.443814] binder: 21032:21034 ERROR: BC_REGISTER_LOOPER called without request [ 376.451959] binder: 21032:21034 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 376.460269] binder: 21032:21034 got reply transaction with no transaction stack [ 376.467799] binder: 21032:21034 transaction failed 29201/-71, size 0-0 line 2763 [ 376.480399] binder: 21032:21035 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 376.509795] binder: undelivered TRANSACTION_ERROR: 29201 [ 376.631485] binder: 21052:21053 ERROR: BC_REGISTER_LOOPER called without request [ 376.646436] binder: 21052:21053 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 376.654880] binder: 21052:21053 got reply transaction with no transaction stack [ 376.662447] binder: 21052:21053 transaction failed 29201/-71, size 0-0 line 2763 [ 376.673014] binder: 21052:21058 ERROR: BC_REGISTER_LOOPER called without request [ 376.696494] binder: undelivered TRANSACTION_ERROR: 29201 [ 377.102918] Process accounting resumed [ 377.142368] Process accounting resumed 2018/06/05 23:23:04 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:04 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xffffffc0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:04 executing program 5: mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000140)=0x4, 0xfff, 0x1) r0 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x9, 0x0) r1 = memfd_create(&(0x7f00000002c0)='(]cpuset\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, "9d02b7acdcf7815d16d143bf06a4835a7021349735fedb0242aa51cf3def0d441483377fbfacd5fbc1c10449e1151d0203000000000b450000000001000000f9", "480345a648dbf4dfca72b7ed3dbe0504f100631b6d99882de8b8482f9d611102d423b09221d4d2f076bfab43b2720566fe6e3313df0b617e864f40e676b06689", "f778818dfe1e9cd3e751e52a79c1baa8ea713db23cc872c13836723258d30cd0"}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x20100, 0x0) 2018/06/05 23:23:04 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000003c70000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:04 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) fcntl$notify(r0, 0x402, 0x80000025) exit(0x80000003) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000014c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:04 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:04 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000003c7000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:05 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x4000000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x1f) r1 = semget(0x0, 0x3, 0x10) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000000)=""/21) setsockopt(r0, 0x10e, 0xb, &(0x7f0000f67000), 0x2) [ 377.350470] binder: 21074:21084 ERROR: BC_REGISTER_LOOPER called without request [ 377.366191] binder: 21074:21084 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 377.374540] binder: 21074:21084 got reply transaction with no transaction stack [ 377.382086] binder: 21074:21084 transaction failed 29201/-71, size 0-0 line 2763 [ 377.392509] binder: 21074:21090 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:05 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 377.414273] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:05 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="7468726561646564f0", 0xfe63) 2018/06/05 23:23:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00f00000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:05 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xc0ffffff00000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:05 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = shmget(0x3, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000ffc000/0x1000)=nil, 0x4000) r2 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0xb4, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) dup3(r2, r0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) [ 377.593622] binder: 21101:21106 ERROR: BC_REGISTER_LOOPER called without request [ 377.601975] binder: 21101:21106 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 377.610370] binder: 21101:21106 got reply transaction with no transaction stack [ 377.618021] binder: 21101:21106 transaction failed 29201/-71, size 0-0 line 2763 [ 377.629108] binder: 21101:21111 ERROR: BC_REGISTER_LOOPER called without request [ 377.646964] binder: undelivered TRANSACTION_ERROR: 29201 [ 378.156090] Process accounting resumed [ 378.316223] Process accounting resumed 2018/06/05 23:23:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aafffffff0000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x3f, 0x4) write$binfmt_elf32(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="7f"], 0x1) write(r2, &(0x7f00000001c0), 0xfd1d) 2018/06/05 23:23:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:06 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xfffff000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:06 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:06 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) fcntl$notify(r0, 0x402, 0x80000025) exit(0x80000003) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000014c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) [ 378.560923] binder: 21142:21149 ERROR: BC_REGISTER_LOOPER called without request [ 378.572535] binder: 21142:21149 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 378.580761] binder: 21142:21149 got reply transaction with no transaction stack [ 378.588262] binder: 21142:21149 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aaf0ffffff000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 378.605241] binder: 21142:21155 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:06 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xb00, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:06 executing program 5: r0 = socket$kcm(0x29, 0x8000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="0047fc2f07d82c99240970") r1 = socket$key(0xf, 0x3, 0x2) pipe(&(0x7f0000000040)) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140), 0x10) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000000000000000003000000003030000000000200000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000eb86b4fa9ebcfd98a6601a2b4dcc034dcaf9dab0f85afd2851faf6b5bafd245112976051e3c39a1e7acbfdb5b4e02457d4"], 0xb1}, 0x1}, 0x10000000) 2018/06/05 23:23:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xc308000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 378.653256] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:06 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000ffffff9e0000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:06 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x6488, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:06 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 378.828276] binder: 21169:21174 ERROR: BC_REGISTER_LOOPER called without request [ 378.838677] binder: 21169:21174 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 378.846949] binder: 21169:21174 got reply transaction with no transaction stack [ 378.854725] binder: 21169:21174 transaction failed 29201/-71, size 0-0 line 2763 [ 378.865067] binder: 21169:21177 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:06 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xc208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 378.885791] binder: undelivered TRANSACTION_ERROR: 29201 [ 379.076080] binder: 21190:21194 ERROR: BC_REGISTER_LOOPER called without request [ 379.087361] binder: 21190:21194 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 379.095660] binder: 21190:21194 got reply transaction with no transaction stack [ 379.103199] binder: 21190:21194 transaction failed 29201/-71, size 0-0 line 2763 [ 379.113939] binder: 21190:21195 ERROR: BC_REGISTER_LOOPER called without request [ 379.133882] binder: undelivered TRANSACTION_ERROR: 29201 [ 379.409093] Process accounting resumed [ 379.566369] Process accounting resumed 2018/06/05 23:23:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000007fffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:07 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:07 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xc0ffffff, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:07 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) fcntl$notify(r0, 0x402, 0x80000025) exit(0x80000003) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:07 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c6530ff") 2018/06/05 23:23:07 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000001700)='/dev/md0\x00', 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000001740)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x1f]) 2018/06/05 23:23:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000000010000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000015c0)={r4, 0x0, 0x2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) r6 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000180)={r6, 0xfffffffffffffffb, 0x2, r3}) [ 379.788048] binder: 21212:21218 ERROR: BC_REGISTER_LOOPER called without request [ 379.804344] binder: 21212:21218 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 379.812629] binder: 21212:21218 got reply transaction with no transaction stack [ 379.820191] binder: 21212:21218 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:07 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xffffca88, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xc408000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:07 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\b', 0xfe63) [ 379.838191] binder: 21212:21227 ERROR: BC_REGISTER_LOOPER called without request [ 379.859635] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:07 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x800e0000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 380.004689] binder: 21238:21243 ERROR: BC_REGISTER_LOOPER called without request [ 380.021168] binder: 21238:21243 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 380.029445] binder: 21238:21243 got reply transaction with no transaction stack [ 380.037045] binder: 21238:21243 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:07 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xd07d020000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 380.049128] binder: 21238:21245 ERROR: BC_REGISTER_LOOPER called without request [ 380.073467] binder: undelivered TRANSACTION_ERROR: 29201 [ 380.073867] irq bypass consumer (token 00000000dc4c7ae3) registration fails: -16 [ 380.230410] binder: 21257:21261 ERROR: BC_REGISTER_LOOPER called without request [ 380.243607] binder: 21257:21261 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 380.251808] binder: 21257:21261 got reply transaction with no transaction stack [ 380.259421] binder: 21257:21261 transaction failed 29201/-71, size 0-0 line 2763 [ 380.269113] binder: 21257:21262 ERROR: BC_REGISTER_LOOPER called without request [ 380.288896] binder: undelivered TRANSACTION_ERROR: 29201 [ 380.696180] Process accounting resumed [ 380.736872] Process accounting resumed 2018/06/05 23:23:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:08 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) fcntl$notify(r0, 0x402, 0x80000025) exit(0x80000003) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:08 executing program 5: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) prctl$setmm(0x23, 0xf, &(0x7f0000ffb000/0x4000)=nil) 2018/06/05 23:23:08 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000001000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:08 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:08 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xf000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) seccomp(0x0, 0x0, &(0x7f00000001c0)={0x7, &(0x7f0000000080)=[{0x1000, 0x8, 0x9, 0x3}, {0x5, 0x19, 0x0, 0xe0}, {0x7ff, 0x2, 0xffffffffffff4ff7, 0x4}, {0x5, 0x6, 0x100, 0x4}, {0x100000001, 0x9, 0x47, 0x6}, {0x4, 0x80, 0x40, 0x8}, {0x401, 0x6, 0x5}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@localflocks='localflocks', 0x2c}, {@quota_on='quota=on', 0x2c}, {@discard='discard', 0x2c}, {@locktable={'locktable', 0x3d}, 0x2c}]}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8040ae9f, &(0x7f0000000140)={0x0, 0x0, [0x0, 0x3b]}) 2018/06/05 23:23:08 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x2c00, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00fffffff00000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 380.980762] binder: 21276:21283 ERROR: BC_REGISTER_LOOPER called without request [ 380.990394] binder: 21276:21283 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 380.998558] binder: 21276:21283 got reply transaction with no transaction stack [ 381.006099] binder: 21276:21283 transaction failed 29201/-71, size 0-0 line 2763 [ 381.023335] binder: 21276:21288 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:08 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xc4080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 381.062883] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:08 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threadedP', 0xfe63) [ 381.235991] binder: 21301:21306 ERROR: BC_REGISTER_LOOPER called without request [ 381.262768] binder: 21301:21306 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 381.270943] binder: 21301:21306 got reply transaction with no transaction stack [ 381.278472] binder: 21301:21306 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00fffff0000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:08 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x3300000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 381.282557] gfs2: invalid mount option: locktable= [ 381.291122] gfs2: can't parse mount arguments [ 381.306480] binder: 21301:21314 ERROR: BC_REGISTER_LOOPER called without request [ 381.331322] gfs2: invalid mount option:  2018/06/05 23:23:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 381.335646] gfs2: can't parse mount arguments [ 381.336417] binder: undelivered TRANSACTION_ERROR: 29201 [ 381.528117] binder: 21329:21332 ERROR: BC_REGISTER_LOOPER called without request [ 381.536595] binder: 21329:21332 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 381.544746] binder: 21329:21332 got reply transaction with no transaction stack [ 381.552276] binder: 21329:21332 transaction failed 29201/-71, size 0-0 line 2763 [ 381.573075] binder: 21329:21335 ERROR: BC_REGISTER_LOOPER called without request [ 381.598762] binder: undelivered TRANSACTION_ERROR: 29201 [ 381.807092] Process accounting resumed [ 381.966501] Process accounting resumed 2018/06/05 23:23:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:09 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x400000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:09 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) fcntl$notify(r0, 0x402, 0x80000025) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:09 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c6530f0") 2018/06/05 23:23:09 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="746872656164656485", 0xfe63) 2018/06/05 23:23:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00c70300000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:09 executing program 5: unshare(0x40000000) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002b80)=0x14, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000037c0)={'bridge_slave_1\x00'}) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x80000001, 0x410000) connect(r0, &(0x7f0000000100)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent-generic)\x00'}, 