b203feba86df01793fda820ec4219fb895902f4f690a33d4a798cad1c2fcf908b8da157fc0b73a4b10d45e4e70924a72ea543c1fb74cd42628bd61edefe27a72194fbc6b5e3c", 0x88}, {&(0x7f0000d89000-0xd6)="a4b541b563393ade060221669d08c7a56fb50aa01f25a21db8417da24d6442db9b989e723e8d728b7c9bd9cc16838ecc4d8740a4018c4c23a1809e68a51805f34d0ec99f4024922abbb469c0e398e43e9ecda5a867b9741bba6c20004015b30e4bd36a5d77448f04af2fbd7ecc86e79e9ba98b40ef1750b6740652180e5c0c4b1bf818a3ddc9f30af4c9c727e9149422bdc7aabfde2d427d794f9e58663a1e9a39866bea9a99cfe31db72f13e88a83453775a1723bc1d60d1e49dc74df20c85ca87d4805d52868bae33b15edbcee1844fe54867f1f4c", 0xd6}, {&(0x7f0000177000)="d08e5ffb4f23848c5702e1ac955cabed5f6c2da2e3570203c51e06cb596c35863196664c29055e1ab0ed6b49c6f0705aa5926dfd724a84dc19dd00a976ab81f8e901b628634f03a238a55b40d59b884658eb231dabe09b050c0aab4bb4dbe6c7d7792fa4af0ee5c176f65134d419a13dd4f248338b2ceb22657ae904fcfcc6231367d98923db46776f1da9d622fd346d9d9e7338a2bd96ea41b2a305435db3f05f15534f70d5b9e8297ae63136146bef179c785447fe4562c68e3cb128", 0xbd}, {&(0x7f000073f000)="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", 0x1000}], 0x4, &(0x7f0000912000-0x20)=[@cred={0x20, 0x1, 0x2, r27, r28, r29}], 0x20, 0x48000}], 0x3, 0x4008840) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000329000)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}) dup2(r0, r2) dup3(r0, r1, 0x0) 2018/01/14 21:59:10 executing program 0: r0 = socket(0xa, 0x3, 0x3a) init_module(&(0x7f0000ecc000)='wlan0GPL\x00', 0x9, &(0x7f0000f23000-0x1)='\x00') r1 = creat(&(0x7f0000d30000)='./file0\x00', 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000a7000)={{0x100000001, 0x80000000}, {0x2, 0xb7}, 0x6, 0x7, 0x2, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) setsockopt(r0, 0x3a, 0x100000001, &(0x7f00002cb000)="", 0x0) readahead(r1, 0x69d, 0x1) 2018/01/14 21:59:10 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 71.557325] binder: 11969:11988 BC_ACQUIRE_DONE node 130 has no pending acquire request [ 71.565651] binder: 11969:11988 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:10 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00005b9000-0xb)='/dev/mixer\x00', 0x0, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000fd0000)="", 0xfffffffffffffec1, 0x20000801, &(0x7f0000deb000-0x10)={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f000037c000-0x75)=""/117) setsockopt$inet_int(r0, 0x0, 0x0, &(0x7f00004fc000)=0xd734, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000cef000-0x3)='nv\x00', 0x3) shutdown(r0, 0x1) 2018/01/14 21:59:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000028f000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000049c000-0x40)={0x0, 0x0, 0x0, 0x0, "1b5380d1c0215a62d876eda5d8d2cf5e5d69ed666b0f7bf8636fd074133424df96cd327d5e3f93e1f7cb7e4d", 0x0}) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000d62000-0x11)='/selinux/relabel\x00', 0x2, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00003ed000)=0x3, 0x4) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f00007d4000-0x41)=""/65) 2018/01/14 21:59:11 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10000, 0x101400) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00009a4000)=0x0, &(0x7f000046e000-0x4)=0x4) madvise(&(0x7f0000d54000/0x3000)=nil, 0x3000, 0x5) [ 71.610202] binder: 11998 RLIMIT_NICE not set [ 71.624107] binder: 11969:11988 BC_FREE_BUFFER u0000000000000000 no match 2018/01/14 21:59:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000f20000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) nanosleep(&(0x7f0000dd2000-0x10)={0x77359400, 0x0}, &(0x7f00009b6000)={0x0, 0x0}) prctl$intptr(0x0, 0xfffffffffffffffc) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00007b3000)=""/117) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00001e2000-0x15)='/proc/self/net/pfkey\x00', 0x101c00, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000c2c000-0x4)={0xfffffffffffffbff, 0x3e00000000, 0x4}) 2018/01/14 21:59:11 executing program 2: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000012000-0x4)=0x3ff, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000002000)={&(0x7f0000012000-0x1c)={0x1c, 0x12, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0x8, 0x1d, []}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) readv(r0, &(0x7f0000010000)=[{&(0x7f0000015000)=""/4096, 0x1000}, {&(0x7f0000016000-0x1000)=""/4096, 0x1015}], 0x2) r1 = syz_open_dev$adsp(&(0x7f0000013000)='/dev/adsp#\x00', 0x8, 0x800) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f000001a000)={0x5, 0x4, 0x401, 0x4c3, 0x8b42, 0x6, 0x101}, 0xc) 2018/01/14 21:59:11 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000001000-0x10)={0x0, 0x0}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000011000)={r2, r3/1000+30000}, 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000013000-0x8)=0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00003c4000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f00003b9000-0xcd)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000317000-0x16)='/selinux/checkreqprot\x00', 0x4000, 0x0) accept4$inet6(r4, &(0x7f00001e6000-0x1c)={0x0, 0xffffffffffffffff, 0x0, @mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0}, &(0x7f0000438000-0x4)=0x1c, 0x800) [ 71.624127] binder: 11969:11988 BC_INCREFS_DONE node 130 has no pending increfs request [ 71.624151] binder: 11969:11988 Release 1 refcount change on invalid ref 2 ret -22 [ 71.624160] binder: 11969:11988 unknown command 0 [ 71.624171] binder: 11969:11988 ioctl c0306201 208fdfd0 returned -22 [ 71.680749] binder: 12005:12020 BC_ACQUIRE_DONE u0000000000000000 no match [ 71.680762] binder: 12005:12020 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 71.680773] binder: 12005:12020 BC_FREE_BUFFER u0000000000000000 no match [ 71.680785] binder: 12005:12020 BC_INCREFS_DONE u0000000000000000 no match [ 71.680799] binder: 12005:12020 Release 1 refcount change on invalid ref 2 ret -22 [ 71.680806] binder: 12005:12020 unknown command 0 [ 71.680816] binder: 12005:12020 ioctl c0306201 208fdfd0 returned -22 [ 71.682287] binder: 12020 RLIMIT_NICE not set [ 71.742193] binder: release 12005:12013 transaction 131 out, still active [ 71.742200] binder: undelivered TRANSACTION_COMPLETE [ 71.825309] binder: 11998 RLIMIT_NICE not set 2018/01/14 21:59:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000962000-0x1c)=[@in6={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095e000-0x8)={0x1, [0x0]}, &(0x7f000095e000-0x4)=0x8) setrlimit(0x7, &(0x7f000046f000-0x10)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f000095d000-0x2)={r1, 0x31}, &(0x7f000095c000)=0x8) 2018/01/14 21:59:11 executing program 3: mmap(&(0x7f0000000000/0xfef000)=nil, 0xfef000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f000059e000-0xc)={0x0, @remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, @rand_addr=0x0}, &(0x7f0000fef000)=0xc) mmap(&(0x7f0000ff0000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000ff0000)={@generic="6f2f3d0278839aac31d08cec967c9647", @ifru_addrs={0x2, 0xffffffffffffffff, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000852000-0xe8)={{{@in6=@loopback={0x0, 0x0}, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00002ca000)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00001af000-0xe8)={{{@in6=@loopback={0x0, 0x1}, @in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x3, 0x9, 0x0, 0x1ff, 0xa, 0xa0, 0x0, 0x0, 0x0, r1}, {0x5, 0x6, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x530, 0x3ff, 0x7f, 0x7}, 0x0, 0x7, 0x3, 0x1, 0x1, 0x0}, {{@in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xffffffffffffffff, 0x0}, 0x0, @in=@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x9, 0x73}}, 0xe8) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000fe9000-0x4)=0x8000000000004, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095c000-0x4)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f000040a000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000ae0000)=0x14) sendto$inet(r0, &(0x7f0000865000)="", 0x0, 0x800, &(0x7f0000fda000-0x10)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) mmap(&(0x7f0000fef000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000ff0000-0x10)={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/14 21:59:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x668, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00004ba000-0x11)='/selinux/relabel\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f000016e000)={{0xa, 0x2, 0x1c67c9db, @loopback={0x0, 0x1}, 0x9}, {0xa, 0x0, 0x40, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x4}, 0x40, [0x0, 0x80, 0x6, 0x5, 0x41b0, 0x70000000000000, 0x1, 0x2]}, 0x5c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000c2e000-0x4)=0x3, 0x4) getrandom(&(0x7f0000a0f000-0x2c)=""/44, 0x2c, 0x2) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000f81000-0x4)=0x0, &(0x7f0000000000)=0x4) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000004000)={@generic="d043ec921e7daeb48930c0c111989683", 0x73}) 2018/01/14 21:59:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000a33000-0xc)='/dev/rfkill\x00', 0xa80, 0x0) pipe(&(0x7f00000c2000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000073000-0x8)={0x7fffffff}, &(0x7f00007c3000)={0x0}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f000075d000-0x9)='/dev/ppp\x00', 0x200, 0x0) r3 = socket(0x10, 0x802, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00006c8000-0x1)={&(0x7f0000f18000-0x8)='./file0\x00', r0}, 0xc) sendmmsg(r3, &(0x7f0000a0d000)=[{{&(0x7f000003e000)=@l2={0x1f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe, &(0x7f000022d000)=[], 0x0, &(0x7f0000b86000-0x190)=[{0x10, 0x1, 0x0, ""}], 0x10, 0x0}, 0x0}], 0x1, 0x0) r4 = dup3(r2, r1, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000d3e000-0x8)={0x0, 0x0}) vmsplice(r4, &(0x7f00004b8000-0x40)=[{&(0x7f000003e000-0xd0)="", 0x0}], 0x1, 0x0) 2018/01/14 21:59:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:11 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f0000d1f000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f00009d3000-0x4)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000c17000-0x4)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000d5000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00001a5000-0x38)={&(0x7f0000001000-0xc)={0x10, 0x0, 0x0, 0x200010}, 0xc, &(0x7f0000000000)={&(0x7f0000001000-0x230)=@getae={0x230, 0x1f, 0x300, 0x7, 0x3, {{@in6=@loopback={0x0, 0x1}, 0x1, 0x2, 0xff}, @in=@multicast2=0xe0000002, 0xe0, 0xffffffffffffffff}, [@sec_ctx={0x98, 0x8, {0x92, 0x8, 0x1, 0x9, 0x8a, "39ab1caa72ce79be3cf2e68cee9c8d53a0d47d2e63c94b932e9979232808d339a055a1f52475374a299a9886c0ce40fa0e2c7150275e28bad01ccba8d4da3ae41413b101935b1fe5701ce36827fc4e86ed8a290bab3e749defd2cd1467456f47b56b7701b89ce07fa2468bf5c794158a33095654f31f5b040c57a46d5e9506a0c6b408d526601f6beb09"}}, @migrate={0x5c, 0x11, [{@in=@empty=0x0, @in=@rand_addr=0xfffffffffffffffa, 0x3f, 0x0, 0x0, 0x1, 0xa, 0xa}, {@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in6=@loopback={0x0, 0x1}, 0xf39e8b303d522b73, 0x7, 0x0, 0xffffffffffffffff, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @in=@loopback=0x7f000001, 0x0, 0xa}}, @policy={0xb0, 0x7, {{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2, 0xffffffffffffff62, 0x2, 0x81, 0x2, 0x20, 0xa0, 0x5e, r1, r2}, {0x401, 0x5, 0x5, 0x0, 0x1, 0x4, 0x348000000000, 0x2}, {0x1, 0x3, 0xe45, 0x5}, 0x401, 0x8, 0x1, 0x1, 0x3, 0x1}}, @offload={0xc, 0x1c, {0x0, 0x2}}, @coaddr={0x14, 0xe, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @empty=0x0}}]}, 0x230}, 0x1, 0x0, 0x0, 0xc810}, 0x4000) mmap(&(0x7f0000000000/0x17000)=nil, 0x17000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000017000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r3, 0x0, 0x41, &(0x7f0000018000-0x1000)=""/4096, &(0x7f0000017000)=0x1000) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000013000)={0x8, {{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x90) 2018/01/14 21:59:11 executing program 7: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000356000-0xc)={0x6, 0xffffffffffffff9c, 0x1}) r1 = syz_open_dev$mouse(&(0x7f0000237000)='/dev/input/mouse#\x00', 0x8000, 0x101000) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f000048e000-0xc)={0x2, r1, 0x1}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000)=0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)=0x0) [ 71.841298] binder: release 11969:11998 transaction 131 in, still active [ 71.848257] binder: send failed reply for transaction 131, target dead [ 71.877374] binder: 12049:12055 transaction failed 29189/-22, size 0-0 line 2842 2018/01/14 21:59:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000)=0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000209000)='/dev/kvm\x00', 0x3ff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/01/14 21:59:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000f9000-0x94)='\x00', 0x1) mmap(&(0x7f0000000000/0x15000)=nil, 0x15000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000068b000)='./file0\x00', 0x0) r0 = open(&(0x7f0000008000-0x8)='./file0\x00', 0x0, 0x2) socket$inet6(0xa, 0x6, 0x1000) ioctl$int_out(r0, 0xc0189436, &(0x7f000000a000)=0x0) [ 71.909784] binder: 12049:12055 BC_ACQUIRE_DONE u0000000000000000 no match [ 71.937722] binder: 12044:12067 BC_ACQUIRE_DONE node 133 has no pending acquire request 2018/01/14 21:59:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00002e9000)='task\x00') fcntl$notify(r0, 0x402, 0xfffffffffffffffe) getdents(r0, &(0x7f0000825000-0xa7)=""/167, 0xa7) accept$packet(r0, 0x0, &(0x7f0000eb9000)=0x0) 2018/01/14 21:59:11 executing program 3: mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() ioprio_set$pid(0x2, r0, 0x352) mremap(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000003000/0x4000)=nil) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) migrate_pages(r0, 0x1ff, &(0x7f0000005000)=0x7f, &(0x7f0000011000-0x8)=0x7195) 2018/01/14 21:59:11 executing program 0: mmap(&(0x7f0000000000/0x4f000)=nil, 0x4f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000047000-0x6)='./bus\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f000004f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) signalfd(r0, &(0x7f000004f000)={0x9e}, 0x8) r1 = open$dir(&(0x7f000004c000-0x6)='./bus\x00', 0x0, 0x0) getdents(r1, &(0x7f000002f000-0x14)=""/24, 0x18) 2018/01/14 21:59:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000417000)={0x26, 'skcipher\x00', 0x0, 0x80, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000df0000-0x10)="e513b5bf00004000000000000000e314", 0x10) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(r0, &(0x7f00006e1000-0x38)={0x0, 0x0, &(0x7f0000fdb000)=[{&(0x7f0000576000-0x1000)="1e6b1b9be9331affa544761dc700586246", 0x11}], 0x1, 0x0, 0x0, 0x0}, 0x0) recvmsg(r0, &(0x7f0000eaf000-0x38)={0x0, 0x0, &(0x7f0000825000-0x30)=[{&(0x7f0000efb000)=""/16, 0x10}, {&(0x7f0000b7d000-0x1000)=""/4096, 0x1000}], 0x2, &(0x7f0000d2b000)=""/57, 0x39, 0x0}, 0x0) 2018/01/14 21:59:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ccf000-0xb)='/dev/loop#\x00', 0x0, 0x181001) r1 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f51000-0x70)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) sendfile(r0, r1, &(0x7f00000de000-0x8)=0x0, 0x100000001) write$sndseq(r1, &(0x7f0000942000)=[{0x3, 0x10b3d76a, 0x80000001, 0x0, @time={0x0, 0x1c9c380}, {0x10000, 0x8}, {0xfffffffffffffffc, 0x1085}, @time=@time={0x0, 0x989680}}, {0x1, 0x8, 0x0, 0x4, @tick=0x40, {0x8000, 0x0}, {0x0, 0x0}, @time=@tick=0x0}], 0x60) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f00004d9000-0x120)={0x1, 0x6, 0x2, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8001, 0xd93, 0x2, 0x200, "cd1c1b7d1af1f5700d52d46413a746db", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000b1c000)=@raw=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x17, &(0x7f0000c46000)=""/23, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) clock_gettime(0x0, &(0x7f00008c1000)={0x0, 0x0}) 2018/01/14 21:59:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 71.937741] binder: 12044:12067 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 71.937757] binder: 12044:12067 BC_FREE_BUFFER u0000000000000000 no match 2018/01/14 21:59:11 executing program 6: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004000)={0x5, 0x4, 0x7f, 0x7, 0x0, 0x0, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x2c) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000009000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, &(0x7f0000000000)=0x4) 2018/01/14 21:59:11 executing program 3: r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000412000)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x401, {{0xa, 0x3, 0x5, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) mmap(&(0x7f0000000000/0xdc7000)=nil, 0xdc7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x80003, 0x84) setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000663000-0x4)=0xffffffffffffffff, 0x4) socket$bt_l2cap(0x1f, 0x1, 0x0) 2018/01/14 21:59:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f000084d000)='/dev/cuse\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000b62000)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f000005e000)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @dev={0x0, 0x0, 0xffffffffffffffff, 0x0}}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000bf5000-0x4)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000c95000-0x28)={0x2, 0xffffffff, r1, 0x2, r2, 0x5, 0xfffffffffffffffe, 0x6}) sendmsg$nl_crypto(r0, &(0x7f0000921000-0x38)={&(0x7f00005ba000+0x66a)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000382000)={&(0x7f00008bc000-0x128)=@alg={0x128, 0x10, 0x1, 0x5, 0x3, {{'rfc4106(gcm(aes))\x00'}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2000, 0x2400, 0x0, 0x0}, [{0x8, 0x1, 0x0}, {0x8, 0x1, 0x5}, {0x8, 0x1, 0x0}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x6155}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0xe476}, {0x8, 0x1, 0x100000000}, {0x8, 0x1, 0x9}]}, 0x128}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000af1000-0x10)={0x0, 0xc7cd, 0x200, 0x6ad}, &(0x7f0000a25000)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000db000-0x8c)={r3, @in={{0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000854000)=0x8c) syz_open_dev$sndtimer(&(0x7f0000274000)='/dev/snd/timer\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0xffd, 0x84) setsockopt$inet6_MCAST_LEAVE_GROUP(r4, 0x29, 0x2d, &(0x7f0000447000)={0x5, {{0xa, 0x1, 0x26, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) setsockopt$inet6_int(r4, 0x29, 0x12, &(0x7f000094c000)=0x0, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f000078a000-0xc)='/dev/rfkill\x00', 0x41, 0x0) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000bf6000-0x11)='/selinux/relabel\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000cf1000)=0x0, 0x4) 2018/01/14 21:59:11 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000911000-0xb)='cifs.idmap\x00', &(0x7f00003e1000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000877000)="2acea0ab64cc7a737e4c7c8842ea5663b613b166517d0e65e05f6d59282726efaf20315af51278901d22a72b4a69a096f8", 0x31, 0xfffffffffffffffa) add_key$user(&(0x7f0000b94000)='user\x00', &(0x7f0000af1000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000000000)="97429be97cb007a3d37603a30884de2672e11c8db3c4e852e9b2046b0373e0644c95a209bf8543c6942765868faf6d4569dea367d5710028a31d2a780eaf11e4ccebb314cbac49590aebc94709160a1f68f147aa327cfc2bf28df0ead9311c168cfb0c3b7a2c76dfde7ecc423d218db7", 0x70, r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000ae8000)='/dev/snd/midiC#D#\x00', 0x2, 0x200080) recvmsg$netrom(r1, &(0x7f0000c72000)={&(0x7f0000df4000-0x10)=@ax25={0x3, {"e25a862381c33c"}, 0xffff}, 0x10, &(0x7f0000993000)=[{&(0x7f0000a4c000-0xb4)="3845799e11e0b4e931af90e8099f6619f82b523ea7795ef0666fd5f61c05cccbfb9aab48f20f19df2d195163b777b823d8ee3e23dc4c7484efab113df7a40cf3b437d493d15ada471b44665c0ff180c9df1450f7126c2519aa7260e163f01223c92d499a16e6efc22ec4e3e03dd27a8d979bb1cb92c4621f07f7f6c6c0e7047af9a725d31c7223f6b18370f5ea2c5a404a94753fd40fd29c5a975b21555add4b7eadbf9c8c57503017b3e530f33cc78c23456ec0", 0xb4}, {&(0x7f0000157000-0x45)="d1dce946eb9189db55b44f1d49e863b4f354992b20672c5224558926fc2525074b5063a06ca5dfc06f4b43756a3a47ab73a7ff656a4b0742cc8a33cbb5afa6111d69071ce2", 0x45}], 0x2, &(0x7f0000dc3000-0x148)=[{0x60, 0x0, 0xb2, "75687ae17a9d55260f977877a3445091d765e8cbe3d447780e2bc456ce31d4cc7f758a04cfe4de4d8b0798feb6282227d8588f8480be7b148a344d5ccbcf95089e9cf10cbdb7b38601458ba1"}, {0x30, 0x29, 0xffff, "537c6f16b4fa75b3df4e05195acf277a5986eafc57bd542cc3175121"}, {0xb8, 0x0, 