0x80) setsockopt$inet_mreq(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast1=0xe0000001, @broadcast=0xffffffff}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000003c80), &(0x7f0000003cc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000003f00)={'vcan0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) 2018/06/05 23:23:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000f0ffffffffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:09 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xfec00000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:09 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) fcntl$notify(r0, 0x402, 0x80000025) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) [ 382.183241] binder: 21352:21360 ERROR: BC_REGISTER_LOOPER called without request [ 382.197079] IPVS: ftp: loaded support on port[0] = 21 [ 382.203705] binder: 21352:21360 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 382.212064] binder: 21352:21360 got reply transaction with no transaction stack [ 382.219589] binder: 21352:21360 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:09 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 382.237161] binder: 21352:21363 ERROR: BC_REGISTER_LOOPER called without request [ 382.265867] binder: undelivered TRANSACTION_ERROR: 29201 [ 382.297950] IPVS: ftp: loaded support on port[0] = 21 2018/06/05 23:23:10 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threadedc', 0xfe63) 2018/06/05 23:23:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000007fffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:10 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) fcntl$notify(r0, 0x402, 0x80000025) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:10 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x529, 0x142) write$evdev(r0, &(0x7f0000000200)=[{{}, 0x100, 0x3}], 0x18) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='syz_tun\x00') ppoll(&(0x7f0000000080)=[{r1}], 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140), 0x8) [ 382.411145] binder: 21376:21381 ERROR: BC_REGISTER_LOOPER called without request [ 382.432703] binder: 21376:21381 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 382.441378] binder: 21376:21381 got reply transaction with no transaction stack [ 382.448920] binder: 21376:21381 transaction failed 29201/-71, size 0-0 line 2763 [ 382.459200] binder: 21376:21383 ERROR: BC_REGISTER_LOOPER called without request [ 382.480593] binder: undelivered TRANSACTION_ERROR: 29201 [ 383.093947] Process accounting resumed [ 383.140589] Process accounting resumed 2018/06/05 23:23:11 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:11 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) exit(0x80000003) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:11 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x8100, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:11 executing program 5: r0 = syz_open_dev$adsp(&(0x7f00000010c0)='/dev/adsp#\x00', 0x0, 0xc0042) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) fchdir(r0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.syz\x00') 2018/06/05 23:23:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000000000000003c700000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:11 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x3f00, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000003c70000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 383.913693] binder: 21418:21424 ERROR: BC_REGISTER_LOOPER called without request [ 383.939883] binder: 21418:21424 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 383.948098] binder: 21418:21424 got reply transaction with no transaction stack [ 383.955639] binder: 21418:21424 transaction failed 29201/-71, size 0-0 line 2763 [ 383.970898] binder: 21418:21428 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") clock_gettime(0x4, &(0x7f0000000280)) getsockopt$inet6_dccp_buf(r0, 0x21, 0xce, &(0x7f0000000000)=""/55, &(0x7f0000000040)=0x37) 2018/06/05 23:23:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:11 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded0', 0xfe63) [ 384.070149] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:11 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xffffff80, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00ffffff9e0000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)=ANY=[@ANYBLOB="180000ff1a00000000000000008c8fd5477e1f71f5"], 0x18}, 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x1c) [ 384.176656] binder: 21443:21446 ERROR: BC_REGISTER_LOOPER called without request [ 384.189607] binder: 21443:21446 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 384.197951] binder: 21443:21446 got reply transaction with no transaction stack [ 384.205452] binder: 21443:21446 transaction failed 29201/-71, size 0-0 line 2763 [ 384.215898] binder: 21443:21447 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:11 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 384.251384] binder: undelivered TRANSACTION_ERROR: 29201 [ 384.424153] binder: 21464:21465 ERROR: BC_REGISTER_LOOPER called without request [ 384.442115] binder: 21464:21465 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 384.450346] binder: 21464:21465 got reply transaction with no transaction stack [ 384.457840] binder: 21464:21465 transaction failed 29201/-71, size 0-0 line 2763 [ 384.469415] binder: 21464:21466 ERROR: BC_REGISTER_LOOPER called without request [ 384.494589] binder: undelivered TRANSACTION_ERROR: 29201 [ 384.723136] Process accounting resumed [ 384.898619] Process accounting resumed 2018/06/05 23:23:12 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xc208000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000f000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:12 executing program 5: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f00000000c0)={0xaa01, 0x81, 0x2}) socketpair(0x10, 0x1, 0x8001, &(0x7f0000000100)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x541f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 2018/06/05 23:23:12 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x88caffff00000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:12 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) exit(0x80000003) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) [ 385.017992] tty_warn_deprecated_flags: 'syz-executor5' is using deprecated serial flags (with no effect): 00000200 [ 385.022821] binder: 21486:21491 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:12 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x8035000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00f00000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 385.066172] tty_warn_deprecated_flags: 'syz-executor5' is using deprecated serial flags (with no effect): 00000200 [ 385.074496] binder: 21486:21491 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 385.084896] binder: 21486:21491 got reply transaction with no transaction stack [ 385.092403] binder: 21486:21491 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:12 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000001340)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000001200)={0x80, 0x0, 0x0, 0x0, 0x0, {0x5}, [@IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4}, @IPVS_SVC_ATTR_AF={0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}]}, 0x80}, 0x1}, 0x0) recvmsg(r1, &(0x7f0000001a80)={&(0x7f0000001380)=@vsock={0x0, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f00000017c0)=""/217, 0xd9}], 0x2, &(0x7f0000001a00)=""/111, 0x6f}, 0x0) 2018/06/05 23:23:12 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 385.116225] binder: 21486:21499 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:12 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 385.156630] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa009effffff0000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:12 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x80350000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:12 executing program 5: r0 = socket$inet6(0xa, 0x200000000000005, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) [ 385.296901] binder: 21518:21519 ERROR: BC_REGISTER_LOOPER called without request [ 385.321272] binder: 21518:21519 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 385.329542] binder: 21518:21519 got reply transaction with no transaction stack [ 385.337078] binder: 21518:21519 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000000000fffffff000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 385.347781] binder: 21518:21523 ERROR: BC_REGISTER_LOOPER called without request [ 385.381132] binder: undelivered TRANSACTION_ERROR: 29201 [ 385.527444] binder: 21538:21539 ERROR: BC_REGISTER_LOOPER called without request [ 385.537631] binder: 21538:21539 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 385.545775] binder: 21538:21539 got reply transaction with no transaction stack [ 385.553300] binder: 21538:21539 transaction failed 29201/-71, size 0-0 line 2763 [ 385.566183] binder: 21538:21540 ERROR: BC_REGISTER_LOOPER called without request [ 385.594412] binder: undelivered TRANSACTION_ERROR: 29201 [ 385.938269] Process accounting resumed [ 386.096319] Process accounting resumed 2018/06/05 23:23:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00fffffffffffff00000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:13 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xd00, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:13 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'rose0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="280012001300290a000080000000000007f277ceedb3681466037689af3f51d833451ecf4947bd12fc000000", @ANYRES32=r2, @ANYBLOB="000000000000000008001a0004000300"], 0x28}, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='/dev/snapshot\x00') r3 = syz_open_dev$dmmidi(&(0x7f00000018c0)='/dev/dmmidi#\x00', 0x6, 0x80000002c800) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0x5) r4 = semget(0x1, 0x0, 0x100) semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000000c0)) ioctl$sock_bt_hci(r3, 0x0, &(0x7f0000001900)="16b2737b885610224350a099d3c9187072bb125db85758d50ed1947105b2ddd18fb5d273f9dffeefd15059d826d87287392ee7671c46ca5120faa95379d563e7cfb2b257c39698a2aa69aa8f55d60565361ad1d3bed857cf630a13a4c9ff33670f22d591118bace892f18bb94d6a1cd6e429c1c754") setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000)=0x6, 0x4) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) 2018/06/05 23:23:13 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x2, 0x4) exit(0x80000003) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:13 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="7468726561646564ff", 0xfe63) 2018/06/05 23:23:13 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:13 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000010000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:14 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xf0ffff, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 386.288789] binder: 21557:21565 ERROR: BC_REGISTER_LOOPER called without request [ 386.300088] binder: 21557:21565 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 386.308436] binder: 21557:21565 got reply transaction with no transaction stack [ 386.316000] binder: 21557:21565 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:14 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)="6e65742f736e6d703600cb7f0f02d90fb27319998f72e57d4d0fb87e4bb6c7f54754d30ef05d9915b45728c7717b8baf7a") sendfile(r0, r0, &(0x7f00000000c0)=0x10000000, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r1, 0x8b1, 0x10}, &(0x7f0000000100)=0xc) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x7) 2018/06/05 23:23:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 386.338488] binder: 21557:21576 ERROR: BC_REGISTER_LOOPER called without request [ 386.374405] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:14 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00f0ffffff0000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 386.545059] binder: 21590:21594 ERROR: BC_REGISTER_LOOPER called without request [ 386.555317] binder: 21590:21594 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 386.563520] binder: 21590:21594 got reply transaction with no transaction stack [ 386.571167] binder: 21590:21594 transaction failed 29201/-71, size 0-0 line 2763 [ 386.581650] binder: 21590:21595 ERROR: BC_REGISTER_LOOPER called without request [ 386.600391] binder: undelivered TRANSACTION_ERROR: 29201 [ 387.069105] Process accounting resumed [ 387.227297] Process accounting resumed 2018/06/05 23:23:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:15 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x33, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:15 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:15 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x80000025) exit(0x80000003) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:15 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:15 executing program 5: seccomp(0x1, 0x1, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x5, 0x200, 0x1000, 0xdcc5}, {0x3, 0x3, 0x5, 0xffffffffffff8316}, {0x2, 0x100, 0x8, 0x4}, {0x4, 0x9, 0x80000000, 0x3}, {0x7, 0x3f, 0xf981, 0x400}]}) socket$kcm(0x29, 0x2, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0xffffffffffffff9c, 0x3, 0x1, 0x7ff, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[{0x4, 0x6}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0xc2d8}], 0x4) r1 = socket$kcm(0xa, 0x6, 0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7fff, 0x600080) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000100)={0x9, 0x13, 0x3, 0x101, "c84040a30d3c192b996159a29c26dee72e6513af042877d4d5a32faba4e3c4c4"}) setsockopt$sock_attach_bpf(r1, 0x10d, 0x4, &(0x7f0000000000), 0x36) 2018/06/05 23:23:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000f0ffff0000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000020000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 387.473692] binder: 21620:21626 ERROR: BC_REGISTER_LOOPER called without request [ 387.483219] binder: 21620:21626 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 387.484801] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 387.491560] binder: 21620:21626 got reply transaction with no transaction stack [ 387.506400] binder: 21620:21626 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:15 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x3) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_MAP={0x28, 0xe}]}, 0x50}, 0x1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) 2018/06/05 23:23:15 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x4305000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 387.521270] binder: 21620:21631 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:15 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 387.558322] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:15 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa007fffffff0000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:15 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x89060000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 387.736883] binder: 21646:21652 ERROR: BC_REGISTER_LOOPER called without request [ 387.748054] binder: 21646:21652 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 387.756335] binder: 21646:21652 got reply transaction with no transaction stack [ 387.763887] binder: 21646:21652 transaction failed 29201/-71, size 0-0 line 2763 [ 387.775143] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 387.792444] binder: 21646:21656 ERROR: BC_REGISTER_LOOPER called without request [ 387.802276] binder: 21646:21652 got reply transaction with no transaction stack [ 387.810134] binder: 21646:21652 transaction failed 29201/-71, size 0-0 line 2763 [ 387.819233] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 387.829126] binder: undelivered TRANSACTION_ERROR: 29201 [ 387.845642] binder: undelivered TRANSACTION_ERROR: 29201 [ 388.285097] Process accounting resumed [ 388.442280] Process accounting resumed 2018/06/05 23:23:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:16 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, 0x10001, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r1, 0xd0, 0x87, "3c3d526170836d0a365768da39ef46068fc295028ab03635b4d2f84be7ecadb0b9b3f65bf3c13c1e4a5e79cc5a9881f43f227a2dfc9ee80563877b69952c80fb7986d884cbba45057b999c8c6ac69ddb77c7582220e4aa28227af3c58a936456a95ab2d4faa3e819ca3de700b0420e33fd3e12b9245235b8ec82b67e03df35d8662235d69143e0"}, 0x8f) 2018/06/05 23:23:16 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x3f00000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00020000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:16 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:16 executing program 7: fcntl$notify(0xffffffffffffffff, 0x402, 0x80000025) exit(0x80000003) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c6530a8") 2018/06/05 23:23:16 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xfc00000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x81000000000002, &(0x7f0000000000)=0x75, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000280)={0x0, 0x0, 'client1\x00', 0x0, "e6128b7d4844bd73", "caee26ae66119456a797e7ecbf7ae5f6d5ff4178f06b38ea1f72f874898577c5", 0x7}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, &(0x7f0000000140)="33ea5354cfa55d4ce13b756c475bfe1c856829000360272f31a6e00bc85450e3cc194937cd2092b0ef5084b61a5ca716c4f2b0ea163a955480426736f8e67e747466694513a11342efd67a7def0f9c704da21368aa662cd6e42c608f0a4fba2b18f7077f75876827e05993fb9b57c74e73b87e64c4984b65f202fce42f7ce07d4b54b736cee632c26c2e5295e8d75a9ac163ac9b2ec5f43d3adfe3e8f2d43a5e9d3b8ba6502ea056df17a872c543bc5de3e8f05f928a68e5140c5b66055d7b3e93e600d6ea61d99c6e5f5178b0375dc351069944a790d89ec844bc3859f4820047a1", 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0xfffffffffffffe42) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000080)=0x100, 0x8) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) write$binfmt_elf64(r1, &(0x7f0000001d00)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYPTR, @ANYRES64=r0, @ANYBLOB="17ba2fad29cae4f77531a248fe89b3cd2d71544a17f2802fb5f77384e8af1b2a2a60add694b0da0019ae27654c5b41c300ae9582488190", @ANYBLOB="3e94841aa4ccaa328ee7c0bb24b18790f38ad7f80ca9c3dce098f4f79341fbcdca06"], @ANYBLOB="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", @ANYPTR64, @ANYRES64=r0, @ANYRES64=r0], 0x1028) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f00000003c0)="9a89f430d7a7777dc877571cef6d0d15d27bee17060e355d8e1a2567ef98e120871556b35558ea45501991dca0c627a5d233a436c6bc0261de1f47854b9ecdc3512ede4751bd2f73aa482da36c5c8670aa316fd80ea12f3173b423b0945f13a3854fbc53c9d3f677e1016c6118773ea9b09879497cd340562791a004930d61f82af57cb0fa31f66c39e6e5645c8a4922d51f54d52c9a7063624e94d072eb257abbda3fa9df1c84195586d69b7fa87e3339c1994cb644cd03e764f0b15bdccea50a99cb5435f470ac40e0a59848240aaf0405ebf09324e64e8527f93cff711135108068c1acaaf9e2d718929ac681c59f67573afd8e98a91684af1269241908efe3d3b6cdb4b2a5bd0dac0e1424f8736abec3dec467c4176a044cf088773f0c96e50f6c31f63f557985f79d04665f83c79a15d31225a32930fcc1756fa704b694f55797aab0d414ad06d0a6bb468b15f745e0b2d9ca5bc7a50a897f441e1a04fa5d305fe775da7672790548c75c78e8ea6b93604845b81e0d1bdcd700882328268e77a3cab6802468f09e8e92ecc67ad4e130f450f16deffe582c17ea91a54e6647ee50fd6076efe68e00ce88250a027c1f0e0959b081ee4686a680ef254e1e48495475f20105b802ebb7020da231602d8ddbdcb9b55a2ed4a04d54ee581200e23057bc851fc0f478790bb8d9b5d061910ec91e1dbca0eb131cb245f19b5ddd95299f3521864c78228305cac55e62cca53fb75f46377127bf9158e9ad615d424e5835d6812ec6b21bed353116effdcc77f61c9a45440ff77a9195cfb6bf6de0c27ddc2bf26ae6b64c6ae4832cefa0b82d5bbd905e7d35f07e783a3ece08dc44b0803911898142d88f1c61a56fb12c30d7754b4866f5ab38048d9f6c38603d987000c146b6a130fd6e27acb877c6afc9fb5a32ad6986b9e103883724da31b989cc03c078450e21e1994686d083471815f897b6c75e9f90a8639ab1b062e838ae88ccdc61d32da6f9cf48f307996663f7cee1c39ef1c6415bdf948bbb951a032a8a22098cd6ebabc667bb85b2b078a135d501852de8208f2357c60edc2ac4db4b1d6b4e72fd3940b9419af24dc49a19901657c2eceb655350608674b726a22c07d73f0a0c943ba81e67a037f032d26b0d4754442669a615153842e67230880132ddf85fde46ef3df2ce9223309637850c4819b7d9b98b14fd3bfb7d4ea846f78f9c00118b441122f2fe2b874f62c67c4702735efd794e98acdcdb0de91daebdc316e7e17d3fa54a24befc2aa4d398e3053385d3d46c59ca60fa309d1b607c7d44be52f2dd5e3e9a66e8d42ef36a6547b1cfacb59942a0d5c6eb22c5caee9e4c127328f69d3c3915022268e3790cdad023191b2d24a68b4bb414ac1ff48fbd8e8a8545858d5472eaa94b7e221ea85c95d80bbb165a7e44daa91f94d2704355c6077cc352838d5f1076b25794960135c7576b2b75a8237f288740e71ae17313b862da6bccb5edf11d553c1789815958025a94b31bc4c1ef697dbfb5f5254944d24e3e9e10c945299a8d8e44fbc02701e99241a6167c9be6da510e81d815ccf3151a36e74ed8600603368141c642ac0a129dcf536058c2b638e183571435b0c009cba03849df2c3f01b399120c23d91b7b35b9338126c24e9cc5b653cce1644078a58210b0c63e521017cbdeb3c90a0035aa9f7ce2505a932f19df2212fcfc47aaf73108bd3f1b847864e34cc8347b1acf2487bf715c93e7711a90c1d51bd949734024db62e3c5d789badbc16597bb3e8789e5b8f3ef130e53ed3183a2fc5061e561dccb335b689f2674efa56455b85b6bbe9f328ab1221d0773116407f77e3ae35024478c48d5ca78f8cf33eeb448d60a86449d09be7b2e4cfdeac7d31e9c5d828d7c9e3ff2af6db5d1384467a59eea79a84fc3cbf8e9d54df1549d202585034c07fe8f1814b6dba01beb01cf9dafe5842b72f9d33a3db35663bdf5f8ede5d912eadcda60f4936bd59f82bb4846071ccd501fe45eb286415539f67f843dacdb4e582d1811c816ff416b58da836219e94dc0bf3aea6951534f4b12492c5b0f0290d1abb10827617d862d44667275c3788eac6a9006368eb4315540f136e5e339dee50b683db002dd0c2f16bb65a9b3bc4fa6c5f7afce3d903784ea78dcc514388346dcd795512eae743cc260770d629712b50e926576fc3d661197b57053f4046ddfe795cfc7ea382029dcf4dd13d24f5efd6b516b33d4217e8ca4ef277d71d66190ccc92b5e3065d7987b0ce67b7b32358e4993f8be378a16d5650bb5abfb65f2f56ba1475958f94bff49e833225a4d5bb73374373c93df63e00306e342b068485f973faec12b5b09927b46775245e734a79ef89e21e3fce8945477e1918bda6a0bef2faea4dc20cfe47df140ac3e966e8fff4495acaef15050ec30ef4f562e0483a80e134a6f5489d08cd88bd965229f5f250b09cade995f0a85589b2235cc432ee5b37032769068cb674d1510015f6f97188c8fffff9fa3c283e29cc9e92c62d1b776beed204da703629e42e7c549e322c2bf28f0e55dc7535fd55c73540c8f44bdcbd281fb75a24a5e5feaeb6ec328f59f59f262ae5b52b0ebb110b75d458f82d8ce35310b5edb5a4d0987e3bcf8604649bfb93e6d8453091b1e0936dd6194125a7def605d5eff067ac9616d0667249128f6526977606d5d6450e0b25c3e9d7ffebfbc0d060bd73313f1ba2b19bbef8cfca1fd29ef7858f35a4e6513afc874b145deeb4e8f99ce20d9bc1d7f7c0482bacfbb289879291223819e17c5af8a9d6d1f17584c884e0d3c51bbcd9f35da5a767c7c4951fec6b847c585c670b3780d7c3a85009c36b339e1c5cd9fa23f031d63134466f674cbca5e4bec8ac1eb4fb89db02a55a5ff400afb9c0645b5b237ed210ca1df0f416f99ba4c8ff952e9561b8ed4cae78a6d6b8b0cb9d14a20ebe3b9f9d4c40260352ccae23b9545ce254ca8345ddc09f540bb8b686b515ac473acec557a879c72c242e2c6d32acf9b1b3f3e3d1ddf11e7ede1c01669932b6ccdf016a2a4bff3eb9dc46f96bbeb1d557274470c27f8be3da2978a4a514163b201bb3b08d16af3912e85987c223b6f2b027a4bbb5627002e8fc710d30040cae046e556bd443d9c23d9a56e332c8e6719e46ffaee5b16148092c5295c0cb4c072120b42d0e15754ec2beb2e104235fd7e077e39f1b62b3d74ac0759338e3cd70b58e71fab75d8a7e3991e488e58a65e2a7da90e0c92c1e8421743af48508b98c8575adeb7e246d603975090f62b8b569be4b7bb95301fec4f64cb402693d8685f7589b6409add95c523cc75106554f480ec2f119ead44f678f19df7322f51a5462e95e4c1c1eddc0994e47d0e4b081a44f0d67da3cb3875bdc06a464464161194e4ff6201fc46cff645b5341febc60680785c34d46d7640ee603f0fcef6a6d68b189a69e6651a5b6c99f44875fb62f9c1f7903d13d6069cfeef0adfe686a91e2c2463c1947a10666db2e3d02cf20a77a741daf7b03a349df981d8ace9fd8dfc6e80090123e5ae808ce0ff228dacec671db0af8b40909e645af8031e4201fc601639f60b3693b3542ced05fbb381f35086d4cd9964896027367d673f214b7525da2f0063dec7bb59616c2a6730e668504853f5c7fecf3b925e52a48ce2b2f92a8c753e2d38117970ea161c1205ab59491cd78306f0c69a7acb795dae3bdd04f733830a9225e3143b6b44bbfc421eb9129195e63294eb1693dc499edf1a1590bdcd7cdef78945ab48b62d592593d45e69fbebff8e36cbe4d03d62d0c1eef136e6f2633156099870d7751b2b224b633b74fcd7c0cec7c36f0f9c28245db4c656266c6de4e5b89b73785e41d2d0b31155443a6c63a0df738bf7544e73f93abf1e764598577d9b702e203bbef06e68d41ae26ee3c815281ba3eb23246a4974cf109e68d8ebb85caa842f92df907f417e7128639185b1625e93e2e4f3fed9fcf44cd4976b2a8bdda2258300dceb9b6bb0b28f0a4a2aefbff5dc3bec27958673e5a6da625395c5a8552327be4a81b4ce17af78320baf30e3634fee1df26f50a0428265a203f62e7bc96e7e13e9c1ec06e13c2f75dc921625e6cb5652aef3034dceb78269eb749e14dbc1192a2cda950ba56c2ba284377327a931faac816d80b86b3cbede85a140281461a9f409d8e12642e5b6d32275d0044e8fe8c813135d519c0882a391bb828fb49f78a380a533a9bce19b1743eb87b1f0103139c9881735c923ea293acf649d2543823c098393e400c69eeea1cc2bea11b11d807bcdbf650eaba5fa094cae7a43771084176ce045d6c8d196f916ff8f6246821f9cbf7705ea9c9d4cc7521a2c72c50094c7c42acb066bf4157163dbc6123f1f05d889d598f8ac210f144b4dd56d75681ceb492332604dc48b11dfd55647ba7e1fc269c4b6cb78c6b22816e5c397b87bdb22ee23d2949308396f9c5bb8dcf0a5fb7b29e3377c07175f754070dee0402dc27c1524e9b51effd55eb3736e4f6e206cceb8bc4705d0f9a1e0b26f85a11a1b11c994732b11b55895618b9207c38f2c2351b813bf2b3a183addb59bb31889fa2c830f567c0bae9a1889c4506da5487bc2425fbf493a7aae17f53b75cd5c38c65e93ee1beb93321ed528c8053081f580e50dcb72841be7b80220f8d6c45be82738ac9d1922a083a87cbbd71471ea521338a97521a69cfd353e7adfcf9a02dba5c4f26d72885a2fd70ab068318db869194f08c1feeae97db08c6deefe4cf4327bdef647f1aab3db1b04d72974697859988c8735bdf243ffb69d77c93b80da764c5eb041aa4228f3dc5737d9784356799c6fd9fbea171e682a7464fa7afdde60f082e7169493ea0b116189650065ba1c2c545802890a909081536a245bc891772c6bee8387d4f67d0304501196d3d48f370e801934b6ad77575c8c90075b7541a316e53dbef4fb5baff5ccf4da817e6fdca820865d24338e18868d28d82b2fbf72a89cd76b65b6661c334e69631efe56e548cc13a687275111a47769f11a912be98abdeef1b56ad1bada78f1fd245343b03a4c0aefb52b232639383d67c91162f694dedc1fde883715782a0290bfab34146e4c09a23cab455811d9140656d13aa522d39ba6ffb0886c525999d910fd11b3f7abb5ac005559d5245186a4b7e089ddb0f9677b94bb1495afb476589ec75d96e91d274795dfc53fa3aa5106ea08570e643303c7f182127d9cd740c08c3dfe65c80bbcaf8d400b1b26acd73a6ddb2338189e7b35ea57551b9232407ba2831096eed5b23a524dbd2f2b1b36d42d8c506a5afca3ebc84ab6b0c6f9e849e34b1b3d1e40c8743bfb13ba25353dd2bbc2ac3158be457012423263773900962899502b4160591e7036af07fde5beee04381a68afdc403eb83c80e7722f0970b5a9be4f3b42d0ad1def820b988f13a415ad4d70344aa286fb64c53bb0fe88aa0c118c2438f49e255958364e0ab39fcfecf87193a75d68f4366eca1a81dadf45874c5120b3ed4520c1e6688b8d4b2f5d34f9244a5f95c4d74d84fdd690fc66f78e0af4c287261a0e1891f153108f83115b796d22885790afa2c4b6d0ef0bdbdfbe5422a7162532edb16e339feb8bd68cb4bfb9dc5b10fd6662685b10f34f2040b3c774b0c04e5b6e78e90df2935c6ec15619cf6e46307ff4624529146605937a2ba729bf4456e6bb0930742b14c174e627433c9d2435d55b5f470d74448a35a38dd7ef008a5b484f00a3c386ce9c95c9289fc6bb19c5e82d15ed39b4580e7b92c393", 0x1000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) openat$cgroup(r2, &(0x7f00000013c0)='syz1\x00', 0x200002, 0x0) [ 388.736540] binder: 21688:21698 ERROR: BC_REGISTER_LOOPER called without request [ 388.759511] binder: 21688:21698 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 388.767792] binder: 21688:21698 got reply transaction with no transaction stack [ 388.775343] binder: 21688:21698 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 388.785503] binder: 21688:21700 ERROR: BC_REGISTER_LOOPER called without request [ 388.805959] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:16 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:16 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x40000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:16 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x3c}, [@ldst={0x3fd, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffb0}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) [ 389.006532] binder: 21713:21717 ERROR: BC_REGISTER_LOOPER called without request [ 389.016794] binder: 21713:21717 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 389.025159] binder: 21713:21717 got reply transaction with no transaction stack [ 389.032691] binder: 21713:21717 transaction failed 29201/-71, size 0-0 line 2763 [ 389.042207] binder: 21713:21718 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:16 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 389.069229] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:16 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xfe80, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000000000ffffff9e00000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 389.243974] binder: 21733:21736 ERROR: BC_REGISTER_LOOPER called without request [ 389.254256] binder: 21733:21736 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 389.262532] binder: 21733:21736 got reply transaction with no transaction stack [ 389.270052] binder: 21733:21736 transaction failed 29201/-71, size 0-0 line 2763 [ 389.279950] binder: 21733:21737 ERROR: BC_REGISTER_LOOPER called without request [ 389.297547] binder: undelivered TRANSACTION_ERROR: 29201 [ 389.630218] Process accounting resumed [ 389.669062] Process accounting resumed 2018/06/05 23:23:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0003c700000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:17 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') fcntl$getflags(r0, 0x401) perf_event_open(&(0x7f0000000140)={0x2, 0x1e6, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/06/05 23:23:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:17 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(0xffffffffffffffff, 0x402, 0x80000025) exit(0x80000003) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:17 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x800e000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:17 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000f0ffffffffffff000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:17 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x2c00000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 389.960073] binder: 21759:21771 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:17 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x20, 0x105003) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000003c0)=""/199) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000600), &(0x7f0000000640)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x2, 0x8205, 0x6, 0x5, 0x0}, &(0x7f0000000180)=0x10) r3 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)='/dev/autofs\x00', 0xffffffffffffffff) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1d, &(0x7f00000004c0)=""/234, &(0x7f00000005c0)=0xea) r4 = add_key(&(0x7f0000000240)='ceph\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="835b446b0ecc369c67eb51f16dc31a768d399c064ec5d721f20a1f2fac75e68e1d7cceac1dc027ca6080d5626ad0adffde9e84ca9fe1e82120a2a1530d16255fe39d13c73d5d893d0e6d8f48983ce6ef3558d2c4317b711aa1f8f6b06f454da74c4f1ef347ebaabe367f18197e48e94ee75c664f8c6e909e7600289de7069a81f927ce7e7da24f5cd74c1d5a592d2ff38373010d95ed038a1f9397b4675269e4531f4e460931e4949be447ae1a97a1d71487d8c60c2c3d2a", 0xb8, 0xfffffffffffffff8) keyctl$negate(0xd, r3, 0x65360c66, r4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2, 0x2}, &(0x7f0000000140)=0x8) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r5, 0x114, 0x8, &(0x7f0000000000), 0x4) [ 390.005058] binder: 21759:21771 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 390.013358] binder: 21759:21771 got reply transaction with no transaction stack [ 390.020886] binder: 21759:21771 transaction failed 29201/-71, size 0-0 line 2763 [ 390.033618] binder: 21759:21775 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:17 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x8c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:17 