0xc00, "9cc4504b2a2235db7e6e2309b6d9a39955803f87de26dcbbc389a3cc88d7d977703bb08765886d47a4aff16c6e693e6b01c33b02dc8382bfb86a8427e11329ffebc015d88b911f760ce51d233ad78434a7c6a2a206ae3e107c6a01631507be23ee254fabb1cf92616e9a23c731bf5f5e7fd3eaaddbf6001946a815fa731f17700d3887045146002f81349bd7f0f4de29efee03bdd778d45afa538c2c3471cb340e62"}], 0x148, 0x8801}, 0x0) r2 = request_key(&(0x7f0000762000-0xd)='dns_resolver\x00', &(0x7f0000e1c000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, &(0x7f0000a05000-0x29)='+lotrustedmime_typecgroupvmnet1]vboxnet0\x00', 0xfffffffffffffffb) r3 = getuid() lstat(&(0x7f000081a000-0x8)='./file0\x00', &(0x7f0000e49000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r2, r3, r4) 2018/01/14 21:59:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000efe000)={0x0, 0x0}) getsockopt$sock_int(r0, 0x1, 0x3b, &(0x7f00000a3000)=0x0, &(0x7f00009ab000-0x4)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000897000)=[{&(0x7f000021f000)="390000001300094700bb61e1c3e800020700000002000000450000000300800019001a000d01000100280ff4000000fd17e9ffff0300040005", 0x39}], 0x1) 2018/01/14 21:59:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f000077c000)='./file0\x00', 0x9) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000510000-0x11)='/selinux/context\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_STATS(r1, 0x80f86406, &(0x7f0000320000)=""/27) sendmsg$nl_generic(r0, &(0x7f000000a000-0x38)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000007000)={&(0x7f0000011000-0x24)={0x14, 0x20, 0xfffffffffffffffd, 0xffffffffffffffff, 0xffffffffffffffff, {0x3, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 71.937768] binder: 12044:12067 BC_INCREFS_DONE node 133 has no pending increfs request [ 71.937786] binder: 12044:12067 Release 1 refcount change on invalid ref 2 ret -22 [ 71.937793] binder: 12044:12067 unknown command 0 [ 71.937803] binder: 12044:12067 ioctl c0306201 208fdfd0 returned -22 [ 71.939793] binder: 12067 RLIMIT_NICE not set [ 71.945122] binder: 12072 RLIMIT_NICE not set [ 72.095918] binder: 12089:12111 BC_ACQUIRE_DONE node 134 has no pending acquire request [ 72.095936] binder: 12089:12111 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 72.095951] binder: 12089:12111 BC_FREE_BUFFER u0000000000000000 no match [ 72.095964] binder: 12089:12111 BC_INCREFS_DONE node 134 has no pending increfs request [ 72.095983] binder: 12089:12111 Release 1 refcount change on invalid ref 2 ret -22 [ 72.095991] binder: 12089:12111 unknown command 0 [ 72.096005] binder: 12089:12111 ioctl c0306201 208fdfd0 returned -22 [ 72.102201] binder: 12111 RLIMIT_NICE not set [ 72.168702] binder: 12049:12055 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 72.176103] binder: 12049:12055 BC_FREE_BUFFER u0000000000000000 no match [ 72.183071] binder: 12049:12055 BC_INCREFS_DONE u0000000000000000 no match 2018/01/14 21:59:11 executing program 3: mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0x2, 0x44031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000050c000/0x4000)=nil, 0x4000, 0xe) mmap(&(0x7f0000709000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f000070a000-0x11)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00005bd000)=""/154) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1) 2018/01/14 21:59:11 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000297000)={0x0, 0x0}) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000ac7000)={@loopback=0x7f000001, @remote={0xac, 0x14, 0x0, 0xbb}, 0x1, 0x1, [@empty=0x0]}, 0x14) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r1, &(0x7f00006da000-0x1c)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x2}, 0x1c) listen(r1, 0x3) r2 = accept(r1, &(0x7f0000d0b000-0x10)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000eff000)=0x10) connect$bt_rfcomm(r2, &(0x7f000000a000-0x9)={0x1f, {0x1, 0x8, 0xff, 0x100, 0x5, 0x1}, 0x6c5e}, 0x9) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00005a8000-0x10)={0x0, 0x0, 0x0, 0x80000001}, 0x10) 2018/01/14 21:59:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000751000)='/dev/midi#\x00', 0x1001, 0x100) getpeername$unix(r0, &(0x7f0000e2d000)=@file={0x0, ""/108}, &(0x7f0000f5e000)=0x6e) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_buf(r1, 0x29, 0x40000000000036, &(0x7f0000340000-0xd0)="dc13b51a5b31306e78dd581b71ab2144ece4740434cf0195f75d34c82d9d233f08008861ffccd64ade0e8cd3442fbc50974e8e1195c604f8800000040002663d75dd050000000000090000f2ffffffffa36611f99ef96f7d4ff812a8f9fc3f0739e6000000004f000000e000bdeb62e18a769c862f856d59f8b9f3aee345e59eee7026fe40be9cda06a2f10008c339d002000000000000003d328501902d973e668fa3f9b8974fec92b836614657ade603936ca6556ddfaeda0896440f396f4ba23e752db8352780dff40bb45a788385", 0xd0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000b33000)={0x3ff, 0x27, 0x1, 0x140000000000, 0xff, 0x3, 0x2, 0x9, 0x0}, &(0x7f0000dbf000-0x4)=0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f000040d000-0x14)={r3, 0x1f, 0x6, [0x0, 0x9, 0x10001, 0x1, 0x1000, 0x4]}, &(0x7f0000264000-0x4)=0x14) setsockopt$inet6_buf(r1, 0x29, 0x36, &(0x7f00008dd000)="", 0x0) 2018/01/14 21:59:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x78, 0xffffffffffffffeb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000d6c000)=""/5) io_setup(0x0, &(0x7f000017c000-0x8)=0x0) fchmod(r0, 0x80) io_getevents(0x0, 0xfffffffffffffff9, 0x0, &(0x7f0000a35000)=[], &(0x7f0000a9b000-0x10)={0x77359400, 0x0}) 2018/01/14 21:59:11 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f000061e000-0x10)={0x0, 0x0, 0x4, 0x3}, 0x10) bind$inet6(r0, &(0x7f0000523000)={0xa, 0x1, 0x1, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @empty=0x0}, 0x5}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000d3d000-0x11)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000c47000-0x10)={0x6, 0x2, 0x40, 0x0}) sendto$inet6(r0, &(0x7f0000848000-0x1)='X', 0x1, 0x0, &(0x7f0000060000-0x1c)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) 2018/01/14 21:59:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000c00000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r1 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00009e8000)={{{@in=@multicast2=0x0, @in=@multicast1=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00001db000-0x4)=0xe8) stat(&(0x7f00007ca000-0x8)='./file0\x00', &(0x7f00002e0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fcntl$getown(0xffffffffffffffff, 0x9) fstat(0xffffffffffffffff, &(0x7f0000d8d000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$setpipe(r0, 0x407, 0x8) mlockall(0x3) getgroups(0x8, &(0x7f0000aac000-0x20)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00007e8000)='/dev/loop-control\x00', 0x80, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000005e000-0x8)={0x0, 0x0}) stat(&(0x7f0000cfb000)='./file0\x00', &(0x7f0000e6c000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000ec8000-0xc)={0x0, 0x0, 0x0}, &(0x7f000060c000-0x4)=0xc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000d21000)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00005b2000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000331000-0x4)=0xe8) fstat(0xffffffffffffffff, &(0x7f00006f1000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000a6a000)='/selinux/create\x00', 0x2, 0x0) r15 = syz_open_dev$midi(&(0x7f0000714000-0xb)='/dev/midi#\x00', 0x8c00000000000000, 0x0) r16 = accept4$netrom(0xffffffffffffffff, &(0x7f0000077000-0x48)=@full={{0x0, {""/7}, 0x0}, [{""/7}, {""/7}, {""/7}, {""/7}, {""/7}, {""/7}, {""/7}, {""/7}]}, &(0x7f0000cde000)=0x48, 0x800) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000071000-0x8)={0x0, 0x0}) sendmsg$unix(r0, &(0x7f000022d000-0x38)={&(0x7f0000e1a000)=@abs={0x1, 0x0, 0x3}, 0x8, &(0x7f00008bb000)=[{&(0x7f000043f000)="16cb067d9ff04db07e35f437a5626f51c6da47e44db081e52449fb39fe6ee63aba818ff7a7a4941166eabd9d4eb16aa69197074ac7ef5b08f39a977ed09890d627974859768ecf6038809e9f51cc180a79039be0a622be8eb82a8ef07ab6a898b41c8a0909020a49e4e098016098eb710ed91e3e61e3c9d87ca0e4ec07e45fb5f326bfde7b19a437c9b9a85b26e7e35e32e5ae960058b116087011f26cfd13231ced37a25f3a3723f2517c0a5ae1d0932710b1037a5b21b8d2e24b319f827044184bd6088050ca3774c079eafcb734a2950b4e", 0xd3}, {&(0x7f000099e000-0x26)="f5d42f327393e82ada8335cc1860c434e6595d9ff868f4dc871956e65259b56f57b727ffaba8", 0x26}, {&(0x7f00000e9000)="4ffe436cbee97741950c6077f46b6ae8815232c146ddd0bbe0074de49207d2eddf89dfcae3acea18610ff6e9e351fdf833aaf5c93589f95922cad6b0e97017520fe08001448093fa52b2d5ad6716", 0x4e}, {&(0x7f0000bc0000-0x6a)="3c79c92eb26a974d2d5c60aabe764f408c2b870e1684645a8135de4d611ff335706a4def052913f9bfb63fe03f0c31f3f28e7461d6936da8e02d08ab570b07dba4a6f35f264c00904d2eefd860cd1136fa59e381d10fbd65fb9c11f37934400e5e575af7bb0d8fe7d2df", 0x6a}, {&(0x7f00001d7000)="a318bf3cde4c2840180b16ab0d8c632c85c857d633f56741490718505329e4c284010df5aea7cde877b9b6e5a43d23f10fac252b2847af53a60a5a5bec937f2685ed8888196d9f2cf3320905f06955e5bd50b2d729defeff7d8b95de00b72f15e3b6044a0a016fef9dad7edb42ad9cd75f8f2dfd9e317abecede29f32721907f1dc4eb5d844a8942cd6824081a04efca39809077ac988a85ec796e94694bab91e8726e00d315dae91408a444f86ff73465d626c00c856a9f1403c4d6f506b4049c5a27ea3eb794b9", 0xc8}], 0x5, &(0x7f0000a43000)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x18, 0x1, 0x1, [r7]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x20, 0x1, 0x1, [r14, r15, r16]}, @rights={0x18, 0x1, 0x1, [r17]}], 0xd0, 0x0}, 0x800) perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000509000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt(r15, 0x6, 0x5, &(0x7f0000ad7000-0x40)="2ff5856b4db8b7348c3d98204d0995b9a4d33fb06c8b0b3ceb22002e02d641e99e97fffdab26f46307167c61e3d554ae76e4101f10b68d17576a8d85edd39d3e", 0x40) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000bdc000-0x4)=0x7) ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x40042408, 0x3ff) llistxattr(&(0x7f0000d35000)='./file0\x00', &(0x7f00005b9000)=""/73, 0x49) [ 72.190124] binder: 12049:12055 Release 1 refcount change on invalid ref 2 ret -22 [ 72.197849] binder: 12049:12055 unknown command 0 [ 72.202717] binder: 12049:12055 ioctl c0306201 208fdfd0 returned -22 [ 72.243783] binder_alloc: 12117: binder_alloc_buf, no vma [ 72.254287] binder: 12117:12130 transaction failed 29189/-3, size 0-0 line 2957 [ 72.261192] binder: BINDER_SET_CONTEXT_MGR already set [ 72.261201] binder: 12128:12134 ioctl 40046207 0 returned -16 [ 72.306070] binder: 12128:12140 BC_ACQUIRE_DONE u0000000000000000 no match [ 72.313274] binder: 12128:12140 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 72.322100] binder: 12128:12140 BC_FREE_BUFFER u0000000000000000 no match [ 72.331224] binder: 12143 RLIMIT_NICE not set [ 72.337125] binder: 12128:12140 BC_INCREFS_DONE u0000000000000000 no match [ 72.344697] binder: 12128:12140 Release 1 refcount change on invalid ref 2 ret -22 2018/01/14 21:59:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x6a6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000847000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000c19000-0x4)=0xcb) getrandom(&(0x7f00004df000)=""/15, 0xfffffffffffffe5a, 0x3) sync_file_range(0xffffffffffffffff, 0x800, 0x6, 0x1) 2018/01/14 21:59:11 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(&(0x7f0000002000-0xb)='/dev/midi#\x00', 0x5, 0x212000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001000)={r0, r1, 0x4, 0x2}, 0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) prctl$getreaper(0xffffffffffffffff, &(0x7f0000000000)=0x0) 2018/01/14 21:59:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:11 executing program 6: r0 = socket(0x100000000011, 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000cb1000-0x90)=""/144, 0xbb22}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001000-0x20)={@generic="6fd6a2e27a84bb5ff3bed84917e1b7e1", @ifru_flags=0x2000}) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000)="", 0x47e) socket$nl_xfrm(0x10, 0x3, 0x6) 2018/01/14 21:59:11 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x77359400, 0x0}, {0x0, 0x0}}, &(0x7f0000bf8000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_nanosleep(0x0, 0x0, &(0x7f0000001000-0x8)={r0, r1+10000000}, &(0x7f0000001000-0x10)={0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000074f000-0x9)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto(r4, &(0x7f0000001000+0x88a)="fefbfc7abaeca0cde35aad948f7bae552266818ff8e6d6586db9e537ac05ad1325a9ca4a254b4a282c94b98babd8286c427437bc087bbae254216e9178f0f7d616f167e9399373fd50a9c90d1d947513a5", 0x51, 0x4, &(0x7f0000002000-0x10)=@can={0x1d, 0x0, 0x0, 0x0}, 0x10) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f00001f4000/0x18000)=nil, &(0x7f00006fa000-0x18)=[@textreal={0x8, &(0x7f0000755000-0x39)="0f234c0f2343660f382899040064660f3804d0f26726f6699bb8b3088ed8baf80c66b89c318e8766efbafc0c66ed652e6536d6f30f350f18d2", 0x39}], 0x1, 0x0, &(0x7f0000756000-0x10)=[], 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000750000)={0x2, 0x0, [{0x40000000, 0x0, 0x8}, {0x40000001, 0x0, 0x1ff}]}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x23, 0x0}) socket$unix(0x1, 0x0, 0x0) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000002000-0x1a0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) 2018/01/14 21:59:11 executing program 3: rt_sigreturn() mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x5, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00006d1000)=@common='lo\x00', 0x10) mmap(&(0x7f0000237000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x0, &(0x7f0000238000-0x4)=0x6, 0x4) sendmmsg$nfc_llcp(r0, &(0x7f0000237000)=[{&(0x7f0000003000-0x60)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0fcca4bb22f2892559edddba1a892f216c6adb6dac3291add84e7dd1b9b1e1043844071c4d783ef83c7baa707bef6850ccd339c111743913f1b7601256cf03", 0x0}, 0x60, &(0x7f0000006000)=[], 0x0, &(0x7f0000239000-0x1010)={0x28, 0x29, 0x2, "f1eb437ee62fa89f7006e4a66ee67f3490"}, 0x28, 0x0}], 0x1, 0x0) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000a60000)='big_key\x00', &(0x7f0000608000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000488000)="a5041e9fbf511cf7d1658c8f7bb2335a9313f5460ba05445da899b8fa0fda13aa1f25f13fdedee29a293", 0x2a, 0x0) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00001b2000-0x2)=0x2, &(0x7f000007d000)=0x2) mmap(&(0x7f0000a60000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000812000-0x6)='logon\x00', &(0x7f0000a61000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000a61000-0x64)="4f2a4bc7ce7221b4b3ecd8515185139bfbc0ca6acc0befe34a181fa7890fa9a4d196d270d07bd0604feeb2f93b8850e5435e33b250b6f261b30a56fa99251fcd4ebe85e4080c646f73285a2ea9b919fad67dbfbc319be232f39355b809da8f7b9d17ff66", 0x64, 0xfffffffffffffffc) keyctl$search(0xa, r1, &(0x7f0000a60000)='big_key\x00', &(0x7f0000a60000)={0x73, 0x79, 0x7a, 0x3, 0x0}, r2) 2018/01/14 21:59:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000c72000)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f000047e000)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000079b000)={@common='irlan0\x00', r1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$alg(r0, &(0x7f0000149000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) r2 = accept$alg(r0, 0x0, 0x0) dup2(r0, r2) [ 72.352777] binder: 12128:12140 unknown command 0 [ 72.357671] binder: 12128:12140 ioctl c0306201 208fdfd0 returned -22 [ 72.388647] binder_alloc: 12146: binder_alloc_buf, no vma [ 72.400351] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/14 21:59:11 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000031b000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000b56000)='/dev/mixer\x00', 0x100, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000837000-0x24)={0x5, 0x8, 0x8001, 0xeb8a, 0x2, 0x7, 0x5d, 0x3, 0x0, 0x8, 0x3, 0x100}) fchownat(0xffffffffffffffff, &(0x7f000034f000-0x8)='./file0\x00', 0x0, 0x0, 0x0) 2018/01/14 21:59:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000058000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00002c2000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x1, [{{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x110) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000e6e000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x108) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00009c3000)='./file0\x00', 0x0, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000977000-0x40)={0x1ff, 0x7, 0x5, 0xab, "f042a4a7bef4f21693f3489b4a1b3616e0c83380626a72c8c9f811ab96f8ae6fb0a0bb60c26f84c93742d575", 0x2}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00000ce000-0x98)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) openat$audio(0xffffffffffffff9c, &(0x7f00003c4000-0xb)='/dev/audio\x00', 0x4000, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000950000-0x4)=0x1ff) 2018/01/14 21:59:11 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b99000-0x1)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000661000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000a37000)={0x0, 0x78, 0x9, 0x4, 0x7ff, 0x1, 0x0, 0x101, 0x405, 0xb, 0x6, 0x8, 0xb0, 0x80000000, 0x1f, 0x78e, 0x543, 0x1, 0x7, 0x7, 0x3, 0x7, 0x2, 0x1a66, 0x4, 0x7f, 0xc099, 0x3f, 0x9c2d, 0xffff, 0x7ff, 0x21, 0xd0, 0x871, 0x401, 0x5, 0x3, 0x3, 0x0, 0x1, 0x4, @perf_config_ext={0x8, 0x0}, 0x80, 0x8001, 0x1000, 0x4, 0x97, 0x81, 0x6, 0x0}, r3, 0x1f, r0, 0x1) bind$unix(r2, &(0x7f0000686000)=@file={0x1, './file0\x00'}, 0xa) r4 = dup2(r2, r1) setrlimit(0x7, &(0x7f0000a06000)={0x0, 0x0}) ioctl$sock_ipx_SIOCAIPXITFCRT(r4, 0x89e0, &(0x7f0000a85000-0x4)=0x0) 2018/01/14 21:59:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndtimer(&(0x7f00004ac000-0xf)='/dev/snd/timer\x00', 0x0, 0x2040) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00006a4000)='/selinux/context\x00', 0x2, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00003cc000)={0x53, 0x0, 0xfffffffffffffff7, {0x3, 0x5}, {0x5, 0x7ff}, @cond=[{0x7, 0x10, 0x85, 0x6, 0xb71, 0x683}, {0xf2b, 0x8, 0x5, 0x0, 0x7, 0x82}]}) r1 = syz_open_dev$sndtimer(&(0x7f0000f86000-0xf)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00001df000-0x48)={{0x1, 0x0, 0x0, 0x2, 0xb9f}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 72.400361] binder: 12150:12159 ioctl 40046207 0 returned -16 [ 72.414672] binder: 12146:12155 transaction failed 29189/-3, size 0-0 line 2957 [ 72.451620] binder: 12150:12168 BC_ACQUIRE_DONE u0000000000000000 no match [ 72.472061] binder: 12150:12168 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 72.480813] binder: 12150:12168 BC_FREE_BUFFER u0000000000000000 no match [ 72.481007] binder: 12179 RLIMIT_NICE not set 2018/01/14 21:59:11 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000c0d000)='schedstat\x00') ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000214000)={[0x0, 0x8, 0x7ff, 0x40, 0x5, 0x7, 0x7, 0x6, 0x80000001, 0x2, 0x9, 0x0, 0x1, 0x4, 0x1, 0x6eb], 0x1f000, 0x200000}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000f26000)={0x0, @in6={{0xa, 0x2, 0x9, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa}, 0xfffffffffffffff8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7, 0x80}, &(0x7f0000000000)=0x98) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001000-0xc)={r1, 0x80000000, 0x30}, &(0x7f0000001000-0x4)=0xc) mmap(&(0x7f0000000000/0xf1c000)=nil, 0xf1c000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f1c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000f1d000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000f1d000-0x4)=0xb) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000f1c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000f1c000)=0x0, &(0x7f0000baa000-0x4)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00003b3000)='/dev/qat_adf_ctl\x00', 0x680200, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) mmap(&(0x7f0000f1c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000f1c000)='/selinux/load\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000f18000)={&(0x7f0000a95000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000950000)={&(0x7f0000f1c000-0x22c)=@newsa={0x17c, 0x10, 0xeff, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @loopback=0x7f000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast1=0xe0000001}, 0xffffffffffffffff, 0x33}, @in6=@loopback={0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0xffffffff80000001, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0}, [@algo_auth={0x8c, 0x1, {{'rmd160\x00'}, 0x208, "55438c5e6cf3712d66548e774e90242eb681ec5710e398f29962ea5bc829e862f5b20c46fb5446a7a3a99ef89a534b2698250f34ebfce15448f918abb280f72cd2"}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/14 21:59:11 