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 390.080924] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:17 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000000000000003c7000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 390.218377] binder: 21790:21794 ERROR: BC_REGISTER_LOOPER called without request [ 390.228951] binder: 21790:21794 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 390.237409] binder: 21790:21794 got reply transaction with no transaction stack [ 390.244927] binder: 21790:21794 transaction failed 29201/-71, size 0-0 line 2763 [ 390.256793] binder: 21790:21795 ERROR: BC_REGISTER_LOOPER called without request [ 390.277334] binder: undelivered TRANSACTION_ERROR: 29201 [ 390.768098] Process accounting resumed [ 390.928318] Process accounting resumed 2018/06/05 23:23:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:18 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x88480000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:18 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x24040, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000300), 0x4) sendto$llc(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl$sock_ifreq(r0, 0x8915, &(0x7f0000000100)={'ip6gre0\x00', @ifru_hwaddr=@random="4e4aa9604a69"}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_NMI(r2, 0xae9a) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000280), 0x80, &(0x7f0000000940), 0x0, 0x0, 0x1a7}, 0xfd) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x22}) ioctl$HDIO_GETGEO(r2, 0x301, &(0x7f0000000040)) sendmsg$can_raw(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x1d}, 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=@can={{0x3, 0x92a, 0x8, 0x2}, 0x6, 0x0, 0x0, 0x0, "121af32cd5d00041"}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) 2018/06/05 23:23:18 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(0xffffffffffffffff, 0x402, 0x80000025) exit(0x80000003) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00007fffffff00000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:18 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c6530ff") 2018/06/05 23:23:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000f0000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:18 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x33000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:18 executing program 5: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x4, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000080)="dd413c89497b4a86c49ccd1f30d5d833fa39f07e2f9da5a5e78094255475fb4d9035b0650d7ddbe88b527de0d461132eea37947e2feed61b3f54ae365ca9eaf74b163bffd4d75a1c89118df8f0fefc852e255f6b79855206b47fe9b8c418a79a21703066a19c031bb1e1b7d0913f819e78fccae0d9a3ad49f41cb661edb09da09c8c912944e7080eb5f19abc0004155aa940c152775ce775ff17234bd4f6", 0x9e, 0x9}, {&(0x7f0000000140)="519072bfe34142700198c44e5c8e9ddf1772a765cf19adc47701671ab8cf1bab6a7603da7b890dfc73f7466502c3f81fbab2fbdb4ef672a295cce4fa36a55e785349ca12d4df1f6f0b87d6", 0x4b, 0x1000}, {&(0x7f0000000280)="3d13805b27ec30696adb55c97f0a3b76488fb21737c019e989edc49ea3d8d5eadb253b9df6bd17dc73b4f461befcad40f502beccb17fada22a4114a9b173a26ade73abe615943bb37d123d57e3c53920bbb0da39f6e576418ccf609e13c5e10497475e235c50c4a570cf584d46de386fe23adc12e6b4741d276970eed6b6ab1481970aa9309efbb7ab66d359bd90440e6e84a4ceaa4ce34fc87f6675b5da0bb59c1589a375", 0xa5, 0x4}], 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6c733d757466382c6572726f72733d72656d6f756e742d726f2c6769643d397836373535352c64697361626c655f7370617273653d7965733d352c636173655f73656e7369746976653d6e6f3d0038362c64697361626c655f7370617273653d7965733d343936352c64697361626c655f7370617273653d7965733d3b2c636173655f73656e7369746976653d6e6f3d377d7939362c6572726f72733d72656d6f826e742d726f2c646d61736b3d32333033312c00"]) r0 = socket$kcm(0x29, 0x80000400000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) utime(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x3, 0x9}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x94, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) [ 391.188680] binder: 21823:21825 ERROR: BC_REGISTER_LOOPER called without request [ 391.200967] binder: 21823:21825 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 391.209228] binder: 21823:21825 got reply transaction with no transaction stack [ 391.216786] binder: 21823:21825 transaction failed 29201/-71, size 0-0 line 2763 [ 391.229928] binder: 21823:21834 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:18 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 391.253788] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:19 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000f000000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:19 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x5c00, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 391.441663] binder: 21847:21853 ERROR: BC_REGISTER_LOOPER called without request [ 391.443952] ntfs: (device loop5): parse_options(): Invalid gid option argument: 9x67555 [ 391.449704] binder: 21847:21853 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 391.465905] binder: 21847:21853 got reply transaction with no transaction stack [ 391.473456] binder: 21847:21853 transaction failed 29201/-71, size 0-0 line 2763 [ 391.489291] binder: 21847:21854 ERROR: BC_REGISTER_LOOPER called without request [ 391.517284] binder: undelivered TRANSACTION_ERROR: 29201 [ 391.552410] ntfs: (device loop5): parse_options(): Invalid gid option argument: 9x67555 [ 392.090221] Process accounting resumed [ 392.126531] Process accounting resumed 2018/06/05 23:23:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x2c7e0200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000200000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:20 executing program 5: pipe2(&(0x7f0000000480)={0xffffffffffffffff}, 0x800) fcntl$setpipe(r0, 0x407, 0x80000000) r1 = fcntl$getown(r0, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2a0, 0x17, 0xa15, 0x70bd25, 0x25dfdbfb, {0x4}, [@generic="d6fc539193a0d415eb7d92b129a1e3fa5188ac67604ec333db", @typed={0x8, 0x23, @ipv4=@loopback=0x7f000001}, @generic="a3829473b20c25bb960872ac9c713986aa0626e653b98180327726ff0090010b703a13b278c02de768629c2769490e214047f26bbd362ce14c2fa9b7dab05c7d1b05fc4ad595d75a5c94729dd2d9865481e88881b50b51803989db70909b74e6ac63f2e2338dc966aa72b506ae31f3e58d7c40b2813911eb25637d97c5976827e2b1379bf3de1f92daa86e64b9a750b61dc71328a88c25449292d4b7f6971af1c6518d4222ed5e84aeb7cd6580", @nested={0xc, 0x56, [@typed={0x8, 0x93, @pid=r1}]}, @typed={0x8, 0x28, @str='\x00'}, @typed={0x84, 0x2c, @binary="8113ffda04c206cb499fbe70074cbb2a7fb9452e3cdf3ade16c1cc221028fc29c0a194c3aafb7dce2b2b91cc6f9dd1ffd2591822dc7d08dde7aa1b7eab159891bb9b037a23f26f092dd11482270cb4a1d80e6a2426014025f3e136d7cdb3efea93d5bb86b692560109b56c77c6e52090bb82416bcc745283dddd22d99bd5b64e"}, @generic="c50d62059c864fc1b953dd68205b14971e2b4b2a2f2eb420b3bad9e9489cd642d6f41751f536203d5118b123277171c90c79618c1b93d2ebf604ed6aa8b150da997963cf72b0b1489b000de110c0ccb0fafbf12141be9a894c5b67934ce6f431bd250526e1b61b7583804f120eb2ba0b4ff08b961e6c8dbf3996b1822dcecd5aaed0c61578a9596f3521c397e9ccc522f81a9751f5a6883a08b1ac336263302a0325b133864c79cb6975deaad1c145b7b291b5e4655d3b925a01831b2532fa51b7cc9b5485c16b8972e07a17feed6a5eb1d73dc86b5dbf65b4573cf732338a380c", @nested={0x44, 0xf, [@generic="cab0566671f8a18f3eddab246967b5036d8f6627627dc52f794e5b5f45dbdc34e761634540d92c9b87e0c3c4c3177bd3d4d4c50594aec65697fe2ed4fa"]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 2018/06/05 23:23:20 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x689, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:20 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:20 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(0xffffffffffffffff, 0x402, 0x80000025) exit(0x80000003) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000000000002000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:20 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x5c00000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 392.415382] binder: 21890:21894 ERROR: BC_REGISTER_LOOPER called without request [ 392.423903] binder: 21890:21894 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 392.432080] binder: 21890:21894 got reply transaction with no transaction stack [ 392.439618] binder: 21890:21894 transaction failed 29201/-71, size 0-0 line 2763 [ 392.454156] binder: 21890:21900 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:20 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x4100) accept4$inet(r1, &(0x7f0000000080)={0x0, 0x0, @local}, &(0x7f0000000100)=0x10, 0x80000) getsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2018/06/05 23:23:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xc3080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 392.484434] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:20 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="746872656164656403", 0xfe63) 2018/06/05 23:23:20 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x4305, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000000000001000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:20 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0xa, 0x5, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x31, 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000080), 0x8) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f00000000c0)=r3) [ 392.636853] binder: 21914:21918 ERROR: BC_REGISTER_LOOPER called without request [ 392.651904] binder: 21914:21918 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 392.660154] binder: 21914:21918 got reply transaction with no transaction stack [ 392.667666] binder: 21914:21918 transaction failed 29201/-71, size 0-0 line 2763 [ 392.679302] binder: 21914:21924 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:20 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 392.706850] binder: undelivered TRANSACTION_ERROR: 29201 [ 392.861215] binder: 21936:21939 ERROR: BC_REGISTER_LOOPER called without request [ 392.869612] binder: 21936:21939 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 392.877772] binder: 21936:21939 got reply transaction with no transaction stack [ 392.885296] binder: 21936:21939 transaction failed 29201/-71, size 0-0 line 2763 [ 392.902673] binder: 21936:21943 ERROR: BC_REGISTER_LOOPER called without request [ 392.936259] binder: undelivered TRANSACTION_ERROR: 29201 [ 393.252088] Process accounting resumed [ 393.417175] Process accounting resumed 2018/06/05 23:23:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:21 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x3a00, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000200000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:21 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000100)="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") socketpair(0x1, 0x1, 0x4000000000, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000300)='gre0\x00') ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x51c, 0x0, 0xa}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)="11014a7cfc5141c9a36d4b31a2b6d17bc239e47a0c592c20a6592348910b9891e5e921dd7e4c764f70509c773b285a74d94820c6f2f30f520c36b54da6cc3c4527917ff26db1dcb6f6180871b0a3718ef12fc6d9ab"}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000300)='gre0\x00') 2018/06/05 23:23:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:21 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x0) exit(0x80000003) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c6530a9") 2018/06/05 23:23:21 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x3300, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000fffff00000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 393.650957] binder: 21962:21970 ERROR: BC_REGISTER_LOOPER called without request [ 393.663813] binder: 21962:21970 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 393.672079] binder: 21962:21970 got reply transaction with no transaction stack [ 393.679587] binder: 21962:21970 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f00000000c0)=""/11, 0xb) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x51bdf3ca, 0x40) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f00000001c0)=""/94) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) ioctl$EVIOCGABS2F(r3, 0x8018456f, &(0x7f0000000100)=""/117) ioctl$TCXONC(r1, 0x540a, 0x2) 2018/06/05 23:23:21 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\t', 0xfe63) 2018/06/05 23:23:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x8c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 393.699955] binder: 21962:21975 ERROR: BC_REGISTER_LOOPER called without request [ 393.733402] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:21 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x1400, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000003c7000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 393.868198] binder: 21990:21992 ERROR: BC_REGISTER_LOOPER called without request [ 393.878082] binder: 21990:21992 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 393.886267] binder: 21990:21992 got reply transaction with no transaction stack [ 393.893781] binder: 21990:21992 transaction failed 29201/-71, size 0-0 line 2763 [ 393.903496] binder: 21990:21993 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:21 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 393.939287] binder: undelivered TRANSACTION_ERROR: 29201 [ 394.068275] binder: 22003:22004 ERROR: BC_REGISTER_LOOPER called without request [ 394.076445] binder: 22003:22004 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 394.084653] binder: 22003:22004 got reply transaction with no transaction stack [ 394.092234] binder: 22003:22004 transaction failed 29201/-71, size 0-0 line 2763 [ 394.113012] binder: 22003:22007 ERROR: BC_REGISTER_LOOPER called without request [ 394.143127] binder: undelivered TRANSACTION_ERROR: 29201 [ 394.538825] Process accounting resumed [ 394.577361] Process accounting resumed 2018/06/05 23:23:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x807e020000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:22 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x0) exit(0x80000003) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:22 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0Z') 2018/06/05 23:23:22 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x400) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) prctl$getreaper(0x29, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x400000000004, 0x31, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000200)='/dev/input/mice\x00', 0x0) 2018/06/05 23:23:22 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xffffdd86, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:22 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000c703000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000000000007fffffff000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:22 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000600)={&(0x7f0000000000)=@sco={0x1f, {0xffff, 0x3, 0x2, 0x3, 0xf7, 0x3}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="ffe7a4c8df3219d935937e8a4c2a369f8d22dd0951fc6f71ab684beafada69be64b166a0a2bc51161974512c2b8996f58178f8e6dab7b0f763a0f5edb095509c0045eefcb8c11419e8816d9e2d84df67c0d34d8791425d2b86d06cb949e733bc9f08dbecc84b564b54d774527b8661a649343a99c82aaf6cbde5e13fd860615e07b414983b3ff5730e7a319ff769f200704a7757d57e6de2ca1d4b7e6273a941ed424425b611b5612849e52d", 0xac}, {&(0x7f0000000200)="2ef62d913cafd1f58c92c4cbb0d67c08b9c0d21444272ee72d1a1e75dd6b73847edbdf5ebbaedccb5f2034206266e6b56346e8702209b146385d17cc302bc3f6cf6474ac3f9611343836421b83972b783bbea0f8be9bf50cbc192b741c7cf399d90ea36821b3e4709dfd0a75f9eed64424a79764b95641b282c526f570499904e23936c9a2f0de9bb7185cd315f9b99a5578ba662caa56bb7ab107a6f0a5", 