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001000-0xe)='/selinux/user\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000c43000)=""/93) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000002000)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) waitid(0x1, r1, &(0x7f0000001000-0x10)={0x0, 0x0, 0x0, 0x0}, 0x1, &(0x7f0000003000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r0, 0x4010ae67, &(0x7f0000002000)={0x2000, 0x112000, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$void(r0, 0xc0045878) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) execve(&(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000000000)=[&(0x7f0000001000-0x7)='cpuset\x00', &(0x7f0000001000-0x2a)="6d696d655f747970652f657468302d757365727dfc656d316d696d655f747970655d6b657972696e6700", &(0x7f0000001000)='/selinux/user\x00', &(0x7f0000002000-0xe)='/selinux/user\x00', &(0x7f0000002000-0xe)='/selinux/user\x00', &(0x7f0000001000)='/selinux/user\x00', &(0x7f0000000000)='system)em1GPL\x00', &(0x7f0000001000-0xe)='/selinux/user\x00', &(0x7f0000001000)='eth1-*.eth0cgroup@#lo\x00', &(0x7f0000002000-0xa)="25ee2e252370726f6300"], &(0x7f0000001000-0x10)=[&(0x7f0000002000-0xe)='/selinux/user\x00', &(0x7f0000001000)='/selinux/user\x00']) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) lsetxattr(&(0x7f0000592000)='./control\x00', &(0x7f0000aff000)=@known='system.posix_acl_default\x00', &(0x7f0000242000-0x12)="02000000000000006f556e657430242d2a00", 0x12, 0x0) 2018/01/14 21:59:11 executing program 0: set_tid_address(&(0x7f0000f09000)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001000-0xa)='/dev/cuse\x00', 0x4000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10600, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000001000-0x20)={r1, 0x0, 0x8, r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$nfc_raw(0x27, 0x3, 0x0) 2018/01/14 21:59:11 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:11 executing program 2: mmap(&(0x7f0000000000/0xaf9000)=nil, 0xaf9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000401000-0x8)="266500000004d751", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000276000-0x38)={0x0, 0x0, &(0x7f0000738000-0x30)=[], 0x0, &(0x7f00006c2000)=[], 0x0, 0x0}, 0x0) dup3(r0, r1, 0x0) 2018/01/14 21:59:11 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:11 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000000)='.request_key_auth\x00', &(0x7f0000184000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00007a9000-0xc)={@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @empty=0x0, 0x0}, &(0x7f000008b000)=0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001, r1}, 0xfffffffffffffddc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000006000-0x4)=0x2d) rt_sigsuspend(&(0x7f0000fa6000)={0x3e8}, 0x8) 2018/01/14 21:59:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000238000-0xd)='/dev/usbmon#\x00', 0x7f, 0x80) prctl$void(0x22) getsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000e21000-0x4)=0x0, &(0x7f0000d93000-0x4)=0x4) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) dup3(r0, r0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f000037e000-0xe0)=[{0x0, 0x0, &(0x7f0000fdb000)=[{&(0x7f0000e06000)="18a8b815e470ed54bd081bb4eade4d404541ba78a926056aa39669a7ade8a31e397fb21c3e56c4a5e2f47ce5c5c794226538272bad5bb6fd3f80ec58b4716a673d8d9fe9af8ae7e67d2c2997724a18a61c176fefe0b87d8568a66c73db08493b5683a3562246d3f5a728cd8c2500d0a58f4523cec1aed61b3bdff6ed81489d4000a955e0bdd380089c38cdf3d27acd274441b68987483b6b665d340181c6e221b1603745875817444a4d23539fbf9af2f0cf3f4d5f2c9ac722d161a0f36d8847fc1f4f47ee33970c5eb66ea781c495a6871ab03c7fec0f63d7bf68f2aa4b75c961ea44d8f04caa988d19105bff178181988eadb432b3b322a970f9d4cf4b", 0xfe}, {&(0x7f00007bf000)="392ed8aeaa05d0ecd258f14a7d11c4a7565e72a07033c6da1d46c849a5b20f3ad45a11fd84d73fea671f7588668eba87d852152d7164467854204e500f3abcc231152d5c5f35d10a201dae8279faf9c6c0b41604fca156444d3df304e8a8752d494e19505c9cba8312f36d568f03229f20686dea2b6cb30e65b088c13bbb1872b21ae2a848dd12587ff902378cc6c5fd9d6d52733421e4502c348c120f5c00dc7bf947b0ee9e726de3b3ba76359ea52d2ffce5d9da0c89aef364dce270977bc9401dc5154426627bf9be084ba42225e0fefe80375688831b1436a29030de4f284acb", 0xe2}, {&(0x7f0000ef5000-0x67)="cd48c6d4eb2332d7f41603fbbbee72c7caf7838b3d32dd9d6f19b779db59401a0e4673bdd8a3fb978cdf943cf82fdd7f60eba1b8eabc83d2e6c3bbddf8a299c6af03aaf1e993015beaa00cc24610a6d5b9e2251099f21903f589781b5956e3230abd778598689e", 0x67}], 0x3, &(0x7f0000f7e000)=[], 0x0, 0x841}], 0x1, 0x4040040) readv(r2, &(0x7f0000b3a000)=[{&(0x7f000039b000-0x1000)=""/4096, 0x1000}, {&(0x7f0000f85000-0x55)=""/85, 0x55}, {&(0x7f00005ae000)=""/27, 0x1b}, {&(0x7f0000f86000-0x42)=""/66, 0x42}, {&(0x7f0000f87000-0x7b)=""/123, 0x7b}], 0x5) [ 72.495209] binder: 12150:12168 BC_INCREFS_DONE u0000000000000000 no match [ 72.504658] binder: 12150:12168 Release 1 refcount change on invalid ref 2 ret -22 [ 72.512504] binder: 12150:12168 unknown command 0 [ 72.517508] binder: 12150:12168 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:11 executing program 0: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000178000-0x18)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) signalfd(r0, &(0x7f0000000000)={0xffffffffffffff69}, 0x8) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) syz_open_dev$sg(&(0x7f0000d98000)='/dev/sg#\x00', 0x80000000, 0x202000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00003d7000-0x4)={0x2}, 0x4) setsockopt(0xffffffffffffffff, 0x107, 0x7, &(0x7f0000001000)="", 0x0) [ 72.553729] binder_alloc: 12186: binder_alloc_buf, no vma [ 72.560372] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/14 21:59:11 executing program 2: mmap(&(0x7f0000000000/0xf3000)=nil, 0xf3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000f2000)={@random="cd390b081bf2", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "a2fbc8", 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "bac08c", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, [@hopopts={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}], ""}}}}}}}, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000080000-0x9)='/dev/ion\x00', 0xc300, 0x0) mmap(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000052000-0x40)=[{&(0x7f00000b2000)="ebdfd19b890dc141623771d5f8574d428d89537686d90aa8149741fec26a5b475a16dfadb0bda72a9721b5e44e78", 0x2e}, {&(0x7f00000f4000-0x38)="4454b9c0430882e20c1e1baf7baf148a0a513b2c252568ec099701075b0855f9d995052f30fe2fabe58b632e9b7ded3244dace6996d1d08a", 0x38}, {&(0x7f00000f4000-0x76)="14fb4f831ec181f4697a8cf3a6bd6cbc2ce3a6f1b5465ea3066590ddd12bbecc605c3d9e8a23c0376f52ccee5d122ea5c6cae9d82eb37083eb73435f33e261383a3d9ef9987cf7624b640bf0dac1096654c2608ffa9cbf073eb42d5b765b08034451ead8b20c61c9dc7ba506563bfe3d27a3787fa605", 0x76}, {&(0x7f00000f3000)="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", 0x1000}], 0x4) 2018/01/14 21:59:11 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000221000-0x1ca)="130000001000ffdde200f49ff60f050000230a009d0000000f00afa73022e5f9ec3e4fe853c7a4fc9029efc8385148de24ffcf7a6ff03f27881fc88ea8accd6c6b109d2b3c62182cc2778e8f27cafb991865e0b100e2b3568fc169602a10909b247775ca83c42116e350856fe3a321f5d722dd9d323fdcbd7235ba9a5d191f152c7a7ca880ae2515aca4c442dbf6cbf1a8ca9c55fc8e84270eabdc99d2ca5e4f8c916591232abc36cc265ca567851564d0", 0xb1) sync_file_range(r0, 0x6, 0x8, 0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00001da000)={0x0, @in6={{0xa, 0x3, 0xfffffffffffffe00, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000840000-0x4)=0x8c) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000854000-0x98)={r1, @in={{0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0x8}, &(0x7f000003f000)=0x98) getsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000cc4000)=""/67, &(0x7f0000ea1000)=0x43) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f000000a000-0x8c)={0x0, @in6={{0xa, 0x0, 0x4, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000e3a000-0x4)=0x8c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00006e2000)={r2, @in={{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) 2018/01/14 21:59:11 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000df5000-0xb)='/dev/hwrng\x00', 0x208001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$nfc_raw(r0, &(0x7f0000000000)={0x27, 0xffffffff, 0x73, 0x0}, 0x10) r1 = request_key(&(0x7f0000034000)='rxrpc\x00', &(0x7f000040f000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000429000-0x1)='\x00', 0x0) r2 = getpgid(0xffffffffffffffff) sched_rr_get_interval(r2, &(0x7f0000653000-0x10)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000068000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000-0x78)={0x7, 0x78, 0x20, 0x81, 0x9, 0x7, 0x0, 0x8001, 0xc0020, 0x8, 0x6, 0x9, 0x0, 0xffff, 0x7fffffff, 0x0, 0x5, 0x2, 0xfff, 0x2, 0x3, 0x5, 0x8, 0x3, 0xfffffffffffffe01, 0x9, 0x1, 0x400, 0x7, 0x0, 0x79f6da2a, 0x5, 0x7ff, 0x8, 0x81, 0x4ab, 0xffffffffffffff7f, 0x5eca687c, 0x0, 0x401, 0x5, @perf_config_ext={0x1, 0x5}, 0x40, 0x7f, 0x100000001, 0x5, 0x100000000, 0xa2, 0x80000000, 0x0}, r2, 0x2, r3, 0xb) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$unix(r3, &(0x7f0000002000-0xd4)=""/212, 0xd4, 0x40010021, &(0x7f0000002000-0xa)=@file={0x1, './file0\x00'}, 0xa) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000000)={{0x1, 0x7, 0x6, 0x0, "35e980c606c87aa0c5e4b8526bcd594401ee19c0f81bdd7d55ed9591121ab48d89d828a68809a411887b88c5", 0x3c2}, 0x3, [0x5, 0x9, 0x81, 0xffffffffffffff85, 0x7fff80000000000, 0x3, 0xffffffffffffffe8, 0xffffffff, 0x6, 0x8395, 0x10000, 0x8, 0x40, 0x7, 0x6, 0x359b0812, 0x5, 0x20, 0x8000, 0x5, 0x9, 0x7, 0xbf, 0x0, 0xff, 0x4, 0x1, 0x1, 0x1, 0x2, 0x0, 0x40, 0x7ff, 0x7f, 0xff, 0x4, 0x81, 0x0, 0x9, 0x1, 0x1ff, 0x6, 0x71ba9788, 0x8, 0x4, 0x7fff, 0x7, 0x2, 0x2ad, 0x896f, 0xb0, 0x4, 0x100000001, 0x1, 0x7, 0x2, 0xdd, 0x8, 0x5, 0x1, 0x4, 0x100, 0xbe7, 0x81, 0x8, 0x44f, 0x3, 0x0, 0xe4d9, 0x9, 0x1, 0xffff, 0x8, 0x240, 0xffffffffffff0000, 0x4, 0x7fffffff, 0x9f3, 0x8000, 0x1, 0x7ff, 0xfffffffffffffffe, 0x1000, 0x401, 0xfffffffffffffff9, 0x400, 0x1, 0x0, 0x0, 0x2, 0x3, 0x5a8a, 0x1, 0xf334, 0x4, 0x6, 0x9, 0x80, 0x8, 0x3, 0x0, 0x20, 0x1, 0x4c, 0x1f, 0x20, 0x100000000, 0x4d, 0x8e43, 0x0, 0x7fffffff, 0x8, 0x7ff, 0x8, 0x4, 0xfd50, 0xffff, 0x1ff, 0x6, 0xed3e, 0x1000000000000000, 0x3, 0xb52, 0xfffffffffffffffd, 0x8000, 0x20, 0x2bb, 0x5], {0x77359400, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) keyctl$describe(0x6, r1, &(0x7f0000001000-0xd3)=""/211, 0x2b6) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000002000)={0x0, 0x0}, 0x800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000002000-0xa0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x2, 0x4, 0xe, 0x0}, &(0x7f0000001000)=0xa0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$ipx_IPX_TYPE(r3, 0x100, 0x1, &(0x7f0000004000-0x4)=0x0, &(0x7f0000002000)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000001000-0xa0)={r4, @in6={{0xa, 0x1, 0x5, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40, 0x5, 0x7f, 0x3, 0x5}, &(0x7f0000001000)=0xa0) [ 72.560383] binder: 12187:12192 ioctl 40046207 0 returned -16 [ 72.611434] binder: 12186:12203 BC_ACQUIRE_DONE node 139 has no pending acquire request [ 72.611453] binder: 12186:12203 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 72.617144] binder: 12187:12205 BC_ACQUIRE_DONE u0000000000000000 no match 2018/01/14 21:59:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000ab8000-0x1000)="97", 0x1, 0x0, &(0x7f0000ab8000)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x1}, 0x1c) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0xc568, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(r1, &(0x7f0000e44000)=""/37) shutdown(r0, 0x1) 2018/01/14 21:59:12 executing program 7: mmap(&(0x7f0000000000/0x6000)=nil, 0x6000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000003000)='/dev/qat_adf_ctl\x00', 0x60040, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000006000-0x4)=0x0, &(0x7f0000006000)=0x4) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000004000-0x28)={@common='erspan0\x00', &(0x7f0000006000-0x8)=@ethtool_sfeatures={0x1b, 0x0, []}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/14 21:59:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2e, &(0x7f000066d000-0x46)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[@rr={0x7, 0x3, 0xe4, []}]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [], ""}}}}}}, &(0x7f0000754000)={0x0, 0x1, [0xaf2]}) 2018/01/14 21:59:12 executing program 2: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xf, 0x1, 0x1) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f000017c000-0x20)={@common='tunl0\x00', @ifru_flags=0x8100}) connect$inet(r0, &(0x7f000004a000)={0x2, 0x0, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000cd000)=0x9) [ 72.617155] binder: 12187:12205 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:12 executing program 3: mmap(&(0x7f0000001000/0xffe000)=nil, 0xffe000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000e50000-0x9)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x2275, &(0x7f000069f000)="0080") 2018/01/14 21:59:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) 2018/01/14 21:59:12 executing program 7: rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0x0}, 0x0, 0x8) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000c7a000)='/selinux/validatetrans\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000001000-0x38)={&(0x7f0000001000-0x10)=@ipx={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, 0x10, &(0x7f00003ce000-0x80)=[{&(0x7f0000cba000-0x59)=""/89, 0x59}, {&(0x7f0000db6000)=""/45, 0x2d}, {&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000001000-0x90)=""/144, 0x90}, {&(0x7f00005e1000)=""/11, 0xb}, {&(0x7f0000001000)=""/217, 0xffffffd4}, {&(0x7f0000000000)=""/252, 0xffffff68}, {&(0x7f0000000000)=""/158, 0x3c}], 0x8, &(0x7f000010c000+0x849)=""/207, 0xcf, 0x5}, 0x2000) [ 72.617168] binder: 12187:12205 BC_FREE_BUFFER u0000000000000000 no match [ 72.617180] binder: 12187:12205 BC_INCREFS_DONE u0000000000000000 no match [ 72.617193] binder: 12187:12205 Release 1 refcount change on invalid ref 2 ret -22 [ 72.617200] binder: 12187:12205 unknown command 0 [ 72.617210] binder: 12187:12205 ioctl c0306201 208fdfd0 returned -22 [ 72.618481] binder: 12205 RLIMIT_NICE not set [ 72.638369] binder: 12222 RLIMIT_NICE not set [ 72.735880] binder: 12186:12190 transaction failed 29189/-3, size 0-0 line 2957 [ 72.743613] binder: 12186:12203 BC_FREE_BUFFER u0000000000000000 no match [ 72.743631] binder: 12186:12203 BC_INCREFS_DONE node 139 has no pending increfs request [ 72.743652] binder: 12186:12203 Release 1 refcount change on invalid ref 2 ret -22 [ 72.743659] binder: 12186:12203 unknown command 0 [ 72.743669] binder: 12186:12203 ioctl c0306201 208fdfd0 returned -22 [ 72.762458] binder: BINDER_SET_CONTEXT_MGR already set [ 72.762469] binder: 12241:12244 ioctl 40046207 0 returned -16 [ 72.798740] binder: undelivered TRANSACTION_ERROR: 29189 [ 72.802590] binder: 12241:12246 BC_ACQUIRE_DONE u0000000000000000 no match [ 72.802601] binder: 12241:12246 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00007c7000)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f00004b6000)=0x3f, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000868000-0x20)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendto(r2, &(0x7f0000a63000)="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", 0x1e0, 0x0, &(0x7f0000967000-0x6)=@hci={0x1f, 0x0, 0x0}, 0x6) recvmsg(r2, &(0x7f00001f5000)={&(0x7f0000f80000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, 0x58, &(0x7f00009ab000)=[{&(0x7f0000f7f000)=""/223, 0xdf}, {&(0x7f0000f81000)=""/4096, 0x1000}], 0x2, &(0x7f0000f80000-0x36)=""/87, 0x57, 0x0}, 0x0) 2018/01/14 21:59:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000aba000-0x5)='./file0\x00', &(0x7f0000b36000)='./file0\x00') socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x1, 0x401) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f000046f000)=0x0, 0x4) 2018/01/14 21:59:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) 2018/01/14 21:59:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r2 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f000058c000)=""/4096) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r3, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000e8000)='/dev/cuse\x00', 0x2, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f00009f6000-0x10)={0x6, 0x2, 0x0}) write$fuse(r0, &(0x7f0000289000-0x20)={0x20, 0x6, 0x0, @fuse_ioctl_out={0x0, 0x0, 0x0, 0x0}}, 0x20) 2018/01/14 21:59:12 executing program 6: r0 = syz_open_dev$amidi(&(0x7f000047c000)='/dev/amidi#\x00', 0xd47, 0x40000) ioctl$TIOCCONS(r0, 0x541d) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000f60000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0xf4a) 2018/01/14 21:59:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000259000-0xa)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f000035a000-0xd)='/dev/usbmon#\x00', 0x80000001, 0x42000) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f000058c000)={0x0, 0x3, 0x1, 0x635}, &(0x7f000006e000)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f000057f000-0x12)={r2, 0x9, 0x5, [0x2, 0xfffffffffffffff9, 0x8000, 0x9, 0x0]}, &(0x7f0000bbb000)=0x12) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000723000-0x4)=0x1b) read(r0, &(0x7f0000446000-0x31)=""/49, 0x31) 2018/01/14 21:59:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x802, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x2011, 0x0, 0x2, 0x0, []}) accept$llc(r1, &(0x7f000020b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000dd4000-0x4)=0x10) ioctl(r1, 0x8916, &(0x7f0000000000)="") r2 = syz_open_dev$amidi(&(0x7f0000a0a000)='/dev/amidi#\x00', 0x7f, 0x80000) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f0000f0c000-0x8)=0x0) connect$inet6(r0, &(0x7f0000ce8000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) ioctl(r1, 0x8936, &(0x7f0000000000)="") setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f000038b000-0x4)=0x80000000, 0x4) [ 72.802614] binder: 12241:12246 BC_FREE_BUFFER u0000000000000000 no match [ 72.802626] binder: 12241:12246 BC_INCREFS_DONE u0000000000000000 no match [ 72.802638] binder: 12241:12246 Release 1 refcount change on invalid ref 2 ret -22 [ 72.802646] binder: 12241:12246 unknown command 0 [ 72.802656] binder: 12241:12246 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x803, 0x6) syz_open_dev$sndctrl(&(0x7f0000315000)='/dev/snd/controlC#\x00', 0x6c0efd24, 0x8002) msgget$private(0x0, 0xc) sendmsg$nfc_llcp(r0, &(0x7f0000929000)={&(0x7f0000921000-0x60)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "1814145680ffffffffffff7891000076e43108f579bd95054d6b050000bebc48e8d8cda3d681fc482e6e0409000000000000da0303cc208a6e4bf82eff4d04", 0x0}, 0x60, &(0x7f000092b000)=[], 0x0, &(0x7f0000921000-0x64)={0x18, 0x29, 0x8, "ffdc0a32"}, 0x18, 0x0}, 0x0) [ 72.805081] binder: 12246 RLIMIT_NICE not set 2018/01/14 21:59:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000528000-0x19)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000fe4000)=0x0) getpgrp(0xffffffffffffffff) getpgrp(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000105000-0xc)={0x0, 0x0, 0x0}, &(0x7f000017b000-0x4)=0xc) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f000033b000)=0x0) r2 = fcntl$getown(r1, 0x9) r3 = getpgrp(r2) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000421000-0x4)=r3) sendmsg$nl_xfrm(r0, &(0x7f0000b3e000)={&(0x7f0000ae3000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00006d4000-0x10)={&(0x7f00002ee000-0x2fc)=@delsa={0x28, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, {@in=@loopback=0x7f000001, 0xffffffffffffffff, 0x0, 0x0}, []}, 0x28}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/14 21:59:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r2 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f000058c000)=""/4096) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r3, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:12 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200000, 0x0) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0xff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) waitid(0x0, 0x0, &(0x7f0000ed1000-0xb)={0x0, 0x0, 0x0, 0x0}, 0x0, &(0x7f0000f0d000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000d26000-0x8)=0x7) lstat(&(0x7f0000336000-0x8)='./file0\x00', &(0x7f0000585000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) signalfd4(r0, &(0x7f0000a63000)={0x4}, 0x8, 0x80000) chown(&(0x7f0000120000)='./file0\x00', r1, r2) 2018/01/14 21:59:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000d52000-0xe8)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0xac, 0x14, 0x0, 0xaa}, 