0x9e}, {&(0x7f00000000c0)="2ccf8bc5b790af6a942ad2435549786dcc2668953de893bcacec4ad544675f4288cda76cd6c377d9d01cd62a6b00bb9c0db9c37bb4e4db07", 0x38}, {&(0x7f00000002c0)="67fd84a5f5a52df02d", 0x9}, {&(0x7f0000000300)="cf0bed5181e1f442090d13a4f05ccd745d87e65151a4a026e6f69d654048e6163601a0bf28ff", 0x26}], 0x5, &(0x7f00000003c0)=[{0x70, 0x11d, 0x8, "5a30ad6c8ac0aaeaf2c02b73463b47124e83414fbde0bbdf9bcc33238183e3e48600bb9166e137803d96a53223eb7ccb70e7d7e899e978e8ac8d135f550b6766eb336a6c1708e4520e7a2ccd5074117bdb6fa5a973bf035614b8cda436c0"}, {0x100, 0x112, 0x119a5760, "45e4479c37acfe662701e1611db4289cd332695f11e3caa322e89a89ab0c1d02afabb7787f32cce42cb6308d97c2c944cabe51cda273af0c5949469e8ee5032e575595c03e42c800ec7f0d0c787fc9f0ea902856968951928e31bb618e9b8cfeb0aa5cea343a45412d351b8edf9120063a034e926f8eec7a64c3aa54059fe511d82111596fce2a5a044924d2df8158eb14ff7486d22573f247b49761b963cb0125edb0caffbebb8fb4219e58e62ae73339ed77db3f7c4084b19a3437915d08aefd41cc0246582f42a9d3aa06ee91f3f7ce7b0818536a9fde057ad69949dd391fd72b06e2e36fa4f33d815b2f"}, {0x98, 0x112, 0x6, "005a4b84072e6ee02273d801c598275c7e4cdb05095397db02658704121572602e7c63dad441787251ed5edfefb5018b891e89431aa6357eb8c8372d24c8346c180bdb8894d8e3720760c74e3fb740a4e69757a3be039cdf4067c9554dc6de5a43250237b521feea1436e14dbda5221030dfca4cf55e65b849163d05569b02f16c6615cd"}, {0x28, 0x10b, 0x270ac00000000000, "e3f90092e7c24bd25cad6679b9b256f801711f"}], 0x230, 0x20000001}, 0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000080)="24000000110007031dfffd946fa2830020200a000a000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 2018/06/05 23:23:22 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x20000e000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 394.827376] binder: 22028:22031 ERROR: BC_REGISTER_LOOPER called without request [ 394.843063] binder: 22028:22031 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 394.851379] binder: 22028:22031 got reply transaction with no transaction stack [ 394.858999] binder: 22028:22031 transaction failed 29201/-71, size 0-0 line 2763 [ 394.869009] binder: 22028:22038 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:22 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 394.888667] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:22 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000ffffff9e00000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:22 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x543, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:22 executing program 5: clock_nanosleep(0x2, 0x0, &(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/netfilter\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x680800, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8034, 0xffffffffffffffff, 0x0) mlockall(0x3) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x80000000, 0x200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x3, 0x1, 0x8, 0x1, 0x3f}}) ioctl$TIOCEXCL(r1, 0x540c) [ 395.091495] binder: 22050:22052 ERROR: BC_REGISTER_LOOPER called without request [ 395.110162] binder: 22050:22052 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 395.118315] binder: 22050:22052 got reply transaction with no transaction stack [ 395.125850] binder: 22050:22052 transaction failed 29201/-71, size 0-0 line 2763 [ 395.137432] binder: 22050:22057 ERROR: BC_REGISTER_LOOPER called without request [ 395.155780] binder: undelivered TRANSACTION_ERROR: 29201 [ 395.729120] Process accounting resumed [ 395.771948] Process accounting resumed 2018/06/05 23:23:24 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="746872656164656404", 0xfe63) 2018/06/05 23:23:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000fffffff000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:24 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x0) exit(0x80000003) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:24 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xffffa888, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x5}}, 0xda) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000180)='./file0//ile0\x00') ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000080)=0x6) 2018/06/05 23:23:24 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000000003c700000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:24 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xe0000002, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 396.396071] binder: 22089:22102 ERROR: BC_REGISTER_LOOPER called without request [ 396.404937] binder: 22089:22102 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 396.413123] binder: 22089:22102 got reply transaction with no transaction stack [ 396.420668] binder: 22089:22102 transaction failed 29201/-71, size 0-0 line 2763 [ 396.430543] binder: 22089:22104 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xc5080000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 396.454067] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:24 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000f0ffffff00000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:24 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000001c0)={0x2, 0xf4e}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000003c0)={0x9, 0x10000}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x141041, 0x0) openat$cgroup_procs(r2, &(0x7f00000000c0)="ccfd7461736b0bbae9b45c29978e78ebf1a327f26ea4bc82b342770f7e986613aa3cf966f9c3fe9300c15e7025f617c8bf607fc50da68f06e719e1d8d427ff84dbb66c64c09fd8b681b943732742bd7db579516c040ed5ce84f58ad31531a489877b65f7d781233ec3baaf62ca62617a651b6b87a4cd9e91b1d3d22e257380df6a309e2c5223f7a3d0331d55127009079d9c5360c9bd6e8bf3443e9c546c115b53d82687efd6de9fe4b2eced2f65c8dbc9c2c12d9131c0c30f697612b308e24b83250adfd35d95065f1f3c78ba", 0x2, 0x0) 2018/06/05 23:23:24 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x800000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 396.583708] binder: 22114:22117 ERROR: BC_REGISTER_LOOPER called without request [ 396.592984] binder: 22114:22117 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 396.601154] binder: 22114:22117 got reply transaction with no transaction stack [ 396.608658] binder: 22114:22117 transaction failed 29201/-71, size 0-0 line 2763 [ 396.618592] binder: 22114:22120 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:24 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 396.640218] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00009effffff00000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 396.781540] binder: 22136:22139 ERROR: BC_REGISTER_LOOPER called without request [ 396.831742] binder: 22136:22139 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 396.840063] binder: 22136:22139 got reply transaction with no transaction stack [ 396.847568] binder: 22136:22139 transaction failed 29201/-71, size 0-0 line 2763 [ 396.861571] binder: 22136:22143 ERROR: BC_REGISTER_LOOPER called without request [ 396.881224] binder: undelivered TRANSACTION_ERROR: 29201 [ 397.194094] Process accounting resumed [ 397.356305] Process accounting resumed 2018/06/05 23:23:25 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="746872656164656402", 0xfe63) 2018/06/05 23:23:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000000000ffffff9e000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="1bd45006000000d1240970") socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) fcntl$setpipe(r1, 0x407, 0xff) getsockopt$sock_buf(r2, 0x1, 0x0, &(0x7f0000000040)=""/201, &(0x7f00000001c0)=0xf3dba8e145a922bd) 2018/06/05 23:23:25 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x3000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:25 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x80000025) exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xc508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:25 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:25 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="9ff2ff"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) getpeername(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000180)={0x7f, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @multicast1=0xe0000001}, {0x2, 0x4e24, @multicast1=0xe0000001}, 0x2, 0xfffffffffffff13b, 0x3ff, 0x100000000000000, 0x3, &(0x7f0000000140)='bcsh0\x00', 0x0, 0x5, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/06/05 23:23:25 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xfffffffffffff000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:25 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000000000fffffff0000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 397.465360] binder: 22164:22170 ERROR: BC_REGISTER_LOOPER called without request [ 397.502663] binder: 22164:22170 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER 2018/06/05 23:23:25 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:25 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 397.510890] binder: 22164:22170 got reply transaction with no transaction stack [ 397.518418] binder: 22164:22170 transaction failed 29201/-71, size 0-0 line 2763 [ 397.528798] binder: 22164:22178 ERROR: BC_REGISTER_LOOPER called without request [ 397.551399] binder: undelivered TRANSACTION_ERROR: 29201 [ 397.663900] binder: 22187:22192 ERROR: BC_REGISTER_LOOPER called without request [ 397.702395] binder: 22187:22192 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 397.710676] binder: 22187:22192 got reply transaction with no transaction stack [ 397.718183] binder: 22187:22192 transaction failed 29201/-71, size 0-0 line 2763 [ 397.730671] binder: 22187:22198 ERROR: BC_REGISTER_LOOPER called without request [ 397.768069] binder: undelivered TRANSACTION_ERROR: 29201 [ 398.265091] Process accounting resumed [ 398.427366] Process accounting resumed 2018/06/05 23:23:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000fffffffffffff000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:26 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="74687265616465640e", 0xfe63) 2018/06/05 23:23:26 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x806000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:26 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x80000025) exit(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:26 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:26 executing program 5: r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x80, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f00000001c0)={0x1, 0x8, 0x0, &(0x7f0000000180)}) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="240000004f0007031dfffd946fa283000400001f00000000001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x6, 0x400, 0x3, 0x0, 0x1, 0x100000001, 0x1, 0x5, 0x8, 0x62e, 0x7}, 0xb) getpeername(r0, &(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @broadcast}}, &(0x7f0000000080)=0x80) [ 398.607909] netlink: 16 bytes leftover after parsing attributes in process `syz-executor5'. [ 398.620481] binder: 22216:22223 ERROR: BC_REGISTER_LOOPER called without request [ 398.625316] netlink: 16 bytes leftover after parsing attributes in process `syz-executor5'. [ 398.637375] binder: 22216:22223 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 398.645587] binder: 22216:22223 got reply transaction with no transaction stack 2018/06/05 23:23:26 executing program 5: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0xc5) close(r1) 2018/06/05 23:23:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000f0ffff00000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:26 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xb000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 398.653114] binder: 22216:22223 transaction failed 29201/-71, size 0-0 line 2763 [ 398.664721] binder: 22216:22231 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:26 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 398.725254] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000100000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:26 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000740)='reiserfs\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000001c40)=ANY=[]) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f0000000040)="0047fc2f07d82c99240970") r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x40087602, &(0x7f0000000100)) 2018/06/05 23:23:26 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x2000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 398.859909] binder: 22246:22251 ERROR: BC_REGISTER_LOOPER called without request [ 398.877329] binder: 22246:22251 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 398.885611] binder: 22246:22251 got reply transaction with no transaction stack [ 398.893110] binder: 22246:22251 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:26 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 398.903812] binder: 22246:22253 ERROR: BC_REGISTER_LOOPER called without request [ 398.924797] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:26 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 399.064564] REISERFS warning (device loop5): sh-2021 reiserfs_fill_super: can not find reiserfs on loop5 [ 399.085071] binder: 22263:22270 ERROR: BC_REGISTER_LOOPER called without request [ 399.095105] binder: 22263:22270 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 399.103408] binder: 22263:22270 got reply transaction with no transaction stack [ 399.110908] binder: 22263:22270 transaction failed 29201/-71, size 0-0 line 2763 [ 399.119759] REISERFS warning (device loop5): sh-2021 reiserfs_fill_super: can not find reiserfs on loop5 [ 399.123946] binder: 22263:22275 ERROR: BC_REGISTER_LOOPER called without request [ 399.190572] binder: undelivered TRANSACTION_ERROR: 29201 [ 399.421080] Process accounting resumed [ 399.579199] Process accounting resumed 2018/06/05 23:23:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000000003c7000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:27 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x7f00, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:27 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:27 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x80000025) exit(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) connect(r1, &(0x7f0000ed9fe4)=@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000831000)={0x6, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) sendto$inet6(r1, &(0x7f0000cf4fa3), 0x0, 0x0, &(0x7f00009c1000)={0xa, 0x4e21}, 0x1c) dup3(r1, r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000fb6ffc)=0x1, 0xfffffffffffffe91) 2018/06/05 23:23:27 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000fffffff0000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:27 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x7000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 399.802632] binder: 22303:22311 ERROR: BC_REGISTER_LOOPER called without request [ 399.816924] binder: 22303:22311 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 399.825328] binder: 22303:22311 got reply transaction with no transaction stack [ 399.832850] binder: 22303:22311 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:27 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@broute={'broute\x00', 0x20, 0x1, 0x160, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, &(0x7f0000000000), &(0x7f00000003c0)=ANY=[@ANYBLOB="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"]}, 0x1e1) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/softnet_stat\x00') preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000600)=""/246, 0xf6}], 0x1, 0x0) 2018/06/05 23:23:27 