0x0, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10000035a) r1 = syz_open_dev$dmmidi(&(0x7f000086e000)='/dev/dmmidi#\x00', 0x4, 0x0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000f07000-0x4)=0x1f) 2018/01/14 21:59:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) listen(r0, 0x40000000000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) r2 = syz_open_dev$mouse(&(0x7f00005b9000)='/dev/input/mouse#\x00', 0x9, 0x284841) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f0000d6e000-0x4)=0x0) writev(r1, &(0x7f00000cd000)=[{&(0x7f00003c1000-0x1)='\a', 0x1}], 0x1) accept(r0, 0x0, &(0x7f00002b2000)=0xfffffffffffffe89) 2018/01/14 21:59:12 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @rand_addr=0xa0ca, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x6, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @dev={0xac, 0x14, 0x0, 0x13}}, 0x4}, @in={0x2, 0x1, @dev={0xac, 0x14, 0x0, 0xe}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x4c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000d0d000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'sha512_mb\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) bind$alg(r1, &(0x7f0000751000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000a67000-0xb)='/dev/audio\x00', 0x0, 0x0) r3 = syz_open_dev$dspn(&(0x7f000089e000)='/dev/dsp#\x00', 0x7f, 0x400) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00009d6000-0x8)=0x7) ioctl$DRM_IOCTL_AUTH_MAGIC(r3, 0x40046411, &(0x7f0000437000-0x4)=0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f000057b000)={0xa0, {{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x118) sendto$ipx(r2, &(0x7f00003b7000)="4e9dbd501ad2058d63374bf3b6e73cb6c1576e298cd50dbbacb25904724ecf9e2a5d0fd6de8dd4ff3e7fef733fcd5fcb12b30db376529799e772c090f4b766f2d9b16fd3d2a0c1fe3c7686bbef2844f9e507eed40556a38c29c6b03d1c42711617065dda06bcfa609154ef55538f24e65a9271527837eb587fb2e9570fa60f1096da64843df78a69366eca33aaf8c8e91034c9680a478f0441b12a2e5a0ba2118e49419478fbeb7893091ca4dc86b672c4c2eedec7c0b456a17c62cc885ac4655be3be82276a9909317bc83212e75787", 0xd0, 0x0, &(0x7f0000d82000-0x10)={0x4, 0x6, 0x2, "ca427db4c1c8", 0x81, 0x0}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000c63000)={r0, 0x7, 0x1, 0xc80, &(0x7f0000131000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) 2018/01/14 21:59:12 executing program 6: mmap(&(0x7f0000000000/0xdf2000)=nil, 0xdf2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000def000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_names=@generic="8fa2da378d68e771baccd3753831c040"}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000bee000)={0x0, 0x0, 0xffffffffffffff9c}) r0 = socket$inet(0x2, 0x80001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f000003b000)={@common='lo\x00', @ifru_flags=0xfffffffffffffffd}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = syz_open_dev$mice(&(0x7f00009ec000)='/dev/input/mice\x00', 0x0, 0x2000) getsockname$netlink(r2, &(0x7f0000132000-0xc)={0x0, 0x0, 0x0, 0x0}, &(0x7f00001bc000-0x4)=0xc) bind$inet(r1, &(0x7f0000dec000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000440000-0x8)=@assoc_value={0x0, 0x0}, &(0x7f0000def000)=0x8) mmap(&(0x7f0000df2000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000df2000)={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r1, &(0x7f0000de2000-0x1)="", 0x0, 0x20008045, &(0x7f0000db5000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_buf(r1, 0x6, 0xa, &(0x7f000071d000)="1f00000000", 0x5) pipe(&(0x7f0000df2000-0x8)={0x0, 0x0}) mmap(&(0x7f0000df3000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000df3000-0x230)={0x0, {{0x2, 0x1, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x0, []}, 0x98) mmap(&(0x7f0000df4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000df4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000df5000-0x1000)="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", 0x1000, 0x3fff, 0x0, 0x0) 2018/01/14 21:59:12 executing program 4: r0 = getpgid(0xffffffffffffffff) sched_getattr(r0, &(0x7f0000ab5000-0x30)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x30, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f00008ec000-0x8)={r1, 0x7fffffff}) write(r1, &(0x7f0000b06000-0xee)="260000005e0009fff10000f83a0000ffffff080001009f0003000000000c3d5b1ee9fb4b35ea", 0x26) r2 = syz_open_dev$tun(&(0x7f0000e31000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f000010b000)={0x0, 0x0}, &(0x7f0000698000)=0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000764000)={@generic="5f62c3e1a1ffd08c7018aab49b1107c2", @ifru_mtu=0x1}) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f000068f000)={@common='tunl0\x00', @ifru_flags=0x100}) recvfrom(r1, &(0x7f0000f3f000)=""/4096, 0x1000, 0x0, 0x0, 0x0) [ 72.932290] binder: 12258:12270 BC_ACQUIRE_DONE node 141 has no pending acquire request [ 72.940566] binder: 12258:12270 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 72.957557] binder: 12282 RLIMIT_NICE not set [ 72.964905] binder: 12258:12270 BC_FREE_BUFFER u0000000000000000 no match [ 72.998612] binder: 12258:12270 BC_INCREFS_DONE node 141 has no pending increfs request [ 73.006907] binder: 12258:12270 Release 1 refcount change on invalid ref 2 ret -22 [ 73.014476] device lo entered promiscuous mode [ 73.025466] binder: 12258:12270 unknown command 0 [ 73.031424] binder: 12258:12270 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00005c4000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00007f7000)={0x1, 0x0, [{0x40000002, 0x0, 0x0}]}) 2018/01/14 21:59:12 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00005af000-0xa)='net/kcm\x00\b\x00') r1 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r0, &(0x7f0000302000-0x8)=0x0, 0xba3) r2 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f00000bc000/0x1000)=nil, 0x1000, 0x4, 0x8813, r2, 0x0) 2018/01/14 21:59:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r2 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f000058c000)=""/4096) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r3, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000590000-0xf)='/dev/sequencer\x00', 0x40, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00002b6000-0xec)=""/236) pipe2(&(0x7f00006c5000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$eventfd(r2, &(0x7f00003d7000)=0x0, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000075c000-0x5)={@common='vcan0\x00', @ifru_addrs={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000b50000)=""/71) fcntl$setflags(r1, 0x2, 0x1) signalfd(r2, &(0x7f0000e22000-0x8)={0x581}, 0x8) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) arch_prctl(0x1007, &(0x7f0000b94000)="1af53c48bf61ba9966e30ccdb99d3d9e782176e23d4b5a5a0016375b5f4970edf601c5a80394099e5b9b64e7a5446bf021fd9cfa38ab7a08d110d28ed6fe0bff") ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00001fb000)=""/231) write(r2, &(0x7f0000486000)="bb", 0x1) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000b0000)=0x5, 0x4) 2018/01/14 21:59:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) 2018/01/14 21:59:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f0000a06000)={0x0, 0x0}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000322000)={0x0}, 0x8, 0x0) write(r0, &(0x7f0000d07000)="b82e2a47bec8278c14e3f18fd4524ce40f94483f2d9e51588f850d42128c85a0d44110383ea359ac1cdc2b382216c3c41b3c49d4bd33c6", 0x37) r1 = syz_open_dev$mouse(&(0x7f0000697000)='/dev/input/mouse#\x00', 0x4, 0x12000) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000345000)='(.\x00') 2018/01/14 21:59:12 executing program 4: mmap(&(0x7f0000ee5000/0x2000)=nil, 0x2000, 0x5, 0x2aeb4800bb21a972, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000ee5000)={{0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, {0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000ee6000)={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, {0xa, 0xffffffffffffffff, 0x0, @loopback={0x0, 0x1}, 0x0}, 0xf97c, [0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x3, 0x0]}, 0x5c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000ee5000)={r0}) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000ee6000-0x4)=0x0, &(0x7f0000ee6000-0x4)=0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000000)={r1, r0, 0x6, 0x7fffffff, &(0x7f0000000000)="6aca93c979861c5baa57784c6d58a1ac44873443c4dca1bff68d76693846e5dd7572d42f0e212a9481ff419ed93c39cb4b76208f5c89eb8008aa64ed2e5678ee8bb549e6eb566dbdd6df6d4be23e2bea04d3b1ab61700abf492e844cc11155fe06b8ba1552f71969585a0533b5f7f28a6cbd544d6ebc75aacd6fcaf109ccc9bc", 0xd898, 0x4, 0x3, 0x1, 0xba, 0x48980, 0x0, "9c6c171276bd65da56d2ac2170ee31246a7bbc34933e949a0f23de29074a75733f2c8ba052b608236bcf6ffe791fb3e54330b2f4ea31a8661e8d3011c9dcbe82123d27d8167ae99e561f6f743f57c6c0a78646670c36d233f7cda60f513995bde4ea81509fd983eb4e3e3c5ddeec7b5ea4dfe8d098f94395d68d2b9db6f0c8c14aec78048f85f3ed32d5ba23e78c24509ecfea46f498c3dbd9e78671c2e7a4cac5d2cfd8a228f8db4791a3809efd68653cce756862569ea7ef0badceb6fee5c423b74d91b4733e"}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000001000-0x1c)={0xa, 0x3, 0x1ffc000000000, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8}, 0x1c) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$bt_rfcomm(r1, &(0x7f0000003000)={0x1f, {0x8000010001, 0x10001, 0x3, 0xa2e, 0x6, 0x0}, 0x200000000000005}, 0xfffffffffffffdb9) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000002000-0x4)=0x0, 0x4) sendto$packet(r2, &(0x7f0000ee6000-0x1c)="e67a5889b48f1c1941779cf82f378749d8d32bc5cbf5d372494ddbe8", 0x1c, 0x8014, 0x0, 0x0) 2018/01/14 21:59:12 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000001000)='./file0\x00', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$ax25(r0, &(0x7f0000002000-0x10)={0x3, {"5fa2b195f470d8"}, 0x10009}, 0x10) mmap(&(0x7f0000004000/0xffb000)=nil, 0xffb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003e6000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000fbf000)=0x5, 0x7, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000e2e000-0x10)={0xc5, &(0x7f00001b4000)="be78b0a306209a78cad174c76e350f6540786fdcfc1550f694fb801e021550cf679b732e4040366d71a8b1e6b807693d2f90a4f943981cc8f2c7fdad2d5bcb2019aca7e43da9fef8564ee3f937dc8e51084b9a487b6f89f314181a2f9492e57cb82479d10db3ff3cf096fd031a1055ba2a96ec56b63eaec60dd67e29de5579f5e398b465e0f1238fc936df957d19a174b84a1464de7213b1b5a3a4461f2916f209545e43cee0db17fe78ca7b2bced9b11eef6e0a44d17ad87139e48a74a00e1d19ec2f51c0"}) mbind(&(0x7f00009aa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000c20000-0x8)=0x0, 0x5, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000d83000+0x723)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000740000-0x8)=0x0) ioprio_set$pid(0x1, r1, 0x10000) syz_open_dev$vcsn(&(0x7f0000876000-0xa)='/dev/vcs#\x00', 0x0, 0x9a001) fcntl$setown(r0, 0x8, r1) connect$netlink(r0, &(0x7f000001d000)=@kern={0x10, 0x0, 0x0, 0x400000}, 0xc) 2018/01/14 21:59:12 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = pkey_alloc(0x0, 0x1) pkey_free(r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000001000-0xbc)={0xfedc, 0x1, 'client0\x00', 0xffffffff80000000, "6a69808b70f35a9e", "6bb6e925d6c15095ebc34a9611a9712ec167b0527436a7329ce1e9e662abcc46", 0x9, 0xfff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000003000)='/dev/sequencer2\x00', 0x0, 0x0) r3 = gettid() sched_getscheduler(r3) ioctl$KDGKBLED(r2, 0x40045109, &(0x7f0000a73000)=0x0) 2018/01/14 21:59:12 executing program 6: r0 = socket$inet6(0xa, 0x6, 0xfffffffffffffffb) mmap(&(0x7f0000fe6000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fadvise64(r0, 0x0, 0x2, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000fe7000-0x1b)={@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000fe6000)={{{{0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0xffff, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x3}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x1, 0x0, 0x5, "9cd867484f146a9a46cce5b9d981317cecbd7a8b0b162c3c335bb13c68cd762e13b86af21ede7b36c8044acaea665aed4ebc117b1124ed9614eb5ca05f4c6fd653f2881ec8c0d5b05f79c78a120a65f4"}, 0x160) 2018/01/14 21:59:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = open(&(0x7f0000b92000-0x7)='./file0\x00', 0x68042, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1000001, &(0x7f00007a3000-0x4)=0x200fe, 0x4) fallocate(r1, 0x0, 0xffff, 0x9) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00003d6000-0xa0)={0x0, @in={{0x2, 0x2, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x0, 0x0, 0x4, 0x7}, &(0x7f00002f5000)=0xa0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f00001e1000-0x40)={0x7, 0x7, 0x2, 0x7, "972ecbd95397b393df98f8807c716b854b24b7f389ae0482b0f280e527eb41fd83766ec90f11da779ee8db8f", 0x7fffffff}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000478000)={r2, 0x2}, 0x8) sendto$inet(r0, &(0x7f000038d000-0x69)="", 0x0, 0x0, &(0x7f0000822000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendfile(r0, r1, &(0x7f0000af5000)=0x0, 0x10001) recvfrom$inet(r0, &(0x7f0000201000)=""/186, 0xba, 0x40002021, &(0x7f00002f4000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 73.146970] binder_alloc: binder_alloc_mmap_handler: 12298 200bc000-200bd000 already mapped failed -16 [ 73.173944] binder: 12300:12318 BC_ACQUIRE_DONE node 142 has no pending acquire request [ 73.182288] binder: 12300:12318 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 73.202569] binder: 12300:12318 BC_FREE_BUFFER u0000000000000000 no match [ 73.211866] binder: 12328 RLIMIT_NICE not set [ 73.217374] binder: 12300:12318 BC_INCREFS_DONE node 142 has no pending increfs request [ 73.225741] binder: 12300:12318 Release 1 refcount change on invalid ref 2 ret -22 [ 73.228136] binder: BINDER_SET_CONTEXT_MGR already set [ 73.228145] binder: 12325:12329 ioctl 40046207 0 returned -16 [ 73.247120] binder: 12300:12318 unknown command 0 [ 73.252291] binder: 12300:12318 ioctl c0306201 208fdfd0 returned -22 [ 73.266818] binder: send failed reply for transaction 143 to 12325:12329 [ 73.269686] binder: 12325:12331 BC_ACQUIRE_DONE u0000000000000000 no match [ 73.269698] binder: 12325:12331 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 73.269710] binder: 12325:12331 BC_FREE_BUFFER u0000000000000000 no match [ 73.269722] binder: 12325:12331 BC_INCREFS_DONE u0000000000000000 no match 2018/01/14 21:59:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000787000)='/dev/rtc\x00', 0x101000, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000a2c000)=""/98) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000bcb000)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000327000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r2, &(0x7f0000414000-0x58)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x8, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x0, 0x0, ""}}}}, 0x3a) 2018/01/14 21:59:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f0000f54000)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000cc5000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000702000)='/selinux/relabel\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000d3d000)={0x0, @in6={{0xa, 0x3, 0x8, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x200}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8, 0x4, 0x100000001, 0x5, 0x0}, &(0x7f0000ad8000-0x4)=0xa0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000506000-0x8)={r2, 0xac}, &(0x7f00007d4000)=0x8) r3 = memfd_create(&(0x7f0000210000-0x40)='queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r4 = fcntl$getown(r0, 0x9) waitid(0x3, r4, &(0x7f0000d79000)={0x0, 0x0, 0x0, 0x0}, 0x9, &(0x7f0000bfc000-0x90)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r5, r3) write$sndseq(r3, &(0x7f0000e70000-0x30)=[{0x1f, 0x0, 0x0, 0x3fd, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @note={0x0, 0x0, 0x0, 0x0, 0x0}}], 0x30) r6 = memfd_create(&(0x7f0000210000-0x40)='queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r7 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) dup2(r7, r6) write$sndseq(r6, &(0x7f0000e70000-0x30)=[{0x1f, 0x0, 0x0, 0x3fd, @time={0x0, 0x0}, {0x0, 0x0}, {0xd0, 0x0}, @note={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}}], 0x30) 2018/01/14 21:59:12 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/selinux/context\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x0, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}], 0x50) accept4$inet6(r0, 0x0, &(0x7f0000000000)=0x0, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000000)={{0x23c0f8d9, 0x2}, 'port0\x00', 0x2, 0x10, 0xfe2e, 0x3f, 0x100000001, 0x1, 0xff, 0x0, 0x0, 0x7ff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000)=0x0, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001000)={0x0, 0x2, 0x6, 0xffffffff80000001}, &(0x7f0000001000-0x4)=0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmsg$netrom(r0, &(0x7f0000003000-0x38)={&(0x7f0000002000)=@full={{0x3, {"8729adbb13ae12"}, 0x7}, [{"53e1bc5b02a6b2"}, {"73488fb9d38349"}, {"03010ac6ef91a3"}, {"8967ceece73f03"}, {"d6aff2d61b7ee4"}, {"d697e411d1e80d"}, {"c321f6fa3e6d4d"}, {"bff24470671b86"}]}, 0x48, &(0x7f0000001000-0x70)=[{&(0x7f0000001000)="", 0x0}, {&(0x7f0000003000-0xa7)="dfb88fa8060b76d6f46181a90d17ec43b468b0b455141d1965c1a7eaf76182721e6529509debff253b713202237fff8f44b65d5d89f6d7fdf2005bf2e5fb3aaaf2425d93258c6e533c915e5296f2af430dece32878686bec3ab1762cdef13f9de70f6d238befbd870f6a0b3195c91708ce16d7cee18019d0829904ac109e3d78f17cdc4e823c619fcd68c02873c4d4a58930b55db990152ef0df1766b52d7e302dbf25e8298f97", 0xa7}, {&(0x7f0000003000-0xdb)="a40f15bc09a4dd80fe58ac1a10711e7e0272b47fde8ecd38bef8391e925cc9caa37d144b78ef8ec336231d47e9474e03c21856f0a885ec8a10edc89063bfa14594de52db5864d2bb14a4d2eb67b775ad591700274904ee797fa0e08ce9978cb3a19eb496eefad61727db5257ffe8ceaa366916fe13630d3499291a84d4e8a37679c1d8bf54ca65679b721a73351ba03956f65f3e11c2e135d7d25e067aab05803d2504363ffca767ad67d2cbad2b4fd0107246023a1486611c0a57a7fb9c291a19d5699dbaf2e550d605d04782351307ebaada5d3a1838de99b51f", 0xdb}, {&(0x7f0000001000)="7401dfc6ed823d6c0724aab2838070aa0b93371fa9cec754459a431ba91eb53b089249a9fd9e03b08a880ee813ef820adcee0e94eb35a3b22a1312ed97d7104d87cbf55582c788c0948be2595d8c2ebd678f14bd3886ac4dd1660a6d81ff963904da78d40a34d842fbbde3c64feae94e00a78d650ce9747367d2f7ab3f4973d0afffcacbb395783708387363d66dad0cb7a2a87b857f9dc2cc3364b925ebd00ead0e2e4dd4c355e44f180e562601bf3a5b8b92c1cc11b8092bbd6915b1a3697c7e7fb65283822afdbc97f226", 0xcc}, {&(0x7f0000001000-0x5d)="8dcce4efcea4ae72233dc62d2fd45ce7fdb6fb6bebc9dc753a23bd68a387207b9b488703e343823bd52b0bb8b5383686eb3a1f139775c2d471b211762a6559c8aeacd1084b1662f87578e744e1d2069cbad6450b8df640bdb0867ecc20", 0x5d}, {&(0x7f0000003000-0x30)="b96ac28fa047101e531f2117d3f3f7ddabc303853244e395879c8421ecc543e7d25f150bfdf52bb0c21db5a2823c349e", 0x30}, {&(0x7f0000000000)="e794fb4c98654b67830aa694301d01d192951f728ec68e5e15649609ea6a72cb13ec081d5ec77642647ea85a81ce362f415705c09f38508accee216a1443d3e5ea7a4d0174ee922603ffd6d3c14d66d118a97116c8465319ae67eb259fcdcdaefda8d0cc2650c2947ea6005671fba99d9c24dbbe728d87301124bbdec6e6cc89c57b3caffbd90bc6fefbc95e791f62068fbef8a60c1901e2545a9c51684bdef55548602759ee8f2de6294ce1f5cd4d9432772cbd7caba37ecde5ebcdb0b2c3c9cb41261293b2e379e3bd115992ee134a1558821af53b646996e5ea239ebb", 0xde}], 0x7, &(0x7f0000002000)=[{0x50, 0x10f, 0x3, "52bab208fb68f822cc8b31690fcb1d2fa7a8ae3032c7c035ba5bdd6cb542280021023e1902d36edeb02c084498e1a78ae07aa90ff498a37c6daa4f"}, {0xf0, 0x10e, 0x5, "2dab4f4138ba016fe24262c2119bb492ee5da0df9e8926a71761153aef57fc4d97aef36c9ed80a0bac044824b4dff85cff1647fba61373d5991234a0a6a9e81940f600c25e4a5a95cea904e210fffa496b7e4529d98caa3b7c88b3ffee7fa0287f09871af44cd08cb45d6f7a14e6e5fa6546748d741627ad0a72769b5e6bfa0491d66c0ee439acce0bf389e486595d06a30e08304bb1d4ba725e25e707916e55e7f09ae02fde28fc236e634d6ed2c125a216b7ffb11de8ce6621f66ec07c47478c9dadf8fccd64c96aa6750eed6430dd6d5531a6ce9d947c7f71c492a78eec90"}], 0x140, 0x0}, 0x10060) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000001000-0x8c)={r1, @in={{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$sndseq(&(0x7f000032d000-0xd)='/dev/snd/seq\x00', 0x0, 0x64001) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000880000)={"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"}) 2018/01/14 21:59:12 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd6000-0x8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000027000-0x8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)="") mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000fa0000-0x8)='./file0\x00', &(0x7f000069f000-0x6)='ramfs\x00', 0x100000, &(0x7f0000ec2000-0x2)="") mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f00008c0000)='./file0\x00', &(0x7f00003b7000-0x8)='cgroup2\x00', 0x1003, 0x0) r0 = accept4$inet(0xffffffffffffff9c, &(0x7f00003d6000)={0x0, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000a9b000-0x4)=0x10, 0x80000) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000cb6000)={@dev={0xac, 0x14, 0x0, 0xc}, @local={0xac, 0x14, 0x0, 0xaa}}, 0x8) mount(&(0x7f0000e1a000)='./file0\x00', &(0x7f00006a0000-0x1)='.', &(0x7f0000eb9000-0x5)='cifs\x00', 0x2000, &(0x7f0000b21000)="") 2018/01/14 21:59:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000058a000-0x5)='stat\x00') close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000268000-0xb)='projid_map\x00') sendfile(r1, r0, &(0x7f0000318000-0x8)=0x0, 0x400000ff) 2018/01/14 21:59:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe62000)=nil, 0xe62000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) r1 = semget(0x1, 0x3, 0x60) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000132000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000260000)=0xc) fcntl$lock(r0, 0x6, &(0x7f000029b000-0x20)={0x0, 0xf6e56c89238313a, 0x40, 0x4, r2}) getresuid(&(0x7f0000611000)=0x0, &(0x7f0000ce1000-0x4)=0x0, &(0x7f000085a000)=0x0) getgroups(0x3, &(0x7f0000988000-0xc)=[0x0, 0x0, 0xffffffffffffffff]) stat(&(0x7f0000720000)='./file0\x00', &(0x7f000022e000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000d45000)='./file0\x00', &(0x7f0000dc8000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000038000-0x58)={{0x7ff, r3, r4, r5, r6, 0xa, 0x4, 0x0, 0x0, 0x0}, 0x8, 0x7, 0x80, 0x0, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x40000048f, &(0x7f000078a000-0x2c)="8735d96127345deced18b86c09bb2e83c68174708d6db960782f2ea948ddbcc1de84de4442ed43fdb02bf212", 0x2c) 2018/01/14 21:59:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 73.269735] binder: 12325:12331 Release 1 refcount change on invalid ref 2 ret -22 [ 73.269742] binder: 12325:12331 unknown command 0 [ 73.269753] binder: 12325:12331 ioctl c0306201 208fdfd0 returned -22 [ 73.270972] binder: 12331 RLIMIT_NICE not set [ 73.361332] device eql entered promiscuous mode 2018/01/14 21:59:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x20000000102, 0x7ffffc) semtimedop(r0, &(0x7f000001e000-0x2a)=[{0x0, 0xfffffffffffffffb, 0x0}], 0x1, &(0x7f0000020000-0x10)={0x1fff, 0x0}) semtimedop(r0, &(0x7f000097f000-0x1e)=[{0x0, 0x5, 0x1800}], 0x1, &(0x7f0000034000)={0x0, 0x0}) semop(r0, &(0x7f0000cf0000-0x36)=[{0x0, 0x7ffe, 0x1800}], 0x1) 2018/01/14 21:59:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000d52000-0xe8)={{{@in=@remote={0xac, 0x14, 0x0, 0xbb}, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {{@in=@local={0xac, 0x14, 0x0, 0xaa}, 0x0, 0xfff}, 0x0, @in=@broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0xe8) r1 = socket(0xf, 0x3, 0x2) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000054e000-0x11)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x3) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00005ff000-0x4)=0xfffffffffffffff8, 0x4) dup3(r1, r0, 0x0) [ 73.386894] binder: BINDER_SET_CONTEXT_MGR already set [ 73.386952] binder: 12343:12347 ioctl 40046207 0 returned -16 2018/01/14 21:59:12 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) waitid(0x0, r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}, 0x80000003, &(0x7f0000000000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$intptr(0x3d, 0x1f) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/create\x00', 0x2, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f000049b000)=0x0) tkill(r2, 0x2d) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r1, 0x28, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16}}, 0x10) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002000)={r3, 0x401, 0x18}, 0xc) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xe, &(0x7f0000000000)={0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1c) [ 73.427832] binder: 12342:12356 BC_ACQUIRE_DONE node 144 has no pending acquire request [ 73.436300] binder: 12342:12356 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 73.436632] binder: 12343:12359 BC_ACQUIRE_DONE u0000000000000000 no match [ 73.436643] binder: 12343:12359 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 73.436656] binder: 12343:12359 BC_FREE_BUFFER u0000000000000000 no match [ 73.436669] binder: 12343:12359 BC_INCREFS_DONE u0000000000000000 no match [ 73.436683] binder: 12343:12359 Release 1 refcount change on invalid ref 2 ret -22 [ 73.436691] binder: 12343:12359 unknown command 0 [ 73.436702] binder: 12343:12359 ioctl c0306201 208fdfd0 returned -22 [ 73.437992] binder: 12359 RLIMIT_NICE not set [ 73.441831] QAT: Invalid ioctl [ 73.457767] QAT: Invalid ioctl [ 73.507415] binder: 12342:12356 BC_FREE_BUFFER u0000000000000000 no match [ 73.514722] binder: 12342:12356 BC_INCREFS_DONE node 144 has no pending increfs request 2018/01/14 21:59:12 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setrlimit(0x7, &(0x7f000046f000-0x10)={0x0, 0x0}) r0 = syz_open_dev$dspn(&(0x7f00006ed000+0xe6)='/dev/dsp#\x00', 0x0, 0x10001) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000e9a000-0x76)=""/118) signalfd(0xffffffffffffffff, &(0x7f0000849000-0x8)={0x0}, 0x8) munlockall() 2018/01/14 21:59:12 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:12 executing program 7: mmap(&(0x7f0000000000/0x1a000)=nil, 0x1a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) mmap(&(0x7f000001a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f000001a000)={0x0, 0x2c, &(0x7f0000019000)=[@in6={0xa, 0x0, 0x8, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x4a30}, @in={0x2, 0x2, @rand_addr=0x8001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000012000-0x4)=0x10) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000002000)={&(0x7f0000012000-0x1c)={0x1c, 0x12, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, [@nested={0x8, 0x1d, []}]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/14 21:59:12 executing program 3: r0 = msgget(0x2, 0x400) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) geteuid() msgctl$MSG_STAT(r0, 0xb, &(0x7f00004f9000)=""/4096) 2018/01/14 21:59:12 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000ae0000-0x14)={0x0, 0x0, 0x27, 0x0, 0x2, 0x8}, &(0x7f0000001000-0x4)=0x14) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001000-0x98)={r1, @in={{0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x8}, 0xffffffdd) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f000071d000)='/selinux/validatetrans\x00', 0x1, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x2) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000dae000-0x4)=0x2) mlock(&(0x7f0000000000/0x1000)=nil, 0x1000) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x40000, &(0x7f0000000000)="c316ce1f42e065cdf544ab6d509e244d276b812a80b33fd88b362beba473af8ba7b3d612a2dbabe1bd98d5a6f3461e3da9dc31caa8974212854fea23172a08a811651bce901825057fca179647f6447cd03579ddac57eda83c9d9fa6ce25779c5c950fc8f33d22a1c1f2ae98963830211e0b7dad7eae2e882350390a05b06b72dc7aca6b6218f53efc162f7baf437e8d5cfe855d69867e04fa4257621baa85ca1a37eace11ee0b8cb35fddc70f6345e26a68612d7ec657746c6a82753d092019584a253799ee5a3705987b4d60b9a9a0f147f4868ad1b64ac1b01f9458d17b6ace3c", &(0x7f0000000000)=0x0, &(0x7f0000001000)=0x0, &(0x7f0000001000)="b1a628d3dce4ff2c0e4f6f034e2711e09c8f88b4982d4b810729c6523c8ecef41569d68b561413b36727decbb969aa2842fcdee57348575771eada2b2f21515b0147490c20c516cb6213683bc58847266d9fa29649889623edf698542ed533e292597bc11541cb95fc5928c0b492d263e62a748115b4524e8d8401093822e870114300a3bc8c0ef97391dab2c055f9897295fb5eb6387c274df81f7a2a6d450e2c9eb2649c64bab105b628d63aee0ef823f6") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000882000/0x1000)=nil) shmat(r3, &(0x7f0000fda000/0x1000)=nil, 0xfffeffff7fffffff) [ 73.522961] binder: 12342:12356 Release 1 refcount change on invalid ref 2 ret -22 [ 73.530884] binder: 12342:12356 unknown command 0 [ 73.535827] binder: 12342:12356 ioctl c0306201 208fdfd0 returned -22 [ 73.542900] binder: release 12343:12347 transaction 145 out, still active [ 73.542906] binder: undelivered TRANSACTION_COMPLETE [ 73.564538] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/14 21:59:12 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00004ff000)='/dev/qat_adf_ctl\x00', 0x18380, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00005eb000-0x8)={0x0, 0x40}, &(0x7f00006ab000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00008f8000-0xa0)={r1, @in={{0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1000, 0x8, 0x5, 0x6, 0xc}, 0xa0) r2 = socket(0x10, 0x4000000002, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000681000)='/dev/sequencer\x00', 0x202, 0x0) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f00001a7000-0x8)={0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r2, &(0x7f0000882000-0x80)=[{&(0x7f0000d82000)=""/4096, 0x1000}, {&(0x7f00000d0000-0x21)=""/33, 0x21}, {&(0x7f0000a99000-0xdf)=""/223, 0xdf}, {&(0x7f0000234000-0x13)=""/19, 0x13}, {&(0x7f0000078000-0x1)=""/1, 0x1}, {&(0x7f00005da000-0xc0)=""/192, 0xc0}, {&(0x7f000002a000)=""/64, 0x40}, {&(0x7f00006b8000)=""/59, 0x3b}], 0x8, 0x0) write(r2, &(0x7f0000545000)="260000001200470006f6caff001a0014072206ff02ffff0000000000aa07373f05005d0008ff", 0x26) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000540000)={r0, r0, 0x10000, 0x7, &(0x7f00006d0000)="348c137116514a167e585da56bc7591e99646193b55b7327ac6ce8edc1f54e8942e0a572811c97c60fc03cc1a02820e1d5afe66babb2ce31a582ef3c2d3892f105ed533ff98ba4ee0a8a1f1b79", 0x1, 0x3, 0x1, 0x7, 0x5, 0xeacb, 0x3, "38baf3c6b130bf8278e2a1f82c975773e275a1d5f9bfae2b2dfa62a7aaa8081c9c3b5958d8c3d87f62b1b7c1f6246afade51e4d4e860cb02aafe18afeda69a53d198bb4e"}) 2018/01/14 21:59:12 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000623000/0x1000)=nil, 0x1000) r0 = syz_open_dev$tun(&(0x7f000008d000-0xd)='/dev/net/tun\x00', 0x0, 0x4040) r1 = getuid() ioctl$TUNSETOWNER(r0, 0x400454cc, &(0x7f0000531000-0x4)=r1) 2018/01/14 21:59:12 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:12 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000d15000)='keyring\x00', &(0x7f0000fe0000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0x0) add_key(&(0x7f0000580000)='dns_resolver\x00', &(0x7f0000e79000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, &(0x7f00005f3000-0x2)='#\x00', 0x2, r0) 2018/01/14 21:59:12 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000de8000-0x15)='/proc/self/net/pfkey\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000e87000-0x20)={0x1, 0x8, 0x1, 0x5, 0x4, 0x36b, 0x3, 0x8001, 0x0}, &(0x7f0000251000)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000b38000-0x20)={0xfffffffefffffffd, 0x1000, 0x200, 0x3, 0x0, 0x7, 0x7fffffff, 0x4, r1}, &(0x7f0000e0e000)=0x20) syz_emit_ethernet(0x2e, &(0x7f000066d000-0x46)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x20, 0xffffffffffffffff, 0x8e8, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[@rr={0x7, 0x3, 0xe4, []}]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [], ""}}}}}}, &(0x7f0000754000)={0x0, 0x1, [0xaf2]}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000809000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast1=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000dbf000)=0xe8) ioprio_get$uid(0x3, r3) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00006b9000-0x8)={0x0, 0x0}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f00001f7000)=0x7) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000504000)=0x3, 0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00006eb000)=r2, 0x4) 2018/01/14 21:59:12 executing program 6: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000006000-0x56)={@random="cd3997030f00", @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x18, 0x40000000003a, 0x3ff, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@mld={0x89, 0x0, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}}}}}}}, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000000c000-0xf)='/dev/sequencer\x00', 0x200800, 0x0) accept4$alg(r0, 0x0, 0x0, 0xf4be460c99281e41) [ 73.578052] binder: 12372:12374 ioctl 40046207 0 returned -16 [ 73.589881] binder_alloc: 12342: binder_alloc_buf, no vma [ 73.589908] binder: 12372:12384 transaction failed 29189/-3, size 0-0 line 2957 2018/01/14 21:59:13 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) init_module(&(0x7f0000110000)='@\x00', 0x2, &(0x7f0000000000)='\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000e3f000-0xb)='/dev/adsp#\x00', 0x0, 0x222100) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00001bc000)=0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c4d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f000051e000)={@common='eql\x00', @ifru_flags=0x1001}) mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) write$tun(r2, &(0x7f000016e000-0x4c9)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "0011a3", 0x30, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@time_exceed={0x3, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "f5a688", 0x0, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @broadcast=0xffffffff}, [], ""}}}}}, 0x62) 2018/01/14 21:59:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000597000)={{0x4, 0x3, 0x8001, 0x80000000, "2a0e67541f81853213c7356647509f1d2e9dd10e90ec0ad7840b8200a328125d1255ab3cda0d0d516c67dc50", 0xffffffff}, 0x81, [0x8001, 0x851, 0x9382, 0x4, 0x7, 0x1, 0xffffffff00000000, 0xa8f5, 0x6, 0x1000, 0x80000001, 0x100000000, 0xac99, 0x3, 0x0, 0xbf, 0x6, 0x10001, 0x2, 0x100, 0x8569, 0x8, 0x4, 0x0, 0xfffffffffffffffa, 0xbe, 0x1, 0x2, 0x367e1bc2, 0x200, 0x6, 0x1, 0x100000001, 0x1f, 0x1, 0x9, 0x800, 0x6, 0x7, 0x10000, 0x3ff, 0x94, 0x5, 0x8, 0x8, 0x8, 0x3, 0xfff, 0x7, 0x80000000, 0x7, 0x8, 0x5, 0x0, 0xfffffffffffffff9, 0x7fff, 0xfffffffffffffc57, 0x40000000401, 0x80000000, 0x5, 0x3, 0x2, 0x0, 0x10001, 0x0, 0x6, 0x200000000000000, 0x9, 0x4, 0x7, 0x80000001, 0x8, 0x3f, 0x80000000, 0x7fffffff, 0x1, 0x1, 0x3e7e, 0x80, 0x4, 0x9, 0x6, 0x10001, 0x7f, 0x3c5f, 0x3, 0x1a0e1978, 0x6, 0x0, 0xffffffffffffffca, 0x80, 0x3, 0xe, 0x2, 0x20, 0x9, 0x4, 0x7, 0x80000001, 0x6, 0x2, 0x400, 0x4, 0x3, 0x7fff, 0x9, 0x200, 0x3afd, 0x80, 0x5, 0xffffffff, 0x1000, 0x222, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x1, 0x100000001, 0x3, 0x3, 0x100000000, 0x7, 0xfff, 0x5c03, 0x0, 0x6], {0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) syz_emit_ethernet(0x4a, &(0x7f0000d66000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "1607cd", 0x14, 0x2b, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @tcp={{0xffffffffffffffff, 0xffffffffffffffff, 0x42424242, 0x42424242, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x0, {[]}}, {""}}}}}}}, &(0x7f0000619000)={0x0, 0x1, [0x8db]}) recvfrom$ax25(r0, &(0x7f00001ea000-0xf3)=""/243, 0xf3, 0x0, &(0x7f000012b000)={0x3, {"3b96b776f700d6"}, 0x3}, 0x10) r1 = fcntl$getown(r0, 0x9) epoll_create1(0x80000) getegid() perf_event_open(&(0x7f0000325000-0x78)={0x4, 0x78, 0x3, 0x7, 0x400, 0x9, 0x0, 0xffffffffffffffe7, 0x59, 0x4, 0xe0000000000000, 0x400, 0x3, 0xffffffff, 0x2824945d, 0x5, 0x92, 0x4, 0x9, 0x80000001, 0x6, 0x2, 0x3, 0x7, 0xffffffffffffa56f, 0x5, 0x1f, 0x3, 0x4, 0x8000, 0x2, 0x7fff, 0x4, 0x3, 0x5, 0xffffffffffff8000, 0x1, 0x9, 0x0, 0x9, 0x2, @perf_config_ext={0x800, 0x81}, 0x4200, 0x0, 0x81, 0x0, 0x1000, 0x3, 0xac4, 0x0}, r1, 0x3, r0, 0x1) 2018/01/14 21:59:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f000014e000)='/dev/dsp\x00', 0x0, 0x0) mmap$binder(&(0x7f000015d000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0) close(r0) 2018/01/14 21:59:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000ffe000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) epoll_wait(r1, &(0x7f0000e0a000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}], 0x4, 0x8) process_vm_readv(r0, &(0x7f0000305000-0xa0)=[{&(0x7f000089d000)=""/165, 0xa5}, {&(0x7f0000a95000)=""/50, 0x32}, {&(0x7f0000195000+0xea4)=""/69, 0x45}, {&(0x7f0000f4e000)=""/12, 0xc}, {&(0x7f0000211000-0x57)=""/87, 0x57}, {&(0x7f00004b0000-0xbb)=""/187, 0xbb}, {&(0x7f0000b12000)=""/0, 0x0}, {&(0x7f0000b2f000-0x7d)=""/125, 0x7d}, {&(0x7f000047b000-0x73)=""/115, 0x73}], 0x9, &(0x7f0000d10000)=[{&(0x7f00007c4000-0x89)=""/137, 0x89}], 0x1, 0x0) [ 73.591311] binder: send failed reply for transaction 145, target dead [ 73.608243] binder: 12372:12384 BC_ACQUIRE_DONE u0000000000000000 no match [ 73.608254] binder: 12372:12384 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, &(0x7f0000e65000)="", 0x0, 0x20000815, &(0x7f0000254000)={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000b90000)="", 0x200, 0x2000800f, 0x0, 0x0) acct(&(0x7f0000e1c000)='./file0\x00') [ 73.608267] binder: 12372:12384 BC_FREE_BUFFER u0000000000000000 no match [ 73.608279] binder: 12372:12384 BC_INCREFS_DONE u0000000000000000 no match [ 73.608292] binder: 12372:12384 Release 1 refcount change on invalid ref 2 ret -22 [ 73.608300] binder: 12372:12384 unknown command 0 [ 73.608310] binder: 12372:12384 ioctl c0306201 208fdfd0 returned -22 [ 73.609636] binder: 12384 RLIMIT_NICE not set [ 73.625079] Empty option to dns_resolver key [ 73.643383] Empty option to dns_resolver key [ 73.671939] binder: 12389:12404 BC_ACQUIRE_DONE node 147 has no pending acquire request [ 73.671956] binder: 12389:12404 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 73.671971] binder: 12389:12404 BC_FREE_BUFFER u0000000000000000 no match [ 73.671983] binder: 12389:12404 BC_INCREFS_DONE node 147 has no pending increfs request [ 73.672007] binder: 12389:12404 Release 1 refcount change on invalid ref 2 ret -22 [ 73.672104] binder: 12389:12404 unknown command 0 [ 73.672115] binder: 12389:12404 ioctl c0306201 208fdfd0 returned -22 [ 73.780573] binder: 12419:12426 BC_ACQUIRE_DONE node 148 has no pending acquire request [ 73.780589] binder: 12419:12426 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00007df000)={0xaa, 0x33, 0x0}) read(r0, &(0x7f0000000000)=""/32, 0x20) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000bf0000/0x2000)=nil, 0x2000}, 0x1, 0x0}) clone(0x0, &(0x7f0000002000-0xc9)="", &(0x7f0000002000-0x4)=0x0, &(0x7f0000001000)=0x0, &(0x7f0000001000)="") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000eb5000-0xb)='/dev/mixer\x00', 0x101800, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000cc7000-0xc)={0x2, [0x0, 0x0]}, &(0x7f0000f64000)=0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00008b9000)={r1, 0x0, 0xc9, 0x30, &(0x7f0000eff000)="f89f5fddea41b72fc515098b82ff9156896aa09b8fd580af8a2ef60b854be7dc1779ca6714961005b19d5780951d61586d2276c4666ded8901488913eeb0bde6c9ef7e75f06a170d0443ee20b644e23a1010d4c2362a87e51224aa1d4147375371997c77c86ff2442d656cd59100316d717bd4233741c44adde63404ea8518fbce6e93fd9a1e8ae56cf9b60eee5f8b6c47232b067c8fe350cab653129418bfe784e828873fcfcfb193f9f6027c0548583c051afad34d2570b79fdc95104cfaa58c20d10cf50874ffd3", &(0x7f0000510000-0x30)=""/48, 0xe0, 0x0}, 0x28) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00003a9000-0x20)={{&(0x7f00008a8000/0x1000)=nil, 0x1000}, 0x3, 0x0}) 2018/01/14 21:59:13 executing program 3: mmap(&(0x7f0000000000/0xef4000)=nil, 0xef4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x802, 0x0) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000ee8000)=0x3f, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000eee000-0x4)=0x7fe, 0x4) sendto$inet(r0, &(0x7f0000dd0000-0x2)="", 0x0, 0x0, &(0x7f0000515000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_opts(r0, 0x0, 0x12, &(0x7f0000b11000-0x1)="ad", 0x1) mmap(&(0x7f0000ef4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000604000-0x82)="b78ec72a189c3c910c0e8f6fae3b4599b070bf2f7ad8ecafcd48b92ba5f39447a096382926f4ff31aa495b80d2a398a54e44636961f5126b703849384bcdedea7eb6b1f6a5130d7aaf5485a3e42b402faab875b19f468360a0a54d18c31ffa984de8043ccd41f03fd47a6b41ada4aa0e9adacaf228808e5dd7be3c03c9109537c345", 0x82, 0x8081, &(0x7f0000ef4000)={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eec000)=[], 0x0, &(0x7f0000001000-0x51)=""/0, 0x0, 0x0}, 0x41002106) 2018/01/14 21:59:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000001f000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha3-224-generic,cbc-camellia-asm)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x3) 2018/01/14 21:59:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000473000-0x15)='/proc/self/net/pfkey\x00', 0x0, 0x0) userfaultfd(0x80000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eca000)='/dev/sequencer2\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, r0, 0x0) 2018/01/14 21:59:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r2 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f000058c000)=""/4096) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r3, &(0x7f0000797000-0x8)=0x3, 0xffffffffffffffff, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/01/14 