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xc508000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:27 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="7468726561646564ff", 0xfe63) [ 399.855061] binder: 22303:22315 ERROR: BC_REGISTER_LOOPER called without request [ 399.874296] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000003c70000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:27 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xfec0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 400.019912] binder: 22327:22333 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:27 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x7, 0x0, @thr={&(0x7f0000000080), &(0x7f0000000100)}}, &(0x7f0000000240)=0x0) timer_delete(r0) [ 400.064558] binder: 22327:22333 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 400.072876] binder: 22327:22333 got reply transaction with no transaction stack [ 400.080525] binder: 22327:22333 transaction failed 29201/-71, size 0-0 line 2763 [ 400.092012] binder: 22327:22336 ERROR: BC_REGISTER_LOOPER called without request [ 400.113183] binder: undelivered TRANSACTION_ERROR: 29201 [ 400.606091] Process accounting resumed [ 400.766539] Process accounting resumed 2018/06/05 23:23:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:28 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:28 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x3580, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000f0ffffffffffff0000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="8100756994090bd7f1586f") epoll_pwait(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000000), 0x8) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 2018/06/05 23:23:28 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x80000025) exit(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:28 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c653005") 2018/06/05 23:23:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000fffffffffffff0000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 401.034232] binder: 22365:22372 ERROR: BC_REGISTER_LOOPER called without request [ 401.045382] binder: 22365:22372 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 401.053576] binder: 22365:22372 got reply transaction with no transaction stack [ 401.061106] binder: 22365:22372 transaction failed 29201/-71, size 0-0 line 2763 [ 401.073069] binder: 22365:22379 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:28 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:28 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x80ffffff00000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) inotify_init() umount2(&(0x7f0000000040)='./file0\x00', 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x400000) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0xffffffffffffa20a, 0x810, 0xfffffffffffffffc, 0x10000}) [ 401.100780] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:28 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000f0ffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:29 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x8906000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 401.299471] binder: 22389:22395 ERROR: BC_REGISTER_LOOPER called without request [ 401.312583] binder: 22389:22395 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 401.320831] binder: 22389:22395 got reply transaction with no transaction stack [ 401.328338] binder: 22389:22395 transaction failed 29201/-71, size 0-0 line 2763 [ 401.338445] binder: 22389:22398 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 401.357262] binder: undelivered TRANSACTION_ERROR: 29201 [ 401.558768] binder: 22407:22412 ERROR: BC_REGISTER_LOOPER called without request [ 401.566826] binder: 22407:22412 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 401.575064] binder: 22407:22412 got reply transaction with no transaction stack [ 401.583509] binder: 22407:22412 transaction failed 29201/-71, size 0-0 line 2763 [ 401.593173] binder: 22407:22415 ERROR: BC_REGISTER_LOOPER called without request [ 401.615320] binder: undelivered TRANSACTION_ERROR: 29201 [ 401.967494] Process accounting resumed [ 402.005751] Process accounting resumed 2018/06/05 23:23:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:29 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:29 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:29 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x80000025) exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:29 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000007fffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:29 executing program 5: mkdir(&(0x7f0000001000)='./file0\x00', 0x0) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000180)="2e2f66696c6530fe", &(0x7f0000000100)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f00000001c0)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000440)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@jmp={0x5, 0x0, 0x2, 0x7, 0x0, 0x20, 0xffffffffffffffff}, @alu={0x4, 0x5f9d, 0xf, 0x5, 0x7, 0xe}, @call={0x85, 0x0, 0x0, 0x1a}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x3c}, @generic={0x4, 0x6, 0x7b2, 0x80000001}, @alu={0x7, 0xc0bc, 0x0, 0x3, 0x2, 0x8, 0x9}, @jmp={0x5, 0x6, 0xb, 0x4, 0x3, 0xffffffc4, 0xfffffffffffffff0}], {0x95}}, &(0x7f0000000140)='GPL\x00', 0x9, 0xd, &(0x7f0000000300)=""/13, 0x41f00, 0x1, [], r1, 0x7}, 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e24, 0x4000000, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x5}, @in6={0xa, 0x4e22, 0x9e1, @mcast2={0xff, 0x2, [], 0x1}, 0x7}], 0x58) 2018/06/05 23:23:29 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x7f00000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000fffff000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:29 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x2000101, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) sched_setattr(r0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x93, 0x9917, 0xffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r1, 0x40086607, &(0x7f0000000000)={0x0, &(0x7f0000000540)}) [ 402.250733] binder: 22431:22438 ERROR: BC_REGISTER_LOOPER called without request [ 402.263909] binder: 22431:22438 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 402.272177] binder: 22431:22438 got reply transaction with no transaction stack [ 402.279699] binder: 22431:22438 transaction failed 29201/-71, size 0-0 line 2763 [ 402.291263] binder: 22431:22444 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:30 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xd07d0200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:30 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xfc000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 402.316782] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:30 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000002000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 402.518783] binder: 22454:22460 ERROR: BC_REGISTER_LOOPER called without request [ 402.620057] binder: 22454:22460 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 402.628362] binder: 22454:22460 got reply transaction with no transaction stack [ 402.635925] binder: 22454:22460 transaction failed 29201/-71, size 0-0 line 2763 [ 402.645888] binder: 22454:22465 ERROR: BC_REGISTER_LOOPER called without request [ 402.669467] binder: undelivered TRANSACTION_ERROR: 29201 [ 403.067086] Process accounting resumed [ 403.241189] Process accounting resumed 2018/06/05 23:23:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000f0ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:31 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:31 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x86ddffff, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:31 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x80000025) exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:31 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:31 executing program 5: syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0xf, 0x5ef, [@empty, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e24, 0x400, @loopback={0x0, 0x1}, 0x3f}, {0xa, 0x4e24, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x9}, 0xffff, [0x1, 0xffffffff7fffffff, 0x0, 0x1, 0x1, 0x5, 0x5, 0x40]}, 0x5c) socket$inet6_udp(0xa, 0x2, 0x0) [ 403.532703] binder: 22492:22496 ERROR: BC_REGISTER_LOOPER called without request [ 403.546349] binder: 22492:22496 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 403.554506] binder: 22492:22496 got reply transaction with no transaction stack [ 403.562064] binder: 22492:22496 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:31 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000040)) ioctl(r0, 0x8912, &(0x7f0000000200)="0247e22f05d02c99240970") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4024700a) 2018/06/05 23:23:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000001000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 403.577190] binder: 22492:22504 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:31 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x2c, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:31 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 403.610821] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:31 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:31 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x8000, 0x400000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000440)={0xfffffffffffffffe, 0x2, 0x1, 0xffffffffffffffff}) r3 = accept$ax25(0xffffffffffffff9c, &(0x7f0000001980), &(0x7f00000019c0)=0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001a00)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001a40)={{{@in=@rand_addr, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000001b40)=0xe8) getresgid(&(0x7f0000001b80), &(0x7f0000001bc0)=0x0, &(0x7f0000001c00)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001c40)={0x0}, &(0x7f0000001c80)=0xc) getresuid(&(0x7f0000001cc0), &(0x7f0000001d00)=0x0, &(0x7f0000001d40)) fstat(0xffffffffffffffff, &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000240)="2008eb67e1c82606777561c9759963d2be38398def2b583e7ad0b95b6e831c1f03bfaf64cd93b5f1ac7d28414342a5ec5f464195aa04fea2bcd6cde5188ee7a938ab86b2bf7a3816e71f18ebd57790a63807a3e81f8152e2e6108e686815f90dc4bc6f808568e59139c58c8446da9a32e8de3558ec0167cb64848f11b102b483d93f8676feed077ba3c6062f743ffaf015836520001cafa1bdeabe0a8307617eff5c7408fc3cc490d5dbc44ade1364ae9ceb577ce06a39ad7f781c9fba87af7d467909138a6a189e07e3ecc082d0d4e1c42f5bbf153392ec386cd6eec49965fd", 0xe0}, {&(0x7f0000000500)="f4245b17a9cd7922e59ecb1fe542ce8c613f3466baff05576290f51b1f04755c70963f0b52773cfb838a2b9f1e8c21bfaa00a412b44365daabe1dbaf2c06e193a204d8ee84168ad7835e748698b38ebc37701c8566e5effc57401c90d99a31dc5a5da8988d0be509708a68896a1a9ccf0a54fc400f4b8dee86934967571ccb5f58ee696ed2f0abcbc7d639fc72b64812dfd0d098cfd74944ee676d315bb3ee9b0564ad42216460db5ee945f36326e446ddc70fb2b32f53845f8eafa6efe4b34290b824bd0f9a19c276beb4c43483841ef5f04bbc0fc879203c82e8a8a9115b721655050b59fbd453d1dfa3b1cc70", 0xee}, {&(0x7f0000000600)="901cd76fc26e028cc0392ace46caf26ed6675e2a470f3cc738b53c153aa652f1330bfc65b6a4d90647968a932e5927b6325f3cf21098be2a04550a1ea59af9d9da64d83995de7cb177b77e804f4ea4625ea1b8c857877820e0f2b9f5c2951020c044ec21badd5dff064a6903d2b3bc540801e7a7e905332e4d21d0cd2bf7d928015caf87432b44dd7556bf456a8a238836ec1d224687c0efb8fb2cad3a155404ed4719c2ac4dc06526365a551b7576f877ad63858a7b55718632a9121ebafa3031af69abe5dd3b2ec077772c9c9bd16bf99c4248c89b4f6b7035053f4d28ec572bb03a779ff5aba72bdfd3aed1f840f39f7a59304d488d06", 0xf8}, {&(0x7f0000000340)="5d83da91f091cb02576cd6bd80636482e25834a5b0aa6e8f09deea663508bc357825bf5c4d588fd6830dcc04fafad1bcbc9d933a03c7fa3048c0f58b809d5126a9ee41cb447f3313ca76a09011dbc9beddba9ceb1303ed65cff0d79dc16872fa875262147dff2274d54bb590f34f0ea48b1ff3468304451b5c95ee3300429ed2694e", 0x82}, {&(0x7f0000000700)="3f1d933d68a1a6ef5d95bf423df0d1a15349bf416701fe8027c867a1f6ded18b49cd89dbfed166ac626cd093aa58b41ba8f608c6369ed8372444c49bbdf208aa31ad699432ca6a7978acb1a2c283ac4f97558dd948f6b6cae6abb82800e247386adcc0f5dd5294568ad5ffb99c5c5c18884446951e0c674bc1737d64db45651a0b1fc36f132808978d7c6d11b4b836c92df5f6784578d13799de4ca975457e19eb", 0xa1}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="f752d8507a87620118c4ffbc294bd5c341569a749bab42ee09b836704a6b00f9c78e91a891030097b674117d272642f2fd767a51bb5a7ca52a91940cb6657c786e3ca48fba41", 0x46}, {&(0x7f0000001840)="fb0360b682944e58b5bc711f7b89e62a450ee0da34a1b285f63a8cb46ee9fc3ed6ca011173af752da68114704270a8ff642dbecb4d2cb7d3c70fd54770d4ba744e8e9fbf63a472267f76b5bcfa82fb138df5e106221426886d49328f83dc04891213bc50f933bae5c4a04c576cf45f2fda34a85f5bf6f3911b1adb44956abd7442240efa8e2b668d3927edc573c260664e89b18bd616b48df69b16510af1", 0x9e}], 0x8, &(0x7f0000001ec0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="2000e5ff5a32579bf8972255f1eaa10000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x4000}, 0x20000090) r11 = open(&(0x7f0000000200)='./file0\x00', 0x14104a, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000001e00)=""/24) r12 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r11, &(0x7f0000000080)=[{{}, 0x1, 0x74, 0x2}, {{0x0, 0x7530}}], 0x30) sendfile(r12, r11, &(0x7f0000000000), 0x100000001) r13 = socket$kcm(0x29, 0x2, 0x0) ioctl(r13, 0x8912, &(0x7f0000000040)="0047fc2f07d82c99240970") ioctl$KVM_GET_PIT2(r11, 0x8070ae9f, &(0x7f00000000c0)) ppoll(&(0x7f0000000400)=[{r12}, {r11}, {r12}, {r11}], 0x4, &(0x7f0000000480), &(0x7f00000004c0), 0x8) 2018/06/05 23:23:31 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:31 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x300, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 403.828909] binder: 22514:22521 ERROR: BC_REGISTER_LOOPER called without request [ 403.838326] binder: 22514:22521 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 403.846507] binder: 22514:22521 got reply transaction with no transaction stack [ 403.854021] binder: 22514:22521 transaction failed 29201/-71, size 0-0 line 2763 [ 403.865907] binder: 22514:22523 ERROR: BC_REGISTER_LOOPER called without request [ 403.886459] binder: undelivered TRANSACTION_ERROR: 29201 [ 404.336109] Process accounting resumed [ 404.490153] Process accounting resumed 2018/06/05 23:23:32 executing program 5: r0 = socket$inet6_sctp(0xa, 0x2000040, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) socketpair(0x15, 0x3, 0x100000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x7ff, 0x3}, {0x66bcf1fe, 0x6}, {0xff, 0x48}, {0xe87e, 0x6}, {0x74, 0x1}, {0x8d89, 0x1ff}, {0x9, 0x4}, {0x5, 0x2}]}) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="010002000000620d"], 0xfffffffffffffea1) 2018/06/05 23:23:32 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x80000025) exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x6800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:32 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000f00000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:32 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xfffffffe, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000000000003c70000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:32 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x4000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:32 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10004e20}, 0x1c) sendto$inet6(r0, &(0x7f000023effe)="7f", 0x1, 0x0, &(0x7f000010e000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x98) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='team0\x00', 0x189) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000180)=0x44) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80, 