21:59:13 executing program 4: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000000f000)='/dev/snd/controlC#\x00', 0x2000000000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000005000)=0x6) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000012000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) syz_open_dev$amidi(&(0x7f0000011000)='/dev/amidi#\x00', 0x2, 0x0) 2018/01/14 21:59:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f000051c000)='net/ipv6_route\x00') syz_open_procfs(0x0, &(0x7f0000799000-0x1)='coredump_filter\x00') 2018/01/14 21:59:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 73.780601] binder: 12419:12426 BC_FREE_BUFFER u0000000000000000 no match [ 73.780612] binder: 12419:12426 BC_INCREFS_DONE node 148 has no pending increfs request [ 73.780629] binder: 12419:12426 Release 1 refcount change on invalid ref 2 ret -22 [ 73.780637] binder: 12419:12426 unknown command 0 [ 73.780647] binder: 12419:12426 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:13 executing program 7: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80005, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000003000-0x6)={0x0, 0x7f}, &(0x7f0000003000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000879000)=@assoc_value={r1, 0x0}, &(0x7f0000000000)=0x8) 2018/01/14 21:59:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000396000)='./file0\x00', &(0x7f0000c23000)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f000019a000-0x1f)="1f00000002031900000007000000068100ed3b8509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000cae000-0x10)=[{&(0x7f000052f000-0x1f)="1f000000020319000000070000000680e2ed3b85090002000000000302fe58", 0x1f}], 0x1) 2018/01/14 21:59:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000780000)={@common='ip6tnl0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000765000)='/dev/rfkill\x00', 0x400, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000aed000-0x4)=0x0) r4 = getuid() setfsuid(r4) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000729000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$can_raw(r1, &(0x7f0000132000)={&(0x7f000017e000)={0x1d, r2, 0x0, 0x0}, 0x10, &(0x7f00000ee000-0x10)={&(0x7f000055d000-0x10)=@can={{0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, "490fa41237eec60c"}, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) r5 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000881000)='/selinux/access\x00', 0x2, 0x0) readlinkat(r5, &(0x7f0000abb000)='./file0\x00', &(0x7f0000fb2000-0xe8)=""/232, 0xe8) clock_gettime(0x0, &(0x7f000016a000)={0x0, 0x0}) sendmsg$can_bcm(r5, &(0x7f00008c3000-0x38)={&(0x7f0000ba1000-0x10)={0x1d, r2, 0x0, 0x0}, 0x10, &(0x7f0000167000)={&(0x7f00003c1000-0x48)={0x4, 0x2, 0x7, {0x77359400, 0x0}, {r6, r7/1000+30000}, {0x1, 0xa58f0000000000, 0x4, 0x3}, 0x1, @can={{0x0, 0x7, 0xa08a, 0x3}, 0x6, 0x3, 0x0, 0x0, "2cde7a8883a82ea7"}}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = dup(r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000335000-0x28)={r8, 0x0, 0xfa, 0x23, &(0x7f0000cce000-0xfa)="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", &(0x7f00005c6000)=""/35, 0x9, 0x8c97}, 0x28) [ 73.925837] binder: 12435:12440 BC_ACQUIRE_DONE u0000000000000000 no match [ 73.953370] binder: 12435:12440 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 73.954399] binder: 12431:12450 BC_ACQUIRE_DONE node 149 has no pending acquire request [ 73.954412] binder: 12431:12450 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 73.954423] binder: 12431:12450 BC_FREE_BUFFER u0000000000000000 no match [ 73.954434] binder: 12431:12450 BC_INCREFS_DONE node 149 has no pending increfs request [ 73.954448] binder: 12431:12450 Release 1 refcount change on invalid ref 2 ret -22 [ 73.954455] binder: 12431:12450 unknown command 0 [ 73.954463] binder: 12431:12450 ioctl c0306201 208fdfd0 returned -22 [ 74.012785] binder: 12457 RLIMIT_NICE not set 2018/01/14 21:59:13 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x40, 0x10800) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, r0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000cee000-0x4e)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [], {@ipv4={0x800, {{0x7, 0x4, 0x0, 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[@cipso={0x86, 0x8, 0x0, [{0x0, 0x2, ""}]}]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [], ""}}}}}}, &(0x7f0000754000)={0x200, 0x0, []}) 2018/01/14 21:59:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r2 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f000058c000)=""/4096) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r3, &(0x7f0000797000-0x8)=0x3, 0xffffffffffffffff, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/01/14 21:59:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000e03000)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x1e) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000019000-0x6)='ramfs\x00', 0x1000010, &(0x7f000000a000)="") r1 = open$dir(&(0x7f0000534000)='./file0/bus\x00', 0x8803c, 0x0) sendfile(r0, r1, 0x0, 0x4f90dc34) 2018/01/14 21:59:13 executing program 3: mmap(&(0x7f0000000000/0xb0d000)=nil, 0xb0d000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000b0a000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000b0d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_extract_tcp_res$synack(&(0x7f0000b0d000)={0x0, 0x0}, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000b0e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000b0e000)={0xaa, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00005cf000)={0x1, 0x0, [{0x10100080000047f, 0x0, 0x0}]}) 2018/01/14 21:59:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000e77000)='/dev/ptmx\x00', 0x100, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f000081c000-0x11)='/selinux/relabel\x00', 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000bbd000)={&(0x7f0000c77000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000125000-0x10)={&(0x7f0000598000-0x9c)={0x9c, 0x2d, 0x200, 0x0, 0x2, {0x15, 0x0, 0x0}, [@typed={0x88, 0x6a, @binary="e5de5b610b1e7762cfe2c2f859e3b44b071fb594a84533ee3236590b91d68eca36ef51fbbef599fbfd5444f4c82099962517a5ea13b3fa096eb4e0f8c9bbb6f2b7ebe7a5fe12b44c2cf55ad63a09bf06f686a4f1bdbe1d279a8a0a4b3bdefb4f1c9e290e642cb12d34fe48a66698d49c422913dcc86269c06f6ac225c3911141"}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000001) ioctl$TCFLSH(r0, 0x40045436, 0x2) 2018/01/14 21:59:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x100000000c) writev(r0, &(0x7f00008ed000-0x10)=[{&(0x7f00000fd000)="1f00000002021900000007000000088100fd3b8509000b00000100ff3f0009", 0x1f}], 0x1) 2018/01/14 21:59:13 executing program 4: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/fscreate\x00') mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000001000-0x4)=0x6) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000015000-0x78)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x0) mmap(&(0x7f00000d1000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) [ 74.023518] binder: 12435:12440 BC_FREE_BUFFER u0000000000000000 no match [ 74.034365] binder: 12435:12440 BC_INCREFS_DONE u0000000000000000 no match [ 74.042431] binder: 12435:12440 Release 1 refcount change on invalid ref 2 ret -22 [ 74.050727] binder: 12435:12440 unknown command 0 [ 74.056411] binder: 12435:12440 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:13 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mq_open(&(0x7f000018a000)="26406d696d655f747970656370757365747070703076626f786e657430757365723e656d308e00", 0x41, 0x10, &(0x7f0000001000-0x40)={0x3ff, 0x80000001, 0x8, 0x0, 0xffff, 0x9643, 0x7b0c, 0x7}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000a95000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x0}]}) r0 = syz_open_dev$sg(&(0x7f00006cb000)='/dev/sg#\x00', 0xfffffffffffffffe, 0x100) mknodat(r0, &(0x7f0000ab6000)='./file0\x00', 0x8001, 0x3) 2018/01/14 21:59:13 executing program 4: mmap(&(0x7f0000000000/0xfe1000)=nil, 0xfe1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000fe1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000fe2000-0x4)='net\x00') mmap(&(0x7f0000fe1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000fe2000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000761000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f000062a000-0x8)={r1, r2}) r3 = socket$inet_sctp(0x2, 0x800000000001, 0x84) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000fe0000-0x4)=0x0, 0x4) 2018/01/14 21:59:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrandom(&(0x7f00008dc000-0x99)=""/153, 0xfea7, 0x0) pipe(&(0x7f000073d000-0x8)={0x0, 0x0}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000f9f000)='/dev/mixer\x00', 0x241, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) syz_open_dev$mouse(&(0x7f0000f2c000)='/dev/input/mouse#\x00', 0x0, 0x10000) exit(0x0) 2018/01/14 21:59:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) waitid(0x2, r2, &(0x7f0000590000)={0x0, 0x0, 0x0, 0x0}, 0x4, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsync(r3) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000012000)='/dev/rtc\x00', 0x101100, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000842000)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000cda000-0x4)=0x8c) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00005be000)={r5, 0x2, 0x30, 0x1, 0x7}, &(0x7f0000178000)=0x18) dup3(r1, r3, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000f90000)='/dev/kvm\x00', 0x2402, 0x0) [ 74.127108] binder: 12474:12478 BC_ACQUIRE_DONE u0000000000000000 no match [ 74.152385] binder: 12467:12486 BC_ACQUIRE_DONE node 150 has no pending acquire request [ 74.152399] binder: 12467:12486 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 74.152410] binder: 12467:12486 BC_FREE_BUFFER u0000000000000000 no match [ 74.152420] binder: 12467:12486 BC_INCREFS_DONE node 150 has no pending increfs request [ 74.152434] binder: 12467:12486 Release 1 refcount change on invalid ref 2 ret -22 [ 74.152440] binder: 12467:12486 unknown command 0 [ 74.152449] binder: 12467:12486 ioctl c0306201 208fdfd0 returned -22 [ 74.159906] binder: 12489 RLIMIT_NICE not set [ 74.191868] kauditd_printk_skb: 45 callbacks suppressed [ 74.191877] audit: type=1326 audit(1515967153.540:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=12488 comm="syz-executor0" exe="/root/syz-executor0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x452cf9 code=0x0 [ 74.289650] binder: 12474:12478 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 74.298825] binder: 12474:12478 BC_FREE_BUFFER u0000000000000000 no match [ 74.306205] binder: 12474:12478 BC_INCREFS_DONE u0000000000000000 no match [ 74.313521] binder: 12474:12478 Release 1 refcount change on invalid ref 2 ret -22 [ 74.321991] binder: 12474:12478 unknown command 0 [ 74.327155] binder: 12474:12478 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:13 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r2 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f000058c000)=""/4096) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r3, &(0x7f0000797000-0x8)=0x3, 0xffffffffffffffff, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/01/14 21:59:13 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x7, 0xffffffffffffffff, 0x1}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000925000)={0x6, 0x80}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000d9a000-0x9)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000d38000-0x5c)={0x0, 0x1, {0x1, 0x1, 0x5, 0x3, 0x400000000000000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000f5b000-0x18)={0x1, 0x0, [{0xc0000102, 0x0, 0x0}]}) 2018/01/14 21:59:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2b, &(0x7f0000a03000-0x66)={@random="0577fc590762", @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x88, 0x0, @dev={0xac, 0x14, 0x0, 0x0}, @dev={0xac, 0x14, 0xffffffffffffffff, 0x0}, {[]}}, @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x1, 0x2, [], "e1"}}}}}}, &(0x7f0000e09000-0x10)={0x8000000000, 0x1, [0x63c]}) socketpair(0x0, 0x80007, 0x10000, &(0x7f0000503000)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000008d000)={{{@in=@empty=0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @local={0x0, 0x0, 0xffffffffffffffff, 0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@multicast2=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000cce000-0x4)=0xe8) r2 = getegid() lchown(&(0x7f0000131000)='./file0\x00', r1, r2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00003db000+0x16e)={0x5ae, 0x2, 0x100000000, 0x8373, 0x0}, &(0x7f000015b000)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f000032e000-0x8)={r3, 0x5}, &(0x7f0000da6000)=0x8) ioctl$KVM_RUN(r0, 0xae80, 0x0) open$dir(&(0x7f000037c000-0x8)='./file0\x00', 0x0, 0x10) 2018/01/14 21:59:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$adsp(&(0x7f00009a1000)='/dev/adsp#\x00', 0xb2d7, 0x0) accept4$packet(r1, &(0x7f00002b0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000608000)=0x14, 0x0) bind$can_raw(r0, &(0x7f0000a4f000)={0x1d, r2, 0x0, 0x0}, 0x10) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000648000-0x8)={0x0, 0x0}) r4 = semget(0x3, 0x4, 0x80) semop(r4, &(0x7f000052d000-0x30)=[{0x3, 0x7, 0x1000}, {0x4, 0x5, 0x1800}, {0x7, 0x7, 0x1800}, {0x2, 0x2, 0x800}, {0x7, 0x6, 0x1000}, {0x2, 0x34, 0x800}, {0x4, 0x8, 0x800}, {0x3, 0x7e, 0x1000}], 0x8) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f000063c000-0x90)={0x879, {{0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0xfffffcab) 2018/01/14 21:59:13 executing program 6: clock_gettime(0x4, &(0x7f0000168000-0x10)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000001000-0x11)='/selinux/relabel\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000001000-0x8)={0x0, 0x6c5380000}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000e54000)={r1, 0x4}, &(0x7f0000000000)=0x8) 2018/01/14 21:59:13 executing program 7: mmap(&(0x7f0000000000/0x26f000)=nil, 0x26f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f000026f000-0x8)={0x0, 0x0}) shutdown(r0, 0x0) fchdir(r0) 2018/01/14 21:59:13 executing program 4: mmap(&(0x7f0000001000/0x25000)=nil, 0x25000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000020000)={0xaa, 0x0, 0x0}) pread64(r0, &(0x7f000001e000-0xa5)=""/165, 0xa5, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f000001a000-0x80)={[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000022000)={{&(0x7f0000007000/0x2000)=nil, 0x2000}, 0x1, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004000)={{&(0x7f0000009000/0x2000)=nil, 0x2000}, 0x1, 0x0}) 2018/01/14 21:59:13 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) bind(r0, &(0x7f0000fc8000-0x10)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0x0}, [0x0, 0x0]}, 0x10) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000e58000-0x8)={@multicast2=0x0, @multicast2=0x0}, &(0x7f0000244000)=0x8) 2018/01/14 21:59:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000afe000-0x58)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00001f7000-0x4c)={0xffffffffb318ecdc, 0x8, 0x10000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r3, 0x0, 0x0, 0x938d) sendfile(r1, r3, &(0x7f00009e0000)=0x0, 0xc) 2018/01/14 21:59:13 executing program 6: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000c7a000-0x15)='/proc/self/net/pfkey\x00', 0x400100, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000db0000)={{0x7002, 0x10f000, 0xb, 0x200, 0x3eae, 0x9, 0x80000001, 0x400, 0x180000000000000, 0xff, 0x384d, 0x1000, 0x0}, {0x1d000, 0x4000, 0xd, 0x1f, 0xfffffffffffffffe, 0x10000, 0x3, 0x6, 0x4, 0xc563, 0x401, 0x7, 0x0}, {0x115000, 0x7000, 0x8, 0x4000000000000000, 0x0, 0x4, 0x9, 0x9, 0xffffffffffff7fff, 0x8, 0x6, 0x5, 0x0}, {0x6000, 0x2f25a917c35666df, 0xa, 0x4d0, 0xed, 0x99, 0x4, 0xff, 0x5, 0x7, 0x0, 0x5, 0x0}, {0x4000, 0x1000, 0xf, 0x3, 0x7ff, 0x6, 0x7fffffff, 0x7fff, 0x6f, 0x8, 0x9, 0xfffffffffffffffd, 0x0}, {0xd000, 0x3004, 0x0, 0x9, 0x58ea, 0x3f, 0x9, 0x1, 0x7, 0x9, 0x3f, 0x1, 0x0}, {0x0, 0x0, 0xf, 0x5, 0x2, 0x2, 0xda, 0xffffffffffff8001, 0x7, 0x3, 0x0, 0x9, 0x0}, {0x4001, 0x107001, 0xe, 0x4, 0x4f26, 0xffff, 0x5, 0x8, 0xffffffffffff0000, 0x4, 0x7, 0x5, 0x0}, {0x1000, 0x2, [0x0, 0x0, 0x0]}, {0x10000, 0x0, [0x0, 0x0, 0x0]}, 0x20000000, 0x0, 0x10000, 0x20000, 0xb, 0x800, 0x100000, [0x8, 0x6, 0x0, 0x26]}) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000cc1000)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000d9a000-0x4)='tls\x00', 0x4) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) signalfd4(r2, &(0x7f0000a53000-0x8)={0x8}, 0x8, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000bc5000)={0x4, 0x108000, 0x0}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x3, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], 0x0}]}) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f00002c0000)={0x7d, 0x0, [0xcd, 0x7, 0x80000001, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = semget(0x0, 0x2, 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000f4f000)={0x0, 0x0, 0x0}, &(0x7f0000961000)=0xc) ptrace$peekuser(0x3, r4, 0x20) mmap(&(0x7f00005f0000/0x800000)=nil, 0x800000, 0x3, 0x10, r0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) semctl$IPC_STAT(r3, 0x0, 0x2, &(0x7f0000cd0000-0x41)=""/65) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000642000-0x8)=0x0, &(0x7f0000987000-0x4)=0x8) syz_open_dev$random(&(0x7f00003af000-0xc)='/dev/random\x00', 0x0, 0x101) [ 74.383334] binder: 12511:12516 BC_ACQUIRE_DONE u0000000000000000 no match [ 74.394778] binder: 12511:12516 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 74.418638] binder: 12508:12529 BC_ACQUIRE_DONE node 151 has no pending acquire request 2018/01/14 21:59:13 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d7000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000a5f000)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r2, &(0x7f000062d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "631306", 0x0, "f85e75"}, "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"}}}, 0x41f) ioctl$FIONREAD(r0, 0x541b, &(0x7f000013e000)=0x0) 2018/01/14 21:59:13 executing program 4: r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f000006a000-0x11)='/selinux/context\x00', 0x2, 0x0) shutdown(r0, 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat2(r0, &(0x7f0000d8b000-0x8)='./file0\x00', r0, &(0x7f0000ea4000)='./file0\x00', 0x4) mkdirat(r1, &(0x7f0000efa000-0x8)='./file0\x00', 0x1) r2 = mq_open(&(0x7f0000000000)='*GPL[vmnet1@vmnet1{-vmnet@vboxnet0!vboxnet1+M\x00', 0x0, 0x0, &(0x7f0000665000-0x40)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4, 0x1}) pivot_root(&(0x7f00009eb000-0x8)='./file0\x00', &(0x7f0000c18000)='./file0\x00') r3 = add_key$keyring(&(0x7f0000f1d000-0x8)='keyring\x00', &(0x7f000064d000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000454000)='pkcs7_test\x00', &(0x7f0000f2f000)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, r3) mq_getsetattr(r2, &(0x7f0000fb2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ded000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpgid(0xffffffffffffffff) waitid(0x2, r4, 0x0, 0x80000000, &(0x7f00003fd000+0x2ea)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/14 21:59:13 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000c25000-0x8)='./file0\x00', 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000a84000)='/dev/vcs#\x00', 0x2a8, 0x2) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000902000)={0x0, 0x0}, &(0x7f0000aeb000)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00003a9000-0x98)={r1, @in6={{0xa, 0x3, 0x4, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x1ff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80000000000000, 0x7f}, 0x98) chroot(&(0x7f00004fa000)='./file0\x00') symlink(&(0x7f0000281000)='..', &(0x7f0000110000)='./file0/file0\x00') umount2(&(0x7f00000e0000)='//file0/file0/file0\x00', 0x0) [ 74.427153] binder: 12508:12529 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 74.437866] binder: 12534 RLIMIT_NICE not set [ 74.447318] binder: 12511:12516 BC_FREE_BUFFER u0000000000000000 no match [ 74.447335] binder: 12511:12516 BC_INCREFS_DONE u0000000000000000 no match [ 74.447351] binder: 12511:12516 Release 1 refcount change on invalid ref 2 ret -22 [ 74.447360] binder: 12511:12516 unknown command 0 [ 74.447372] binder: 12511:12516 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:13 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:13 executing program 3: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000004000-0xa)='/dev/vcs#\x00', 0xeb, 0x40000) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000003000-0x18)={0x0, 