0x0) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa}}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x98) [ 404.754757] binder: 22558:22566 ERROR: BC_REGISTER_LOOPER called without request [ 404.764334] binder: 22558:22566 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 404.772568] binder: 22558:22566 got reply transaction with no transaction stack [ 404.780100] binder: 22558:22566 transaction failed 29201/-71, size 0-0 line 2763 [ 404.790767] binder: 22558:22569 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:32 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 404.840334] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:32 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x8848000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 404.978803] binder: 22582:22585 ERROR: BC_REGISTER_LOOPER called without request [ 405.008488] binder: 22582:22585 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 405.016721] binder: 22582:22585 got reply transaction with no transaction stack 2018/06/05 23:23:32 executing program 5: r0 = memfd_create(&(0x7f000049dfec)='\'Pvmnet0^lo-+\\wlan0\x00', 0x1) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080)={0x8, 0x5, 0x10000, 0x6}, 0x6) r1 = epoll_create1(0x80002) r2 = epoll_create1(0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000040)=""/31) close(r1) syz_open_dev$vcsa(&(0x7f0000580ff5)='/dev/vcsa#\x00', 0x1f, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000c85000)) readv(r1, &(0x7f0000266000)=[{&(0x7f000032cf93)=""/109, 0x6d}], 0x1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x88000, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 2018/06/05 23:23:32 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 405.024225] binder: 22582:22585 transaction failed 29201/-71, size 0-0 line 2763 [ 405.034428] binder: 22582:22590 ERROR: BC_REGISTER_LOOPER called without request [ 405.062491] binder: undelivered TRANSACTION_ERROR: 29201 [ 405.217504] binder: 22598:22605 ERROR: BC_REGISTER_LOOPER called without request [ 405.239717] binder: 22598:22605 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 405.247868] binder: 22598:22605 got reply transaction with no transaction stack [ 405.255445] binder: 22598:22605 transaction failed 29201/-71, size 0-0 line 2763 [ 405.265348] binder: 22598:22606 ERROR: BC_REGISTER_LOOPER called without request [ 405.284767] binder: undelivered TRANSACTION_ERROR: 29201 [ 405.554087] Process accounting resumed [ 405.711546] Process accounting resumed 2018/06/05 23:23:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000c7030000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:33 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c6530ff") 2018/06/05 23:23:33 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xfc00, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0xf0}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x32, 0x3, 0x0, 0x0, {0x400001}}, 0x14}, 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="0054fc2f07d82c99240970") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000fc0)={'filter\x00'}, &(0x7f00000004c0)=0x44) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) 2018/06/05 23:23:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:33 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x80000025) exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000000ffffff9e0000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:33 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xff00, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:33 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10ad}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x400000) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0x10000000000000, 0xdc6, 0x6b80ec14, 0x1e, 0xdf8e, 0x1, 0xffffffff, 0xfff, 0x800, 0x1, 0x80, 0x7378}) [ 405.941143] binder: 22627:22631 ERROR: BC_REGISTER_LOOPER called without request [ 405.967435] binder: 22627:22631 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 405.975648] binder: 22627:22631 got reply transaction with no transaction stack [ 405.983357] binder: 22627:22631 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:33 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:33 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 406.019377] binder: 22627:22642 ERROR: BC_REGISTER_LOOPER called without request [ 406.041221] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000000fffffff00000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:33 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x8847, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:33 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000002700)='/dev/audio#\x00', 0xfcb, 0x1) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000002740)=0x5) r1 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) readlinkat(r1, &(0x7f0000002780)='./file0\x00', &(0x7f00000027c0)=""/145, 0x91) write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x1c) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x4a48b125e136573}) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x20, 0x8, &(0x7f0000002600)=[{&(0x7f0000000280)="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", 0x1000, 0x10000}, {&(0x7f00000000c0)="f256efbe6c6f507e48d3ac53a88ff1c4434c149e70e5f50e26ddd02af391a07818f23536791f642ecb1d0421dbd3fc9b7230327e7b6891ed8b626d49fa160158aca7739e8a26aca4899ec84bffe0b4203676ac07d1512d653d82d9d81a3cb0f2c81361b760e47ccdd576c8ed05ae4cbbcef5e69ed00c787333e2b84b79a8654b7d52f4293d6506ef5452e719b2f240790e1b8d929bf7a7edd98ec0c8eaa8d8ee7b2cfb55c0b8679aa94d2d452b1174b0b2533d2a5fb5ce496b3347a1", 0xbc, 0x7}, {&(0x7f0000001280)="a57338724afa4b9d4338d0002a2185c5c19cb14d19e78a46ae9a9b333da68b3574f6d92f4877594cbc813d5e7081b459bb3fc49056081f179ea6421d10c56ed29cc8a3deb6187832ca9190612ab7848a9c813915b0255148c379134654e9aefa99ff21cc92d50d6cf8e9c383acbb54a3c174256518879bf6f7239541f846efc9f34dd05c5e6df0e5f43dbdbe4a593625878f5ad92029847944da37128a760b7268241e8c7b0e72c4a17415d6fb862814ee7dffeff4cbf67818f0cd96a41590e415d552bf024a30e59cefec6e3ffabe7da5911b1b", 0xd4, 0x8}, {&(0x7f0000001380)="125a06bf3af407c692f7b7c437c98f12eac4bbd55a5428ae00272cc161cf23003cb64cc521921f469214419eee4d8fab00caaea97d3461f53d07b28df3025bed6e81e5f1814825e81bb12b0b135acbf7448a7880dd61755312098b447355d348422c32d4950e9fc228b7bca5c01e4116b0a6a6b2a6964ace150160bea8e389bed8e8136a25448d86f64b0f44b86389f9165459e38f166f9d6120eb1c7479b4f9e50688ed97ec0b147ae5c1b65f23f52f8d309dab2b48ea321cfc3925871f5f5ced267b3caf26e4f3feaa5868fd31ccec6a29d6cdc22011d80a149ba1eb42ee9405b54f13795d4b689d631ec0e9fa9a", 0xef, 0x3}, {&(0x7f0000001480)="c262903ee4ad8eac9d2e9705eec7eba2321b30b7c8c00e0f7a8c9fcfc67b3d35e6fcd917c05df54710a2aa4f9ab784e9bc0b88927cf402372abd29af89721aba0731ef530b", 0x45, 0x100000001}, {&(0x7f0000001500)="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", 0x1000, 0x9}, {&(0x7f0000000200)="dd916edac1c1675fb85d9eb51032cb948492", 0x12}, {&(0x7f0000002500)="af96a0b4fa661975a9d33c8da6b3eec2743a00a9768f0bbd72c849549c28c6da3612877ed8e944097b0fe91f1392de552f81e041f26ed81544718f937affc10fc161d9758c8a51ac31a3623ca18b16bfb692a23a3de3700725376e935e4b1270aa2cb23b0edcd35458395c4a225bb7d53a54bbcde37220a04456c9286e02e2936542c6b54899d8f3c91f4b4ecff88eef9fcfabcd76f3b80bb391be60078900a39b6f7622ec2e2325afa8bb27a86d0214674e7660fb7197c33d8e45c3d4d7168e8e05dfc748086112b3399e8579f073", 0xcf, 0xbf}], 0x2000000, &(0x7f0000002880)=ANY=[@ANYBLOB="6772706a71756f74612c7265706c61796f6e6c792c7265706c61796f6e6c792c6772706a7175f3e2a31b37b91e921a9c627c0ca11a604f9250bb919ea3536d06803b432a5dfad4f74de086cb5205998ae5942c4cd8ab4ed3f32d3ed61427bb7ed2d5f4918cd77afb83227e72027d670890f4b7bdaa4cc57f2ca45b558ce12dc6406e30bbbc27c8e602b79942c0a44890b0b6e63060"]) [ 406.217219] binder: 22658:22659 ERROR: BC_REGISTER_LOOPER called without request [ 406.225539] binder: 22658:22659 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 406.233701] binder: 22658:22659 got reply transaction with no transaction stack [ 406.241224] binder: 22658:22659 transaction failed 29201/-71, size 0-0 line 2763 [ 406.264799] binder: 22658:22662 ERROR: BC_REGISTER_LOOPER called without request [ 406.294461] binder: undelivered TRANSACTION_ERROR: 29201 [ 406.413837] REISERFS warning (device loop5): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 406.413837] [ 406.846863] Process accounting resumed [ 406.890441] Process accounting resumed 2018/06/05 23:23:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000000000007fffffff0000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:34 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x4788, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") mprotect(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x20) sendto$inet(r1, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000007, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) listen(r1, 0x9) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x40000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x2, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) nanosleep(&(0x7f00000000c0)={r2, r3+10000000}, &(0x7f0000000100)) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x1, 0x4) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000280)={"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"}) r5 = dup(r1) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000140)) 2018/06/05 23:23:34 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x80000025) exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:34 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000000000000010000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:34 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x8, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 407.096584] binder: 22692:22699 ERROR: BC_REGISTER_LOOPER called without request [ 407.122405] binder: 22692:22699 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 407.130603] binder: 22692:22699 got reply transaction with no transaction stack [ 407.138151] binder: 22692:22699 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:34 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x8c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="7468726561646564f0", 0xfe63) [ 407.148651] binder: 22692:22707 ERROR: BC_REGISTER_LOOPER called without request [ 407.169884] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000009effffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 407.272293] binder: 22715:22719 ERROR: BC_REGISTER_LOOPER called without request [ 407.286901] binder: 22715:22719 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 407.295123] binder: 22715:22719 got reply transaction with no transaction stack [ 407.302647] binder: 22715:22719 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:35 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x88a8ffff00000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 407.316365] binder: 22715:22724 ERROR: BC_REGISTER_LOOPER called without request [ 407.340080] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\a', 0xfe63) 2018/06/05 23:23:35 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x5c000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 407.446854] binder: 22734:22736 ERROR: BC_REGISTER_LOOPER called without request [ 407.470360] binder: 22734:22736 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 407.478790] binder: 22734:22736 got reply transaction with no transaction stack [ 407.486393] binder: 22734:22736 transaction failed 29201/-71, size 0-0 line 2763 [ 407.496256] binder: 22734:22737 ERROR: BC_REGISTER_LOOPER called without request [ 407.515858] binder: undelivered TRANSACTION_ERROR: 29201 [ 407.903270] Process accounting resumed [ 408.066532] Process accounting resumed 2018/06/05 23:23:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000ffffff9e000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:35 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x43050000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:35 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:35 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x80000025) exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:35 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:35 executing program 5: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x803, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140), 0x8) creat(&(0x7f0000000200)='./bus\x00', 0x0) [ 408.251111] binder: 22764:22767 ERROR: BC_REGISTER_LOOPER called without request [ 408.261766] binder: 22764:22767 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 408.269966] binder: 22764:22767 got reply transaction with no transaction stack [ 408.277466] binder: 22764:22767 transaction failed 29201/-71, size 0-0 line 2763 [ 408.286991] binder: 22764:22772 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:35 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000f0000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:36 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x88470000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) [ 408.307267] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:36 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000fffff0000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 408.444420] binder: 22785:22789 ERROR: BC_REGISTER_LOOPER called without request [ 408.454147] binder: 22785:22789 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 408.462336] binder: 22785:22789 got reply transaction with no transaction stack [ 408.469874] binder: 22785:22789 transaction failed 29201/-71, size 0-0 line 2763 [ 408.480603] binder: 22785:22792 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:36 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0xac7014aa, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:36 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 408.537831] binder: undelivered TRANSACTION_ERROR: 29201 [ 408.655536] binder: 22805:22808 ERROR: BC_REGISTER_LOOPER called without request [ 408.670764] binder: 22805:22808 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 408.679008] binder: 22805:22808 got reply transaction with no transaction stack [ 408.686545] binder: 22805:22808 transaction failed 29201/-71, size 0-0 line 2763 [ 408.696596] binder: 22805:22811 ERROR: BC_REGISTER_LOOPER called without request [ 408.729611] binder: undelivered TRANSACTION_ERROR: 29201 [ 409.138121] Process accounting resumed [ 409.300694] Process accounting resumed 2018/06/05 23:23:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:37 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x80000025) exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)="2e2f66696c6530f5") 2018/06/05 23:23:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x800000000000006, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) connect$ax25(r1, &(0x7f0000000000)={0x3, {"9a4ad8eb396c07"}, 0x9}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='vcan0\x00', 0x10) sendto$inet(r0, &(0x7f0000000380)="e4", 0x1, 0x54, &(0x7f0000001380)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/06/05 23:23:37 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x2, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa0000000000f000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:37 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x3a00000000000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000f00000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 409.464832] binder: 22833:22840 ERROR: BC_REGISTER_LOOPER called without request [ 409.473642] binder: 22833:22840 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 409.481885] binder: 22833:22840 got reply transaction with no transaction stack [ 409.489408] binder: 22833:22840 transaction failed 29201/-71, size 0-0 line 2763 [ 409.501644] binder: 22833:22846 