0x2, 0x4, &(0x7f0000000000)=0x0}) r1 = syz_open_procfs(0x0, &(0x7f0000b77000-0x5)='attr\x00') mknodat(r1, &(0x7f0000001000-0x8)='./file1\x00', 0x0, 0x0) 2018/01/14 21:59:13 executing program 0: semop(0x0, &(0x7f0000003000-0x40)=[{0x3, 0x0, 0x40000000001800}], 0x1) 2018/01/14 21:59:13 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000f6c000-0xa)="656d3070726f63bd00", 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00005ed000)={0x0, 0x0, 0x0}, &(0x7f00009b7000)=0xc) capset(&(0x7f0000a23000)={0x20080522, r1}, &(0x7f00008e1000)={0x3, 0x8001, 0x5, 0x2, 0x100, 0x5}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000d0d000)=""/18) ftruncate(r0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000382000-0x8)={0x0, 0x9}, &(0x7f00006f7000)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000b0a000)={r2, @in6={{0xa, 0x1, 0x3ff, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xffffffffffffff14}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x6, 0xfffffffffffff0a3, 0x2, 0x1, 0x1}, 0xa0) 2018/01/14 21:59:13 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000438000)=@common='vcan0\x00', 0x10) bind$alg(r0, &(0x7f0000418000)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002000-0xc6)="ad56b6c5820faeb995298992ea54c7be", 0x10) pipe2(&(0x7f0000d6b000)={0x0, 0x0}, 0x84800) r2 = syz_open_dev$vcsn(&(0x7f0000304000-0xa)='/dev/vcs#\x00', 0x100000000, 0x222081) bpf$OBJ_GET_PROG(0x7, &(0x7f0000f4f000)={&(0x7f0000de6000)='./file0\x00', 0x0, 0x10}, 0x10) recvfrom$ipx(r2, &(0x7f000065d000-0x1000)=""/4096, 0x1000, 0x1, &(0x7f0000b57000)={0x4, 0x1, 0x4, "aebc65db56da", 0x0, 0x0}, 0x10) 2018/01/14 21:59:13 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000112000)=0x0) setsockopt$inet_dccp_int(r0, 0x21, 0xb, &(0x7f00006ba000-0x4)=0x8, 0x4) accept4$llc(r0, &(0x7f0000e1f000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, &(0x7f0000b04000-0x4)=0x10, 0x800) r1 = syz_open_dev$mice(&(0x7f00009ab000)='/dev/input/mice\x00', 0x0, 0x84100) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000834000)=0x0) mq_notify(r1, &(0x7f00007b0000)={0x0, 0x3d, 0x1, @tid=r2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write(r0, &(0x7f0000041000)="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", 0xfc) accept4$packet(r0, &(0x7f0000368000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f00004ca000)=0x28a, 0x800) sendmsg$can_bcm(r0, &(0x7f000093d000)={&(0x7f0000ac4000)={0x1d, r3, 0x0, 0x0}, 0x10, &(0x7f00006a1000-0x10)={&(0x7f0000ff0000)={0x7, 0x840, 0x3, {0x0, 0x0}, {0x0, 0x7530}, {0x2, 0x2, 0x200000000000000, 0x0}, 0x1, @can={{0x0, 0x144, 0x7, 0x6f}, 0x8, 0x2, 0x0, 0x0, "23d5e1b0bb72c69e"}}, 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x4000) dup(r0) 2018/01/14 21:59:13 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000011000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000012000)={0x0, 0x810b, 0x20, 0x1, 0x0}, &(0x7f0000002000-0x4)=0x18) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000002000)='./file0\x00', 0x102, 0x8) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000012000-0xc)={r2, 0x771b2293, 0x30}, &(0x7f0000001000)=0xc) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$sndseq(r4, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @tick=0x0, {0x0, 0x0}, {0x56, 0x0}, @connect={{0x0, 0x0}, {0x3, 0x0}}}], 0x30) setns(r4, 0x0) sendfile(r4, r4, 0x0, 0x3f) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000004000)={{{@in=@multicast1=0x0, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @empty=0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000001000-0x4)=0xe8) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg(r3, &(0x7f0000004000)=[{{&(0x7f0000004000)=@ipx={0x4, 0x892, 0xfffffffffffffffd, "35e6ea9f0a65", 0x8000, 0x0}, 0x10, &(0x7f0000004000)=[{&(0x7f0000004000)="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", 0xfa}], 0x1, &(0x7f0000003000-0x138)=[{0x48, 0x109, 0x81, "549b71db960a7edeb74859423f36c402a977f6d3a5868c63442fc0b1725556719c5771bdc250273aeab1f20ba9eb8dc6af06bc5ca2cf602c"}, {0xf0, 0x105, 0xa19e, "974a9536db2fc74a94cb24b9b66c0f436a2dd707c78db6b597923fc7f398a7722fe67ca3b9647d569b5452e97e070b92836c1f618c335d5fc6247369776b2d4e48b9ba3d282adfc7074418144af55d9520279976a277d41d789b28cc4ac02a1a5500caa411088b16948fcf2af31dfd242a3ef1dec22927248be388961ac4266618cbcf90a70208ebbc9f8abd3dc7b42b412516188b31c08bfa6fbad8c9cf9ccbaa8654ce141100cdea5ffa73d8576bb96afe0970004c49c4bc9da78b4e45a27c23804f4e3e72ada096c518fd242320e42b3e0fe9a89fb63986b02ac7704579fe"}], 0x138, 0x448c0}, 0x10001}, {{&(0x7f0000001000)=@ethernet={0x306, @random="ad357b978658", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f0000004000)=[{&(0x7f0000000000)="88f729df731cb901314302f86a3a", 0xe}, {&(0x7f0000003000-0x2a)="444bbce7d8a9542c301f7a2492411677af1003a44d2b3d0e45355167cf1abe1148f1aaa673548f33014a", 0x2a}, {&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000004000)="d81dab7978502f7745536ce0ec31b0708feca1c924a95d35835d7993983ffec134f16eece03567ebe3befeb80289b45a565815eede8023314ee94a75de3229aa7eb0e4a3752181904edd861ae1629adc15a437fdb1a714325a7864c71449fe27d6927df93f11bbd3dfeb51daa99b1992c35d27e41ccd0ab1c04ce51f6ac0e43c0368b3516e141ec36d4a89b927f6dddbcb373bca5ec9df59fb0f5cf897b8e6c7409316bc140476efae08f794fdfbf8076ee46ddd68f59cd3fd1b647d695a000f5fcc55ebde74acbe40cec2d274444b2d3d055b97db97b13d40a107fa4c201c979c7509c85d2f5e5a6450", 0xea}, {&(0x7f0000014000-0xa2)="74cfefe9dededbb5fec7c52a66d93fc2aa5d68b5232720a4cd0ca219ee04fb0ceedd560672945504a16e9bd5b01e3e21f641273f45858b821816b744d95255c5c2ac9bbad52e62d443ceb264dd6fdc881cdd83f9874a9b31f9deb08315e29cf3a490cd3fcc5a6fbd775c50e5038975afa0344d10a7058f8e34ef05366c4d295c55810d7ee228fdfdcd35869e11b3c1827ac897a3e256386b2d827b545dcf45b70779", 0xa2}, {&(0x7f0000013000-0xf)="f57157caa00d15bcb74f4413cfa6f0", 0xf}, {&(0x7f0000013000-0x98)="7f1f3207641a4a9a1b1e1f9bc62b6dff5bcce682484cd1583e03722b93b1bad6f84a2cb1cbf9455cf7f572b912b4f3b39d1300c10924ad44788b66e6f1d7789c63728f231c69b65d2c345e2607c9ca8694c6c7ecd106c998957d997fb5b44d72ba3eecb49ba0fbb7b368544480d7a8d1f5a927fab47e39db5bd6c620df0eafa6704979bf1e478ddb93f4315a09962550b271f9f224dc8c91", 0x98}, {&(0x7f0000003000)="5b6e40aa5bc3a0118e9ff6ab8dc8903729eeb664c0de7dae79b844ab9e34bdb0bcc5f0ba261f2f21efdaccafecc3b74d7fc9048c281e89727b6bc25d64e9b0f38556133c75dcd021ac91c0d75b9d7c6cc6ca3b026f618629c4cb1929faa0444edee4826fb099ccf37c10814d045b1d907f20acc81d5addf79844da2d", 0x7c}, {&(0x7f0000002000-0x1000)="48a9f6e57846a673b6750b0e24ece097d940b92f69b433ad96cb0c1335275c3dacda93f1db8d406078a3426ac0e1013371341c585664af7f727130aa4dd50fc05f8390becf5bb574a6018b1a6d7cd018cadb143ffc1368f6e796281512854f997a4539f45437b9d9d0b6f38704618016a9f39065105b94515538c2538cbf591106e655e6c8e10dba6a6c375850a2ffe335ad0355b92c5535b6c09a78996ba9252de9c3539d3483210e0e484d0ccf9260da0411b067466f6675654ec7037afc26d11eca4fd4ba4448a9cd97a0339c14d0f5339b595360caa8f72cf1d03a4eff81a8662ea6ff2fc5f51f3ad6a057f02a516759310fe4e6dc9b82a00f81f36053fccc4a091d9f675cd9c041d8fa0f7919c430092b70ad0fe988c9eee139919f413e671ff7c0a849dcd7b50fdb02848df2fd4bc2974a4120a00f0669cb0581db3a99b3906623bd71af4a9a9190cc7178420e1b2b6913071b2c0eb2aa73b6ad1e36a6111508c60af659c4eedc09e227c67802378e46fbfd79e5fe525c1dd979dbda1d791b83b4817912f17d8996e85b5589dfa6ccae41b7cfaaa650e706b70d05f0719d749ab7f05a280de91f14dff970147b1ad611be071c6e5f7ce4d4692c1b7f39d1237dd1cfaed44af96a97a8d0999f4dd94318bc73b146d5ca04567374b0f883119f8f5ff965ef6a9ea3b9ba617177ee380d270c24aea87e39cbd90b5d07adf042227f503f05d6b667318cd33941df1c01597228a711e3c89c1da6c2ab02fe6fd76d7e0841cebc7a49a0497eb5fe660b7a698e5846d20ea8f1df0a7b47d36bd67fba723016349cb191546d2722125b5b467baec101b409f325c86b834723f58ab71111e259ae8ee284bdb998a38eb610e7ca44717a3ea3ef8ffaef3f0a840425dcca8021883ed95ea195c6debb7a0f4c519674d91931f88563ad33e4be6a15e963368b7d9c6d4351a7db017333de1eba4db2b396cb58510fa412342664490a8fc054cb65f6c1f63f156f6bd9cbad31282d62898e2d64ff2a83bbbd23672aaba5342e2ae19e816cb041025da71674932e3015f4488c4f9aa52a381c52260a97a4d7fc60c441a7cfb68c8218e6daf06788f454d3e797ae6b4b1cb6f88f4d3668b13bcca947e2ec5a8c9533bdd95ec0d3f4a373c6d2680b77b4a73b7184cdb5800e72a9108d870cc72ee2c87f616c7125d330b0c95617f3d01e51a1d66187750e27a650994d295e8ec934fdc37bfd61e72594e381bef1423758d165f74a37e4cc1d2fde8bedba571659ff6bfd74cdfc814fe77414c141294ee0c76d9a48baf614c2ddb8b9324bc87b9316f47aa45c00793014cd4a9399c97cf6fb1b91af926a8430d05578bd8c241d3febadf55ceddd4b411d0650c9dfdbc0489b3349e4b4a6cbab44b0170b073f567cb41aa41878f10a5272e370e1b14827bc9848b96bad06e531a2cbcce5a3b45d84c43e1816c33a85b27be8ba68e1af064c9b61ec4501592a39ac7225a3956cf965b6b35fc929ed8342f554881cf828c12490eca7328a5743e59332d3c0375775155761f6d2f644a3b81b99b6343c308b01f9bcd3dd68196267f6b001095beeaa3750de740fa2679210811978415f0c262ae7dbbf6e7efbd0bf9213ebc28daebd80f91be4ac489df04786bd37d2bfc9ff073809e6444738d2000a59a52bf6dedadf343594bc5a15525a3e8b7abbe654bca05b8277c1c8518b314125afa34127ac00b4b5b3353e487a6bfb14c6f3fc3014ac3adbedffe0f202280c9e28d807b93a61dd6211045fc4f21d41b98a303cffc5b92ae7fe62838dda6d89fe610c4ff599cf9799bbed49ccc132e35561983df4c30197f9657c5fcec94607474eb029d7ef1cbc073ab8f33382579b3500520795967d2173d6c6f4d593b7711f35269e65d90327ed94bda61d8574fa887b5f0fd2fd9f4e74b41cdd8de97bb57c5ef7db0be7178412a2adced0a157bbca9799b7c739c6ee486ec1460b19cddc2a605b2db999bc5ea4b41e2e52ef743359e553ce046364bc6b9fb162c8ac62f0964bbfde86f7e2cfb86a52b66d0c03b1d3b0bc1ec6fd2b800a961c32693df8abd8d9a319741ef09d1efd7422b0772014c3e4a1e578807d66abffeb190b66aa4a8601814a128913183750bafc6142ea9d215f6a01559a02cf78abccfb7387d0d6fbebd5f8b893dbada48c5b63fdbeef3bd391fad6cceb95ea29494e57cefc91885b13eebd5a34afaf8c55525aab10e74d57102d8ce9208a5005ecef5ebfdec708b24108925d124a98c68c4eb8fe27069ae100e66fc521714be15842c38c4f273fc76d1e146d56c1de668a7756633f656370e43fa7e25782797057a407f8094ec9e16e2d05b12def7a4d1297afc94d0e2265475983efde2aa805d73e75723883a607191cab431abac6b23e95f60681c7fba6cb87ef6988f09ea396d36c18d403b3b2dd0caac9fe4d0af41a3984c47abe11231938b0409f06cb5d8d7c70f36f0a330086714fa3f979994b5848890a52ed678158c14a4919c11dff7b97f3cf624c44424c5548dc35ce38643406e14dcec55c50b6d12ab458ee5e246655adef2eff14ea76d32183cd9f4a9e5e8797d239f7a64e4e0f1fd1076e8b9d8c35455dd41c85752f18e7c74bfeed610a4bb450dc208092e37e0857173c3296280fdc936cb004fbee50db0994b90b07cea20e84bf327da160ab13d76eeeba43e3ea4620a946acb1210e1697fe1489b3284bd78a50a584ca3476c39b2e4e635114066d4281be2d578ce5bf5df306173dc27e5cfae6320c216729eea9e3682f7ace1b23e0813744599ea693d6810c03405164a40e6f90ce4b4b95d4e48fec9578b660449d9257e9727f47f249fcfdab807bbbce6067a36318545476b208b6e438fdba11356c4284b2403747412ce97a8851310400d21320f4fe6b1c4508b6d9ce81666f1e457a9d35f4d04649a5f60d5c998805240f43c3f88b5c4ca100334b4a897892fd7c847ea8cf9921a8e41fa5db5788968747713ee4e0316e81ca1b76982e05bf3b21b31c6b67dc369b33c4e1bff18c0c9a82a78495f5c41dc79e7fe2545625700b16478e90901d0647871e7a10963d955607f79dbcdfaef736214f1976a3860ab6515858c5d2c6d4d5e6c614efa0cc0594481b9f2e3efbabe0ce3fe7707f860bab2226fa7a407b96456ac1cfbaf2257e6345e4a728994689ea59fa7d5be5585dae5c38713c79514601d40a39a80f652a92abb4bd31cc0237d173a40282bff02d06e40eab7c35ff98916dce6822cef4c093fd68e94f3a30a0cf32ca8c105bbe4ad90386c6fd01a9341a9212abf408052beadd579eb76ea511e54f71549ad8097c752e42444a6adbff461b9a7fa3931282e4eae305d7691ae23b6a011e21734b57f8d38cb38b3a280ea350027faa9e0f538e007d04d33d91908f8992e947149f7c3b9a9792fa691747ea66e91d41dcedf8aa02bc96dda0afee0db512bb0745db9a69738d6ccdd5c77643340eb024c157d7e7d7d1ea3b43da1eeb12195d3dff7c6072454c178e7e19043f99da47b5138d0acade9fc75a26535305332505b2a4384628aaf196c936afdd88ffe3aea5a6bce3ae53e002a5b23cec7550385b4dae7ca7ab51d80c49168b602ad78be2c5011beb1439f03012a623a97bfa9d48373ef2d442ca41c288f6cd0622dc360bde74ffccb969d2d11292d58ec407288a61544da2bd42c7ca1dfe60ee0de3faf2cf56a66ae418925b989ee18d07fcffd27d5ea547ef276e96460eb05b0e25e4897053784b290cf381b2f7566e165a2ad100110e2e99089eb2f9a483db368597ee82d01ac38b7f5d901d57b5b9481eb234a6b96eea742e81646576c258d32d5bee138fdc63e2dbb2724dff4348405eaba7df2a8192f89bf33d52177a7552aff4d84fca0c16e219c9e20c539be0a3be7c2f9ddb839920126d3058782c9adb23ae359bf0398f4d1f48ae76772ee6ffd71859522cb1723407aca5d46c8712d33c6527fb1ab311f0c6f1064a45c26c2f6abefc614b0cc70d3a336b708e3c69133dc9573a5dbd551926726a5bce7fb8601c5991f037d2ad28f2db0e4a63d8d763ce40d09ac77edf4e72fff89720363262b2e57db1c084ad4ef2c30f90983772fbd56522a1711f38445810bed076af808ed9b2f4e52e9d514fb0d2f0825c2b710128051ed9063cf80cf0a656219eb5692aa8d932c78c4c8ff2cec3a8fbf856fbd4e29d56c7b83c52d5573458cd8059fec2d54c7d615ee6d5366f8e3dac750de79943de5545ee7d0f93769fc67ae4a809ffe4993bedee4647b17aabc44b249a86478ddcbd0b8ad32d9bdda84ad107663950eedfb67b778ba302da8c15833ded721b0e883d1ba904984a06f1e8e9ae8b7225ec9aa227777a25563dde7f856449010609b1740fef56d7a6ad028e91c4e1429d39427cfb72a3e6ff0bbd3ba10bac07b744cbff37ac1a800109f580c187504e279b298e7f166f2a30267e480f22806109ee94ab7fcdab99e63f22d6b5b441b36d981e9c6193456103861a98b49d7dd15cc4e49069e5fb57bb2181e58258eaf07829b3677326a9fa3bd3bbc355828dc24c259ba9896df630a8852a5c47dc865ef7d4b51bb46d002c7a44ee7a677edc6823a75fbcd0daa910e12af0413403e42441c314df67541d16183228986afebfdf8f96d31c0b07b2d2c70f0ac91b01dde3a4fac182777975485b1d410ec0935f3966acdcf24557da6e7eb54dd915c7862dd1c6b567679c3cfd333d4444006324dd2219c4e96c338e5d3f201fead22145edc082384e50928877e913dd5a06bd5fbc664c6fdd6c3501f10547b933b3cff1abded09d1d2be91f4f87adaecaed4899238a8cc324a833285ff1212dc98dd18fafcbc8eaf5f78b95b9d31aaa9264f21e55f036f058fa1ee95e8876f076673356deeeb655d5c73c932449962fcc485b2f4ebeb9fa4d2ef206f76d3acb52e38bb4ef7432a34c6a0e1b45236b94baf47e4f82345df7578cd4a545848b02bef016ff6a41d69c44eb6e2bf8c0b41b739d6074e54c47e1ede5a44d2907bf8849371f68e98868c89aa85896a5a08bb705c172fdb2c64250893bb3cc4ba08f760f8e1a91220eb2293e512c2c11dd0df2f94f23ae1f71af1cfb56e5acd073d303be28a86c23c2bc54b1d8b37b3fd7ebe56b0f6da78c7b9c3f44d924c02454925dae616df7afaa4502ea55f8d804cc925d3d71a0420db9670db9c7308169567996987978bbbe0f242fea9c23597f9ccfa1b22dd7d295b87d3cfae54d633b66d5a93c574634bb8f32b2ebcb9d04e96a45b19181133b0d22b9b58d82e2bc942d3e17f15398a957e9e84779649e1c371deb82db7564ecbdde09dd221a16a7018446424a6f3631bd1b52f958ebd136a9cb9f23b65c6ee85c2f2666052ae7c5e71a42999ecc8850ed0f00ae54148e9f88fdc283ddccc4e2b40f231252089f893e2acae7fee247d0f5867c5d05f63ce0478f8e0add8e6a82b4c96d6ffa18fb3d0e3bce4e26fd3447efe2858e834f73fcc4039c6b6ebde788fbb995d860b88a85424fe1b4006dec504b873c1fb6bd4e6c1b4196a01e42c1a75e5c873848412f6657b9196c7304f7ce13d36fce7555032db5a79abd96fc9d55ded7d40e9c1d2a8099a0bcb973d372c59317f1cb8d8d6ec54c4f4430affab6039a08fe101f20cd8e0a312479656173be1addbfd7e176a2314442dc08043aedbb34e4ac0df0ad8cfd0d584bb410ac0413b886c9ffd4aeb0cf7a1b2ed9a63c8d8b22f30babf377d430be1fbc158be9b24cd71285fb2e41bd0b0e7d490f", 0x1000}], 0x9, &(0x7f0000005000-0x3d8)=[{0x90, 0x1ff, 0x5, "b456e7b2707c6023e4acaabf85db7d32ca04527dd3e9d99c8165d2924dfbf48dd5c48b65b25b6944f3fec25642eb87711a9437c37374289c9d03838ce6a28e25d11064822f80b94f3026cd06e776726a9e178dd7c65b6a8a990cabb7a62f38d3e3b51186c589756e404464ac13bc96b3163fc2ef6a255a02d4a188ab58e63f68"}, {0x98, 0x114, 0x8b8, "28c9e07bff40305635a5b14d921adfadf3921df165aee00be96617f9d25b9d8e61ea05a3807881ea789e11f80c87bed874817cf6abcb591397a913060c9adcf9fde2e87f99cc35c3c3e42211ec3650c46b30ec71491a55a6f677917cbe9a04d14e979e25c06e90c8137d10fe51384d943b637aa353c0f7ed83b17b6252a3f744a48acb553e"}, {0x78, 0x108, 0x1, "f3ec09f512aeefe5574bd5bebb0f454d04f648a969dcea05ebf16bdc422e2b0d415cf40e73d75f2994e6178702c7249ac60769b26770dae03477d53820428d5af1b505c9be435f2593ebdcbd974ad1299ab595349abb88ad238181de84b27c7c12b2d310f0dda3f8"}, {0x30, 0x107, 0x7, "16cdc7647aad728d3f71d4dbb939398595b531c6867d500df3"}, {0xd8, 0x108, 0x61f, "3519532b957e508c74090166e1d4b754e7505fcea23faeb3217c6f701ed2d483a067b0b5d4949fac57966dd154ad12b1bd01505052e85e3b7a807465e6ef0c521966c517452087efbe7e36b00a5d3f9d2e68a9891f414394145599755036d8376c05de313e796fabeeac55508fde0ec45b5e99833b62824097cc9346839dd1e3f0033f4d93ebce650a1a81325cb5b3fd8ae620ad994d3da957503eee0a4ae70533e1c35ea288d3e664dc6dd3321bc6c193a4f4355b05ef3819769182fc8848b1a266"}, {0xd8, 0x88, 0x7fffffff, "70801312d5dcea2278b13fd2559d5a820a71dabb38c59b55365a4b632397a73b9fd8c9fdddf3468ea1fba9c020aff8005448545e43ab777d8d29148c56af0408377a6148fba2c899d6c2b43887c59819f81479435275bad076e0375e7a62aed9dfea6fb0274eff4e3feb24317f5f4d4c53ed4307f3a6019de5023de86d1292564c9dec5d02ccdd10187b247e20693c548ad6c088a706ba822bc9016c89d7166bfb02314b04aef2374a144ca4ec8e3dcf29aa43871f43bc942799d30503fc7fb7ccb8"}, {0x58, 0x13d, 0x8, "c59e6430aceb868a3e93b3b9925d0adff3b7933fc0f52ccb2b0866392870ae2686692f873c806ee224236ca331eb6d9ffd78258fc6a066b39903911965ac756b057eb21e"}], 0x3d8, 0x4}, 0x1de}, {{&(0x7f0000000000)=@ll={0x11, 0xfd, r5, 0x1, 0x1, 0x6, @random="7b1652d5670c", [0x0, 0x0]}, 0x14, &(0x7f0000013000-0x30)=[{&(0x7f0000005000-0xcb)="b70b0d11974e1d2c779030763e5a97e13d66bfd42af9245db715157e13da6a9314e69a1e06b9b3bdb4a36656a60ed305b12e615b61a4ef2d80874b100bdebe10e876a8f930dfea7ddbfaf6e8407fa398fbb98386d7f76be212bee3eae2da6844d86f96a4f26313547a68e26fc31fd18c4efec0f1504144516c08bb7d96ba52ac6e278472ef7f9be0d70904ef6a9577e4d1e8d2b930a01b788059f6173635098520ec6beabfc006aeb769ef4002cf5ea33dc6b97b950570ce1b36eecf19a90052252b4b6c56f7de43dab56d", 0xcb}, {&(0x7f0000004000)="84316350366035fdc0a0081aded713b13507701978541662ef48e6f684111c4214f15b5c71f272ac7aaa4dba40a4f773beb3fba02c55252a04661ac0e897ac11905261446be2b241c31fcccf4e085774d583f561cfd3b9440db0166ac76838ae3f8c6427481a45096cb9ab9dd00856cea87ac8381e16dd77f318a0432585221085a3461eda673d64df8ad3d5d2af2fcae6fb08c271fb29eb425f0b37d825e25bebd90c7ba72f4c81670cbf2e0daf7cd4582c0fd86c74bf64baa85c46535743fab328aab03bf0ec25b8ed7500f19be17b93c3201dce7c450706bd291fc27abd28c9dd81928392c5", 0xe7}, {&(0x7f0000011000)="", 0x0}], 0x3, &(0x7f0000004000)=[{0xc8, 0x113, 0x5, "56d737f3e13571f79347cb65f8d91f7bc4f2587c018b3e64f9c979c9055d7de1bc44f1875b7939ce9279d263240e9568a4b8fbc3258c763e9310f930aba97525ddcc49271ff0ec8d1699fbf5ee5780d158b5db158d348017c237e24f5b492a8ae90d115dbb327f2e7bec75e4a3a873af824eb3de0ce46795b6793c816eea20a7d0f5de8af37de90faa8e5d34fe50da1c93b4de6df793b5f50f0012306a916c30a6cf32bb9659e00157de1f1143b9f74185f813345aed"}, {0x1010, 0x113, 