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:37 executing program 5: r0 = gettid() r1 = inotify_init1(0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) readv(r1, &(0x7f0000000440)=[{&(0x7f0000000380)=""/189, 0xbd}], 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) close(r1) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) tkill(r0, 0x2c) [ 409.527880] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) 2018/06/05 23:23:37 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x7f000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000c70300000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 409.657868] binder: 22857:22865 ERROR: BC_REGISTER_LOOPER called without request [ 409.675472] binder: 22857:22865 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 409.683764] binder: 22857:22865 got reply transaction with no transaction stack [ 409.691318] binder: 22857:22865 transaction failed 29201/-71, size 0-0 line 2763 2018/06/05 23:23:37 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 409.701509] binder: 22857:22866 ERROR: BC_REGISTER_LOOPER called without request [ 409.719933] binder: undelivered TRANSACTION_ERROR: 29201 [ 409.859868] binder: 22879:22881 ERROR: BC_REGISTER_LOOPER called without request [ 409.872087] binder: 22879:22881 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 409.880328] binder: 22879:22881 got reply transaction with no transaction stack [ 409.887869] binder: 22879:22881 transaction failed 29201/-71, size 0-0 line 2763 [ 409.899300] binder: 22879:22882 ERROR: BC_REGISTER_LOOPER called without request [ 409.919373] binder: undelivered TRANSACTION_ERROR: 29201 [ 410.370261] Process accounting resumed [ 410.409188] Process accounting resumed 2018/06/05 23:23:38 executing program 5: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="02000006"], 0x8) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x82) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x5f, 0x3, {0xffffffffffffffff, 0x3, 0xeb23e4, 0x0, 0x80}}) 2018/06/05 23:23:38 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x8000000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000020000000000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) 2018/06/05 23:23:38 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)="7468726561646564c0", 0xfe63) 2018/06/05 23:23:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:38 executing program 7 (fault-call:4 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='ns\x00') fcntl$notify(r0, 0x402, 0x80000025) exit(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r0, &(0x7f0000000340)=""/57, 0x39) 2018/06/05 23:23:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") unshare(0x20020400) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='Qamfs\x00', 0x105403, &(0x7f00000000c0)) acct(&(0x7f0000000000)='./file0\x00') poll(&(0x7f0000000080), 0x0, 0x200007f) unlink(&(0x7f0000933ff8)='./file0\x00') 2018/06/05 23:23:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0x80045300, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) 2018/06/05 23:23:38 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x88640000, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa000000009effffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 410.683135] binder: 22902:22910 ERROR: BC_REGISTER_LOOPER called without request [ 410.699269] binder: 22902:22910 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 410.707510] binder: 22902:22910 got reply transaction with no transaction stack [ 410.715148] binder: 22902:22910 transaction failed 29201/-71, size 0-0 line 2763 [ 410.725893] binder: 22902:22913 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) 2018/06/05 23:23:38 executing program 5: syz_read_part_table(0x4, 0x3, &(0x7f0000000380)=[{&(0x7f0000000180)="543e2f6915dca8be9d1701b4efa75cf24332535e4e1e0244618e68a76e4e8040514c6653d757c7e119460c3df7e840a53983a9c6d25d1cae90ffa5c17546a85d55c3bf1806e765a06107142ae36cb049a5215731c03854eace55af1743d8633508", 0x61, 0x200}, {&(0x7f0000000200)="8741e590dc3aa16798bfe9ff9e0a69267fd7c71eb6be0a46654ceb061da5fa1397f1b07078020b168169027c5fb20b4bed7f22218e4e0aecbc40876f7bc793814ffb644f58285bc67b12eb55afce10f9910ce4dbe1214b48bac064a1cfdd140cf157c8c67139b6a5e4b5eabb5b520c64b1fa089530e8e508adb1c40337ce8e424b4138194a82d54fbbab8c5f90205d291e7f4a96c3dacac782767bd2a16f10cd1f062c45a83335ccfc60422573d9179fa1224a57ee9ab4315596553691b201c1e306d351798abd19ecd5d608418906b3a7502b90336c5e5ff4fb0aaf05bcc1140dacd4005bc5675163dc7a162b6b73b3", 0xf0, 0xff}, {&(0x7f0000000300)="40dca93d0eda68734cd6ff526061672cc8b4671b68796bf232376f80dbb525dbd4a0882b4e8d24de6017af2c065953ea96536fe9ccc064132e3b466a342b1f0e7742838c8460f0b65a17efd5a5f49573cad81fbcc5f5af19cd68f9fbc4f6941600a9046b7eeaf378b4b42e0db4b769f92341cdfce876", 0x76, 0x9}]) r0 = syz_open_dev$mouse(&(0x7f0000000400)='/dev/input/mouse#\x00', 0xfff, 0x10f042) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000440)) rt_sigaction(0x3, &(0x7f0000000100)={0xfffffffffffffc00, {0x80000000}, 0x50000004, 0xc9}, 0x0, 0x8, &(0x7f0000000140)) msgget$private(0x0, 0x90) r1 = msgget$private(0x0, 0x10) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000000)=""/249) 2018/06/05 23:23:38 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000040)=ANY=[]) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0xfe63) [ 410.752599] binder: undelivered TRANSACTION_ERROR: 29201 2018/06/05 23:23:38 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") syz_emit_ethernet(0x7e, &(0x7f0000000200)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x800e, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689, 0x0, @local={0xac, 0x70, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x44, 0x40, 0x0, 0x0, 0x0, [{[@rand_addr]}, {[@multicast2=0xe0000002]}, {[@multicast1=0xe0000001]}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000040)) 2018/06/05 23:23:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001500)={&(0x7f0000000280)={0x10, 0x3}, 0xc, &(0x7f00000014c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a000100000000ff913b166e0000001da04f26688834259bb1ac2800000000000000270000000000ac1414aa00000000fffffffffffff00000000000", @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200000000000000000014000e0000000000000000000000000000000000"], 0x3}, 0x1}, 0x0) [ 410.897276] binder: 22924:22928 ERROR: BC_REGISTER_LOOPER called without request [ 410.907311] binder: 22924:22928 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 410.915533] binder: 22924:22928 got reply transaction with no transaction stack [ 410.923053] binder: 22924:22928 transaction failed 29201/-71, size 0-0 line 2763 [ 410.939662] binder: 22924:22931 ERROR: BC_REGISTER_LOOPER called without request 2018/06/05 23:23:38 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="0047fc2f07d82c99240970") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000005fd4), 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000780)={0x50, 0x0, &(0x7f0000000600)=[@enter_looper={0x630c}, @reply_sg={0x40486312, {{0x0, 0x7400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000400)}}}], 0x0, 0x0, &(0x7f0000000700)}) [ 410.961117] binder: undelivered TRANSACTION_ERROR: 29201 [ 410.998267] Dev loop5: unable to read RDB block 2 [ 411.003352] loop5: unable to read partition table [ 411.008875] loop5: partition table beyond EOD, truncated [ 411.014596] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 411.041156] Dev loop5: unable to read RDB block 2 [ 411.046174] loop5: unable to read partition table [ 411.051262] loop5: partition table beyond EOD, truncated [ 411.056910] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 411.185658] binder: 22952:22954 ERROR: BC_REGISTER_LOOPER called without request [ 411.196866] binder: 22952:22954 ERROR: BC_ENTER_LOOPER called after BC_REGISTER_LOOPER [ 411.205093] binder: 22952:22954 got reply transaction with no transaction stack [ 411.212625] binder: 22952:22954 transaction failed 29201/-71, size 0-0 line 2763 [ 411.222255] binder: 22952:22955 ERROR: BC_REGISTER_LOOPER called without request [ 411.248078] binder: undelivered TRANSACTION_ERROR: 29201 [ 411.478135] Process accounting resumed [ 411.482477] FAULT_INJECTION: forcing a failure. [ 411.482477] name failslab, interval 1, probability 0, space 0, times 0 [ 411.494189] CPU: 1 PID: 22962 Comm: syz-executor7 Not tainted 4.17.0+ #85 [ 411.501121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.510466] Call Trace: [ 411.513073] dump_stack+0x1b9/0x294 [ 411.516730] ? dump_stack_print_info.cold.2+0x52/0x52 [ 411.521954] ? perf_swevent_event+0x158/0x2e0 [ 411.526472] should_fail.cold.4+0xa/0x1a [ 411.530534] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 411.535641] ? graph_lock+0x170/0x170 [ 411.539448] ? find_held_lock+0x36/0x1c0 [ 411.543523] ? __lock_is_held+0xb5/0x140 [ 411.547604] ? check_same_owner+0x320/0x320 [ 411.552092] ? rcu_note_context_switch+0x710/0x710 [ 411.557029] __should_failslab+0x124/0x180 [ 411.561272] should_failslab+0x9/0x14 [ 411.565073] kmem_cache_alloc+0x2af/0x760 [ 411.569248] __d_alloc+0xc0/0xd30 [ 411.572712] ? shrink_dcache_for_umount+0x290/0x290 [ 411.578535] ? zap_class+0x720/0x720 [ 411.582239] ? perf_trace_run_bpf_submit+0x246/0x370 [ 411.587338] ? perf_tp_event+0xc30/0xc30 [ 411.591402] ? graph_lock+0x170/0x170 [ 411.595215] ? memset+0x31/0x40 [ 411.598527] d_alloc+0x8e/0x370 [ 411.601812] ? __d_alloc+0xd30/0xd30 [ 411.605533] d_alloc_parallel+0x152/0x1e70 [ 411.609776] ? rcu_report_qs_rnp+0x790/0x790 [ 411.614211] ? __d_lookup_rcu+0xa80/0xa80 [ 411.618370] ? print_usage_bug+0xc0/0xc0 [ 411.622421] ? __d_lookup+0x5b4/0x9c0 [ 411.626240] ? d_alloc_parallel+0x1e70/0x1e70 [ 411.630744] ? mark_held_locks+0xc9/0x160 [ 411.634888] ? __raw_spin_lock_init+0x1c/0x100 [ 411.639480] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 411.644510] ? __lockdep_init_map+0x105/0x590 [ 411.649017] ? __lockdep_init_map+0x105/0x590 [ 411.649113] Process accounting resumed [ 411.653520] ? lockdep_init_map+0x9/0x10 [ 411.653564] ? __init_waitqueue_head+0x96/0x140 [ 411.666144] ? init_wait_entry+0x1b0/0x1b0 [ 411.670413] proc_fill_cache+0x3e5/0x660 [ 411.674494] ? show_softirqs+0x280/0x280 [ 411.678574] ? proc_task_lookup+0x3b0/0x3b0 [ 411.682924] ? __check_object_size+0x95/0x5d9 [ 411.687466] ? filldir64+0x2f5/0x3e0 [ 411.691190] proc_ns_dir_readdir+0x3f5/0x560 [ 411.695617] iterate_dir+0x4b0/0x5d0 [ 411.699344] ksys_getdents64+0x21c/0x430 [ 411.703583] ? __ia32_sys_getdents+0x4c0/0x4c0 [ 411.708174] ? iterate_dir+0x5d0/0x5d0 [ 411.712080] __x64_sys_getdents64+0x73/0xb0 [ 411.716406] do_syscall_64+0x1b1/0x800 [ 411.720291] ? syscall_return_slowpath+0x5c0/0x5c0 [ 411.725209] ? syscall_return_slowpath+0x30f/0x5c0 [ 411.730134] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 411.735508] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 411.740356] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 411.745538] RIP: 0033:0x455a09 [ 411.748716] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 411.768086] RSP: 002b:00007eff6d6a6c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 411.775810] RAX: ffffffffffffffda RBX: 00007eff6d6a76d4 RCX: 0000000000455a09 [ 411.783086] RDX: 0000000000000039 RSI: 0000000020000340 RDI: 0000000000000013 [ 411.790344] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 411.797599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 411.804860] R13: 00000000000000aa R14: 00000000006f6090 R15: 0000000000000000 [ 411.812698] BUG: unable to handle kernel paging request at fffffffffffffff4 [ 411.819818] PGD 8c6d067 P4D 8c6d067 PUD 8c6f067 PMD 0 [ 411.825116] Oops: 0000 [#1] SMP KASAN [ 411.828913] CPU: 1 PID: 22962 Comm: syz-executor7 Not tainted 4.17.0+ #85 [ 411.835831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 411.845194] RIP: 0010:dput.part.26+0x117/0x780 [ 411.849755] Code: ff 09 b3 ff 45 84 ff 0f 84 e2 03 00 00 e8 21 09 b3 ff 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 04 05 00 00 <44> 8b 3b 48 8d 83 80 00 00 00 31 ff 48 89 85 70 ff ff ff 41 83 e7 [ 411.869085] RSP: 0018:ffff88017c81f9f8 EFLAGS: 00010246 [ 411.874436] RAX: 0000000000000000 RBX: fffffffffffffff4 RCX: ffffc900076ec000 [ 411.881692] RDX: 0000000000040000 RSI: ffffffff81c64cef RDI: 0000000000000001 [ 411.888946] RBP: ffff88017c81fa90 R08: ffff8801c8ef8040 R09: ffffed003b5e46d6 [ 411.896198] R10: ffffed003b5e46d6 R11: ffff8801daf236b3 R12: 1ffff1002f903f41 [ 411.903449] R13: dffffc0000000000 R14: ffffed002f903f45 R15: 0000000000000001 [ 411.910711] FS: 00007eff6d6a7700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 411.918927] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.924794] CR2: fffffffffffffff4 CR3: 00000001b7afd000 CR4: 00000000001406e0 [ 411.932057] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 411.939310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 411.946566] Call Trace: [ 411.949148] ? lockdep_init_map+0x9/0x10 [ 411.953192] ? shrink_dcache_sb+0x340/0x340 [ 411.957500] ? init_wait_entry+0x1b0/0x1b0 [ 411.961726] dput+0x15/0x20 [ 411.964641] proc_fill_cache+0x230/0x660 [ 411.968702] ? proc_task_lookup+0x3b0/0x3b0 [ 411.973024] ? __check_object_size+0x95/0x5d9 [ 411.977528] ? filldir64+0x2f5/0x3e0 [ 411.981231] proc_ns_dir_readdir+0x3f5/0x560 [ 411.985630] iterate_dir+0x4b0/0x5d0 [ 411.989330] ksys_getdents64+0x21c/0x430 [ 411.993375] ? __ia32_sys_getdents+0x4c0/0x4c0 [ 411.997947] ? iterate_dir+0x5d0/0x5d0 [ 412.001827] __x64_sys_getdents64+0x73/0xb0 [ 412.006138] do_syscall_64+0x1b1/0x800 [ 412.010028] ? syscall_return_slowpath+0x5c0/0x5c0 [ 412.014954] ? syscall_return_slowpath+0x30f/0x5c0 [ 412.019873] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 412.025228] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 412.030062] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 412.035232] RIP: 0033:0x455a09 [ 412.038401] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 412.057680] RSP: 002b:00007eff6d6a6c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 412.065372] RAX: ffffffffffffffda RBX: 00007eff6d6a76d4 RCX: 0000000000455a09 [ 412.072622] RDX: 0000000000000039 RSI: 0000000020000340 RDI: 0000000000000013 [ 412.079874] RBP: 000000000072bf50 R08: 0000000000000000 R09: 0000000000000000 [ 412.087124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 412.094380] R13: 00000000000000aa R14: 00000000006f6090 R15: 0000000000000000 [ 412.101650] Modules linked in: [ 412.104841] Dumping ftrace buffer: [ 412.108359] (ftrace buffer empty) [ 412.112050] CR2: fffffffffffffff4 [ 412.115495] ---[ end trace 7e1c8b1c6657b755 ]--- [ 412.120236] RIP: 0010:dput.part.26+0x117/0x780 [ 412.124796] Code: ff 09 b3 ff 45 84 ff 0f 84 e2 03 00 00 e8 21 09 b3 ff 48 89 d8 48 c1 e8 03 42 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 04 05 00 00 <44> 8b 3b 48 8d 83 80 00 00 00 31 ff 48 89 85 70 ff ff ff 41 83 e7 [ 412.144131] RSP: 0018:ffff88017c81f9f8 EFLAGS: 00010246 [ 412.149480] RAX: 0000000000000000 RBX: fffffffffffffff4 RCX: ffffc900076ec000 [ 412.156743] RDX: 0000000000040000 RSI: ffffffff81c64cef RDI: 0000000000000001 [ 412.163997] RBP: ffff88017c81fa90 R08: ffff8801c8ef8040 R09: ffffed003b5e46d6 [ 412.171260] R10: ffffed003b5e46d6 R11: ffff8801daf236b3 R12: 1ffff1002f903f41 [ 412.178529] R13: dffffc0000000000 R14: ffffed002f903f45 R15: 0000000000000001 [ 412.185872] FS: 00007eff6d6a7700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 412.194170] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 412.200039] CR2: fffffffffffffff4 CR3: 00000001b7afd000 CR4: 00000000001406e0 [ 412.207293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 412.214552] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 412.221802] Kernel panic - not syncing: Fatal exception [ 412.227616] Dumping ftrace buffer: [ 412.231148] (ftrace buffer empty) [ 412.234844] Kernel Offset: disabled [ 412.238463] Rebooting in 86400 seconds..