0x0, "87717d5ca23fec05b9672512682c705b22db8f256ec81faed6b57f9534dd351649f7143a5f57c5eaa80cf92abe95985f8274f697e63f718da7e4dbcab5a743deffdf4c45baa8d13ab824c6460bdcc63bc8c7b68fc20c7afb82b161dddcab084d7d23f897790c985a1000aed28a7e694ca703b18d0a31a3bed37ba1c1c74b5b221f4d0134f3a7ac2c632aa330fdcfa0714a23400663caa2fb72b2e25dd6dbb234a9eb3b4a8bf42120dd15ba630d7f32fb038566731e22c71471718601e6bd650bdfbfa651b85e11e271b9e178e2a8d4a3702233af1e8250296a76f5e010e12c7dd720c11f3957d5c2df4f1a88df67f026079f0675da669117c1a6874af2f983a6ad402d7a6459b9d16b336e93ae5da7caf2a5875ad496578d49deec4822edcfb77afc43cd8a4d52f384a865af5f1bd83dd9bbf33d26a1b6d1218132db86a96ea5da29a442194d4c31bbb494579e0dd353b76c540baa74512e810c7c0a41be0570ec03b7a2b47afaeffb744d4258706e286a4ba03d9f80cac17ad37a6cfb535bebde2a967797b568c47acca4f907e659eb2d20b53dfd72e23a38578812ceb42578a83d0575775a5ee9c6d7abbb7c519fa58c26edc789f0eeea99a61a18e0ee3c77ec8be1e0acedb541e7d59595964f611e07a2e433c7f7f222dca1658bee0886a0ed9842249cac99e92560644c61e13ae259edadf6a0501a0ca52fab64b26951fd38645b39f509e17d8da64930bea27bd1598c4d11e1f910320deca258b4562d9da97d990544e340e5ea7ddd3d223e818396e8f4d783805d5205b413f61b90c1a86f94514c1e27f995f032c4ebd2c82f67b80f8391433e1bae97f8944a85a1c85ac435c9f74a967a0b95a61ee436b11a284c7c29256ad329d0a57a09811f8d86b71f7e85ff94656a72cd73fd390194b3dd5fd5c17cb709420fa9559659a04bc559cb79666fe5cead9b5fff9e94ee95f0ee3f5fcdc782f255e19b27b58866849e1dc884be66d3214afeeb4879a5964a3ae37a9e19eb1150ab89bc88975ce1f271816b08d6d7db7323554c7fd1635a8f79d0c42e9ea5ef3ea70b9c07bd3a281316e3ce943739ebc170f8215f92b8e3e46554839ed8795bbc1e53ee14a72fed23ad5b9000dd056ff3db82ecef65840188fa9ebfdc2db788940dab5ce05eed1e4ebc59a357072e2e58433da1203cf25d0cb6c948760a2bb2af3fbb3b787db7e4566edca7e68ae8ebfc0f86e2068c43a72d6cbb004c8f9d8ea123c4ea82ee41d2056894248f4ab473bcc7ad780a29699cf8ca5f7213bcaca14b368bf4ff4f83e370398e060317dbca033afec33dad3567749e7cc51f8411e437fd2ea8db09df52f406dcf2f70181427ce25055e96a0df8d5ac096968c25de79de2c4d166b475f9f135190d1116b0a17914255561819e423add9ea22145d34abeae5cadd591a0188007220ec9a416ff4d286ee247c3398cc8b8a30abb5cc129d9ac0a9e3c7873a7205c51df657e846611fd052884a93e7f4f42b4fd7533a4fc6115b823517a538c8729e7370101c963217d320bc02dc0cf58311546514ea87f4965e86c4d85ef5cae0aef2ea3afff35942dcd6185a83b596027c768f4f76ce1fc2f1d72845e409ad5ca15399951d481ce870e41c7c0107f5389ff7c1966cd35d10fcd628c0145f95ea13af4c45fdad39ae127beb8eb224c12d7f29d8a955a19e5b2d2f7588832d72fce63b18f17cfa85f4392d5c6c040906c1c52581c1d6c556b4c88cb5f6a8a9b7e8ccc88ef6856c35110b038cfa0b509acce95eecf8dcdb9e489bd7becba22e90794a81808912ba2f7590d5c4b698036086e4781db912609542ec49698d029be2ae68128c8212fe274d8975218e10ebee103d6f0f85190d5129aba8dbfe18a30f0d0adbcd44d0e1720b76237f5b4d5e20658ed16d5a7f0080a2c193ac8fb55d3e53cffaa7e8a3a69f0418748ff0569d4c1038e8d061c0bbc53e71ce108b5965f06bbb8c846fa675fbd7e1c0cd80860c894748af26651d9688f7ae4efa0b5de5f3cad2d5684479526780eb1ee9e7e5f52b027e9b0fef0128913561c9f3b6fd078baef7ed828728057296b95d8849c306043ebcfaf412da571cc232d15c4079246f90141e1a2d090291c19c592f5c9078266deffdf449b0aa1fadd04b087538325433ad49906aa57d1f4e24dfb2821219688845ac89d1a7663a02601e9652abc753ce5613f835dd3a3eba584ad00a5c8fe6a344fe9ea2608cdc539aafd068ddbfff4fb10e806a9f20ae937ef1b0f5d24c50e8e72cf02a897ccc57d6438c996cc55ea2967b7baeba63e30790f61fd02871e8c8846ba073fb41315fae0c3c073ac893013e3f30c8b831cba580fa08b4634e5a1bbb92efbeaf7c97575a26e872c95e7f27cab8cf430b4fae6c286a51c6084379152f47ea52cc6de8b617bfe738eda0e5c9f558c60fe25a6b7e0b7a24876c931a0825873cf94547c8746de1937c536062b5924690115ae74f8db65f5d5d587e6cff87e5b4870066238ea7b51943bc26623a1d2c33f1e6fa582219bbd9ba99f96fd35d85f2e61c33d84c7daa6835bf85165eb36e9e06cc3d5a632fcc8a9a6bb29918e3e7d5cefb23ff07471e4188a41478b37bc3e5240ea5add7671799ebc9787ce89eae075d463d693a7b3dbd631472c59b7a67b602d4b8f26d3d9afa14accd5c432aa4248e0f4fb6df40fa73127c0b2040db10edc362228ecad4cf8a5cf318e8c0703db449d6095b674e5cf81167724b64f788d7b09021881d8ad97235c0e9b40df928133e438bf2700fc4ea07134697390fd7209df96b62012a97a03dd629c11ea2d5ba96bbb788ed3c2bf58ded5d0ec594a9e6e37f311faa353b622978ecb7ab54c8abadb7e3eeedcca06aab435c493fc4f03a2dd967e70e9d81ad0f38e738e0d52d1b351a882fb9fc1d62d6b2259867c0d00d1aeb8eca819a05e42b3bb3c3c349b781686dd8ff9d348c1d03becb42ad370e14eed18cf58b50667ad200da7268b1700da5ce2e437e126f9cc21e2dac2a322f08acda658b9e0a3dbfdf8c8cfb0b4804395d690ebb628bc3fda5ebf09ba25712e9f1c84e0a1f1a20f4cfa252be654f79b35e504e76196aa538681cf258a9def0a8537a749cda690f52ca5db85b3281e7a3513d6c796e510772ef0b2f9c4a7964d6cda2369383661fa502890c1f2ba4b04b2bef3abb100d66aedb06692aff4de3ae72d8875d19e744d068cc4778ba6874588660169879d11dae2b87f8047264240bb6ed664007481e6672eecc616877bf53069bc22e0ece74ca8ab01eb12e499b2d0d9f85f63b242094df69cc2dcdeefdd94262a40338633d72378b9e696619e9d8dc5fad66a5fc81e965722bbada92eb851544f51b9d3079ba370863048f84f561e49016406d29ec2a36cb8df109a0250514e0a2a1f93872736f64a2ebbe79d60b058ac361eb3f066e695875198f8a2cd1e525c745413d6ba9a8d42b163a39349db1f3fe15dd30f48101d089daf757d64dee90e3af18082662774d1353d5aa37fa880a3fc9b7095b2c2fbc5772b6feadf2d61d5905d47dd932111db95cfa3c9273bd4e6df58fef97c3a1e3ff39ab3d023d747c23fe9b76df5637db17bc60333034f8a7e824134343537f154bf5fdaa77625f32dfd65fdc322589b98605713fa85d4c61fdc358966eb290a4713d63f40431e8b51863225729ae822c6891b267c5e14883725e3863d566eb143349ce2ec58780c03e9b3356673d3cb1bb5b8fdacd196e8d3c03a91eed88e31e3153d9aca03a8c6ccfc04c7a9cb2ec5c63e5b1d9bd4ff0a3bb244bff2c9dbf1328663565fb3e68de8a60a6674c0a2d24ab22508d9f0ba3721b52a5b7b83dba735683d7aa36da6bd0376c383cddc6af2f8cb41d16508328441c71b945c7f5eef4382e9bd9e3955386b5a2458af70108104809c9c9e8afcb2427781ff572a8e473cc2e9c63ffe0d3fbc487503517ffd0944ca9189bd565a7e9090e579ac9a9b3f0365a3e47e69172652156752ac6325eaea1967f6271450485c6633c6f7144be85d8b1aa218ad43c871d1dd0cf4549c909df607b47a2770a6002325a6737827ad99512fa36c05c415f2bfc2f561200eed318b5bde22a7c64f70045e351bcda1bf92323d33f2dc3a520bb3ac22dd9683901df5f9d74d9bdca02630ae46d0f6c2ca87a21c4bfb2ffa294a6f397797164295d8c8e801f3ed78e1645306d3850b18c48df75b53c12b450a88db8932f61ef361d87e618dd1c2b7a72209496146704823d108654322b7573caf615ba2bb9275a91dfe69871e4e92026f8a0e15be950598d39c783f69bcdc5926968a58baf2b8d0f89f657d101a1e4c20191c854c619c06a7f33f0fee9b3f69b9821167e0d30e6d7541c0476326eaba22ee85fd046e5eea61158852d6557626d8baae105a1825267e2c2ee4ca53812aa7cacfd6892e73dc8337a9d8d7516e33e5eada929cd7f6d928605563a6bc8f439834f3f72a991162ad91650355489bf44cd601215874693920e94638b8c6a25a2f403d130d07a1caa3f3353a1b6b262e27585620e1b9198854a3c999a910b8324f2ef577ce05c785c974abd4596cf97cca17886c4658d7347a45f40824571318cac36c770a8550d77716182b907a8984a427d1f22d74350e612c25011821c292eff3214e6c9684a82f8055c93b04dc7aa97af083d66068504af8a4523024f3fe0e50f206db9599ed38361a09eab6d822c3e39de961b75494d1e8c5a51720208030d4166de73fc352f05ffe5e81b95f56154746356d15f0626afeb127ddd307b89e5aba063ae85f62e867f36de2d7923d721dce20558638b7a614c1662e32d0ffc3ca64862d3816fa3ecb44d4cdbde2e2580086a05a4f83fc7b15888d17a690f85b809cf936a35dc6c43a8c5ee5fb8f142b0c4d3167aa973fc1aba7b0618b1127524cffc9990866b3da8446359e6d26aaf111245797dcf3f9112553ce7b20bb6a80284ca439e7186a66b779e7e45eaa1fcb77e54a0e8d156dcd70ee66c66d1aafb4526ea2e9ef3fbdb17e772130124b0d01296bb864ae2b5c71188149b6b4e641ceaf4d758eee25f548a54c667d752e7cd99782e925cff7726b9ac3ebcba25efb2c0c45e35aaada259d372be75c6e5dd0e18c77d2005ce8e1515ae61dad14bccfe0235d04cb73adc3fee33d1be3b92c2e4f29b275f8f3b958024ee403880124b2578fa31a82f18ddfabe523af026d9b8981d532445a3ba68c3bfe13a7fab77805d0ddfd8b0eb93ae51104685ee28dcc69b20991f7125bcadbf2f31e57b1672536defae2d660db861b776a837f02cfbff7112cdf9ca190e18e1330e8edf12eb1bedfe5094ff0a93fa18b7728a81616140840824aa518a3213853adf031ad87b9d95f088af352af57b96003aa09d1ed9c42080a734f5b037893607a172031e9449a3bf7a039be2c33f5d11cecdbb5af30b058561c94ce66229f3b3dad70be918df93f460e8d6f75a66e8884c6546554260223fdff73578fb93b51c33843091f014dc402dae36984051861a62322218a8e6549d0a6336533c3f7bca3366d40d7b83b7f412f8e0a92e0f18f1c57cfba6123e796f57904d2d6865fc7708a3bd023eecc5e984219831d8e96eb3a5d95615a0d8e4c16126ba0ff1ba5e3c32b4532ea466bc36d0fccdf71beb343e561012e43a49854ac1b375d98922c3038d1b2b1d2cf83c275b20cd4b78a205a5704b5aad41109be6585649f74a5bbb713043f4ea60e6f88dd7b80487569e673e00bd62d3d9be4e6ad3af29ee9ef186408b30c95"}, {0x68, 0x0, 0x3f, "18a7b0b58e579435ac604e3716b125451a24ea67fb711ab0d8a5fa567ce6d08957b42492cf68b0587025911d1a85e374df76ea8dc28004db55919fe963964d6ab9c9e46956552c03762fbb3e9194e17630e3ef"}, {0xa0, 0x1, 0x8000, "290b9d090ab4e26e5391d3022b545d02044c8b53082372195d4ff4dcd9d3afacfc2496f258e7aa2ef3cf58d66a43766cfedff0d2570aa91d29edb1aa1bdede4ec31a8920de0fff5f18959476e207bf98cac00128e9ea0253f6fc28f7c79d29ea773e1254e8d41f4d5c5158f4ba0c487a44c61e6dffff6c23d9e1e7bbf1941dd959b6bf1f72e6cd1b0fc1"}, {0x50, 0x84, 0xb984, "52737adec8839acd24056683e887b5dc54da261b6fa4759d3950ca830094a2e43f15731ab6af3fe05653b1bc42cd007e10795a33224a13f99d1e243747"}, {0xe0, 0x112, 0x7fffffff, "713e44778a80bb7a5fc30de6c9e0faecdb2aaee5d1e915529aef68fb1769796ac58ab2921cbea58906b824b3322b159b442965494b79c8456f6893d8e28f9aca04708dd052a76e77981c804cf34f306369e84de7cf366107ac7bb7d233b9d3c77b84608613f47995378373be58dd8111a2457fbebf8e1fe6b79a97d7c304ec9a9f8a5adc59f7a44c263a8df1a1fc9974b0493eae9d8fb8f80d19bae99b0d3d2ad6112f007b0260597ab126f8fa279193397f3c7aeb64a5d01386d32e88e6b4ff9ac594423b936600e2ebc827"}, {0x50, 0x10d, 0x7fff, "88abd89c9bcd7b792d2859aa2187b63f76f549d3d8a01a4eb386110ac4c0821ca68c800237aea3938963839104421d130fb56d28bd9bedb7cc"}], 0x1360, 0x4004000}, 0x3ff}, {{&(0x7f0000004000)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58, &(0x7f0000005000-0x20)=[{&(0x7f0000004000)="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", 0x1000}, {&(0x7f0000005000-0xa5)="0a04e75954ee29444f025ae193f112d83924362b344c7f91289b89e0ef2a665d2de6c208ae4a1f293ebd711b647632591ee5aa309a2f236099678b564f12b16c2e3275a3ca185409d4316bb5d3e1672ead434c7a2db0e8b4f34199191e06959c1c3b9f46574ac5b7f409be13d0cf41152fbccf6e991d4b99f40e94f9f58552422364d75a2b00a71098b7124d16fea509e2ec2a46b8a23c7907217b28d72a9073ee77123bbc", 0xa5}], 0x2, &(0x7f0000004000)=[{0x1010, 0x101, 0x2, "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"}, {0x1010, 0x199, 0x4, "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"}, {0xb8, 0x0, 0x2, "02628bb92934ea4cd503c494089579154309de7231714e526b02d96526263ec99bc7c6acb9832e66f5847c8d11a4ad615405b5796f833fa9bcf946337b2f86c9387b8902bae015b11b87a30eda921c537e249b81beccdd2047d1b600f58d17dd925093c19d4f1470ddfd42d8aee2f5cc5fc79a48b82699bc2f1f5a87fef8c3d11e64a954486ecfb9a15202c055e115b23957f7641fe50f62f22aa13b2f0aaaebed20bb0f46"}, {0x98, 0x103, 0x5, "dc77a23841685f1b03435e8bb43417eba9a3c7790a389d953d1ae9464c45730ac2278178088e478a7f9241888f7294077f728167da0ad122c702f2d88717a57839d416bb429886f929e84eb43afa89b32f5476e3654e10709f8f8698bd1ba7019d93376b560451dedfe9a7e80f7c9201a3c7b5ec91a329aeea76c937b6b943f722e646928a364d"}, {0x100, 0x115, 0x0, "0ec6dbb0b5c1aca84ffbd16f222d73d3e4f9172524b254bd31de6b4cf5535c9f4bab71fae0bb2bdbd3b2a7034a572c9b82e21f4c43e6ad1fff0e33a994071c74a38dad45c77c9d01b2ed8c45108a1e0bafd0f9468dde84a11cbf17c4772819a850c3d1a4f713f30b051c1f6a468929bb3544588bfbadfa19facd276520fa03f71cae7650944dcbad7208fb0e0e7268426f5dba838382365e55ddda7b516307cf561957d57e4f0cca64dd08e78f5b3c09d2c73bb95fe57c44f0cc902343b94fdb8e90c8f836e2e3985e8c0d6f83d97ed285b21768b72d398602fb5068249e805b4a4be4ae4d6944465f"}], 0x2270, 0x4}, 0x7ff}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000004000)="eb1b6e0d93c47d8d70d8fe3e8674c085dd64dd88452314200188b6da283252b84f2cf6c314248ffe8d0e2d0172fab518523a74e461395c3a117d1dbf4c4cbe0541fad9e6cce61ff3483b654eb2396a2aac10b2e10be90dd2ee1310edef8376e3342e1c120e4905a80e6ab10ff8a86628aff7523317f64db42a0f8faec43fe4aa0cfaa93747d8d9bd7dd2936dfbd8aa3cf1a8af1c3180c19e3fd5d50f0dc36c26357101bee02cd61196b7cc893d25d5381fabbfef2d8bbaff3376ff6737707aae0593e7b2d27c7bf8191848b68b6e7807512d536d9be6f29144edaccb", 0xdc}, {&(0x7f0000013000)="cc7677b6124b53890a23485583a17486cc76051390a61688ea92d563408ff1d4b9f3d539d8e9f7b8248a78b1763b9a7ef49193a8e1a97fc026f6d22827d529fa7f67170cdcbb07796f11f95569afca0fd4f72e93574c90e502deec0deb19e3c595e53c17ac1725eede3a2c0735158474be84f2fbcd1378a92a960b42e7e5cc9f2b53a6c7dc8ed21b98c9c3c6ae9b2cc5df059d3f3f811d", 0x97}, {&(0x7f0000003000-0xd6)="c14c6698071a4348877495995f9c096f6af01ab85cb3fdf38f74745c9f9c1fd753a9f8aa4a245243244df5652ced1b9c8caac41f14c2b61148ff3886e190fd5a68c1c6f1f8366f361747340bc2041af77b2b7c7fca25fd2e3bfb38b13c71a34364858772d5799274679fdd0e3fba3e40180742e0a0c88586287b8dc2e6c4a6ccd7b900c964a6f1577698756ca2416754b24d5955b1c2da649514f2c9806044d796f2808b4b84b5d76231850d51efee090a0b6d88868dd69be65b8d8c2c877ab083a336cd0b25605332d7a7da31e68d3a77306042934f", 0xd6}, {&(0x7f0000005000-0xdf)="43c8ad75ca2cf26f902d9285bf4aa1e88129d592b6a76baa0308dbebeaf1aed3a34ea4ecf801547bf2d6c8b263ce80aaf9cf2702d17765b8d27bffa481e3afa6167d5b56bb28f55cb2369acad9ae68bc9704ebd210bed3a4bbfd055d2d311fe3783ddb0a20028ef94d31d4c55b4ea746f0939ff603ceea76e94a6a862d65fb5e1a51b3df365fd6887a735c450615b8b584d0de9f1c0fc2781b8596c4f5283d1de414ca4b04842d7852a18666b2ff8c2479b34ee3f1adf21f7423951fe23197a9e3a1a99fc52cfc5fe99974ade1100c0be2c817d0450efad2b89ff251be54c2", 0xdf}, {&(0x7f0000004000+0x3bb)="9e78a339fefe43e9e639e498af74dcfd52f72a02431138f0fa485f916c0749cec9680419356889228d", 0x29}, {&(0x7f0000005000-0x24)="b165abe60124d5742e3f0bc7df5451fc67e0a2eb111b15b8a7f26b1de59ca30e9bc31029", 0x24}, {&(0x7f0000005000-0xfe)="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", 0xfe}, {&(0x7f0000014000-0x1000)="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", 0x1000}, {&(0x7f0000014000-0xe)="419e0d587831bb50ceb77ecb6d1a", 0xe}, {&(0x7f0000001000)="2381b5da02699594797dad8bdb84", 0xe}], 0xa, &(0x7f0000004000)=[{0x1010, 0x13b, 0x7fffffff, "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"}, {0x48, 0x7, 0x7, "3db4f14fd5ee4169cfeaad6401595760d52f8acb638d13a90ff4a6b7c9de39489e2b1e34ede36afeeadd4ca183b3f99c913006"}, {0xb0, 0x1, 0x31, "444a1d21b1e55247aebb35afc183d724c1fbca1f642da6d4ba5b1f8c030a7bbd4e939ad6c213a7ef3ee40316feb214ef422e5e6f35e30017be31dd631c192ed44ac9f0ec8859f6f523c07a051252d810505bb73bcdae38348b74b6e8b0dfc6b22b2f405e9c5cfa2eef0743e2faf42683026351a934d1bdb8739bd708ac97c8cfd5e1f1f4055a3de22dd99aeb9d78e029b5ec2adeac4a5f8b7a13a11938413933"}, {0xa8, 0x113, 0xdb5, "efbe94442b72829bd54f49d2275efea5f8422d34e8eb69bfb3a910c827d06f399da938bc2df18a44484b0bc6f810c69e659c74e6d07edf8f4bac504b289c92f35986363875e94a396509c06971e30e97cad8e00ca63090a8c9e9659f9ceb3d8b2ad46519cd2ba61e7dce92c9bd63ef83aaddef88a0f2d35cbfff67e8f460943192cbea77b7e8785750903470ae93fb1c98"}, {0x90, 0x113, 0x8, "d1368e8518aaa5bf4a6eab188aaefb2b01ea536b1ec2a965d05eadfbe31b0cc678e14b2adee5bd66c5686ec6786ba51eea90cfe4cfd60e7b422cae2c1902492d728fc8ae967c70bbfdf29f2fbd25d02add22351c32145fb40830152cf1e9877f4b97f9c09573f2f3b38a28ab836345d85f9d37725f16a5f5e786"}, {0x90, 0x11b, 0x5, "db6bd29e6fcc7914fda8acd647c45bc08f44887efac492230c4c00c6ae0a2a35bc3b1ac9a6fb4cd27c7ed5d4af91c293d71aefc1508f36b3125aa83be6663447c07c16eea72b69d7d3f047ab4a3b1d8f58be68895669a21ae8874db8402ebebd46e3800d7953047fe705cef40e9fbe3ece7a30f608aca5cbe3"}], 0x12d0, 0xc051}, 0x4}], 0x5, 0x40) ioctl$sock_netrom_TIOCOUTQ(r4, 0x5411, &(0x7f0000004000-0x4)=0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000c12000-0x7)='./file0\x00') umount2(&(0x7f00001f8000)='./file1\x00', 0x0) mkdir(&(0x7f00005b7000-0x8)='./file1\x00', 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000b3c000-0x4)=0x6, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000b09000-0x22)=""/34) 2018/01/14 21:59:13 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) semget$private(0x0, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 74.497808] device eql entered promiscuous mode [ 74.512190] binder: 12508:12529 BC_FREE_BUFFER u0000000000000000 no match [ 74.512208] binder: 12508:12529 BC_INCREFS_DONE node 151 has no pending increfs request [ 74.512225] binder: 12508:12529 Release 1 refcount change on invalid ref 2 ret -22 [ 74.512232] binder: 12508:12529 unknown command 0 [ 74.512244] binder: 12508:12529 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:14 executing program 0: r0 = syz_open_dev$adsp(&(0x7f00009fe000-0xb)='/dev/adsp#\x00', 0x10001, 0x80) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000001000-0xe)='/selinux/load\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xd16000)=nil, 0xd16000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00005cf000-0x4)=0x2, 0x4) mmap(&(0x7f0000d16000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000d16000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept4$unix(r0, &(0x7f0000d16000)=@abs={0x0, 0x0, 0xffffffffffffffff}, &(0x7f0000d16000)=0x8, 0x80800) getsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000d13000-0x4)=0x0, &(0x7f00007df000-0x4)=0xfffffffffffffe45) 2018/01/14 21:59:14 executing program 3: r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000474000)=0xffffffff, 0x4) fcntl$setsig(r0, 0xa, 0x15) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000e23000-0x13)='/dev/snd/controlC#\x00', 0x0, 0x8a00) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000b8f000-0x4c8)={{0xb, 0x0, 0x0, 0x0, "c7e4f9ecd7fc5367d571f77fe620a25ed456723ee8a6dabc048a9e0bf4f8491a15242cc6513f78936cdba402", 0x0}, 0x0, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x466, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0], {0x77359400, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/14 21:59:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:14 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001000-0x8)='./file0\x00', 0x200000, 0x10) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x10000) r1 = syz_open_dev$adsp(&(0x7f0000001000-0xb)='/dev/adsp#\x00', 0x3, 0x2) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000273000)=0x81, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) accept$alg(r2, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000d7d000)='/dev/ppp\x00', 0x2000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$netrom(r3, &(0x7f00004a8000-0x10)=@ax25={0x0, {""/7}, 0x0}, &(0x7f0000001000-0x1)=0x10) 2018/01/14 21:59:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000fd1000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00001a1000-0x20)={0x1fd, 0x2, 0x107006, 0x2000, &(0x7f0000a2e000/0x2000)=nil}) r1 = accept4(0xffffffffffffff9c, &(0x7f0000ef5000-0x6)=@hci={0x0, 0x0, 0x0}, &(0x7f0000a49000)=0x6, 0x800) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000975000-0x20)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x7fffffff, 0x1, 0x3, 0x0, 0x8, 0x7fff, 0x3}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000d1c000-0x58)={0x26, 'hash\x00', 0x0, 0x4, 'crc32-generic\x00'}, 0xfffffffffffffe51) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000b79000-0x10)="a23364fd", 0x4) r4 = syz_open_dev$admmidi(&(0x7f000003c000)='/dev/admmidi#\x00', 0x0, 0x44400) r5 = getpgid(0xffffffffffffffff) ioctl$DRM_IOCTL_MAP_BUFS(r4, 0xc0186419, &(0x7f00000aa000)={0x6, &(0x7f000020f000-0x4)=""/4, &(0x7f000011a000)=[{0x4ba19b75, 0x6b, 0x3, &(0x7f0000ed6000)=""/107}, {0x100, 0x1000, 0x3, &(0x7f000022e000-0x1000)=""/4096}, {0x3, 0x1a, 0x4, &(0x7f0000d68000-0x1a)=""/26}, {0x9, 0x1000, 0x1, &(0x7f00002b0000)=""/4096}, {0x8, 0x1000, 0x401, &(0x7f00005fa000-0x1000)=""/4096}, {0x3ff, 0xdc, 0xaf6, &(0x7f0000ad2000)=""/220}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000654000)={{0x20, 0x3, 0x800c2d7, 0x101, "b56305e6dd6f5e17586869827ff1a9c9e2c1ece2a8dae2651a08b51983f0a73568c794c4dda52a7f43a3f641", 0x800}, 0x0, 0x0, 0xee21, r5, 0x10001, 0x7fffffff, "c9f1005e6458061ec38f50add55a1be987d59f8df691cd71f9839c0ec36bac6c35113c52d06e75e791d6d5df6b3c1b051ab9f025eca421fba3a5592c23ca67de", &(0x7f0000858000-0xa)='^md5sum$@\x00', 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0x2971430e, 0x20000, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r6 = open(&(0x7f00004b9000-0x8)='./file0\x00', 0x28042, 0x0) fallocate(r6, 0x0, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000bf6000)={0x0, 0x1c, "37e50ebe6bea2ec11f11a7dbe3df2a49948e753655d7ae01968e904b"}, &(0x7f000081d000)=0x4b6027ea6d699857) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00004aa000-0x40)=[{0x3, 0x400}, {0xf, 0x80000001}, {0x3, 0x1}, {0x8, 0x100000001}, {0x4, 0x3bc}, {0xa, 0xfff}, {0x3, 0x2012}, {0x3, 0x3ff}], 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f000095d000-0x8)=@assoc_value={r7, 0x9}, 0x8) sendfile(r3, r6, &(0x7f0000e65000-0x8)=0x0, 0x9) [ 74.666530] netlink: 188 bytes leftover after parsing attributes in process `syz-executor2'. 2018/01/14 21:59:14 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:14 executing program 3: mmap(&(0x7f0000000000/0x18000)=nil, 0x18000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000000d000)={&(0x7f000000d000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000a000-0x10)={&(0x7f000000e000-0x118)=@newsa={0x118, 0x12, 0x1fd, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast1=0xe0000001, @in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in=@local={0xac, 0x14, 0x0, 0xaa}, 0xffffffffffffffff, 0x0}, @in6=@loopback={0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x4, 0x0}, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, [@address_filter={0x28, 0x1a, {@in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x80}}]}, 0x118}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 74.708833] binder: 12566:12580 BC_ACQUIRE_DONE node 152 has no pending acquire request [ 74.717170] binder: 12566:12580 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 74.720929] netlink: 188 bytes leftover after parsing attributes in process `syz-executor2'. [ 74.734881] binder: 12566:12580 BC_FREE_BUFFER u0000000000000000 no match 2018/01/14 21:59:14 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000d5e000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000313000-0x80)={[0x0, 0x0, 0x10007, 0x2], 0xffffffffffffffff, 0x1000000000, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) fstat(r1, &(0x7f000049e000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statfs(&(0x7f0000545000-0x8)='./file0\x00', &(0x7f0000dbd000-0x95)=""/149) ioprio_set$uid(0x7, r3, 0x2) 2018/01/14 21:59:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000d98000)='./file0\x00', 0x0) chroot(&(0x7f0000643000-0x8)='./file0\x00') chdir(&(0x7f00000b8000-0x2)='..') mount(&(0x7f0000bf2000)='../file0\x00', &(0x7f0000ebf000-0x2)='..', &(0x7f0000f19000-0x5)='coda\x00', 0x84000, &(0x7f0000dea000)="") r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000069e000)='/selinux/status\x00', 0x0, 0x0) bind$nfc_llcp(r0, &(0x7f00004ba000)={0x27, 0x1, 0x7fff, 0x0, 0x1, 0x7, "6f1db62f0441af38ebb22686c4ef200392961baa3b5d24b94910a5fac599c42e758da6db939f64bda97efa9a98aeee763b6f089f85cc2e661f9adc85c09dac", 0xd7f}, 0x60) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_NMI(r0, 0xae9a) 2018/01/14 21:59:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000645000-0x40)={0x8, 0x800, 0x401, 0x5, 0x4, 0xfffffffffffffe01, 0xeb1, 0x1a}, &(0x7f0000a64000)={0x21, 0x1, 0x39e, 0x3, 0x10000, 0x8, 0x0, 0x2}, &(0x7f0000058000-0x40)={0x6, 0x0, 0x40, 0x8, 0xdc, 0x3, 0x0, 0xfffffffffffffc01}, &(0x7f00002b2000-0x10)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000095f000)={0x8, 0x5, &(0x7f0000bb6000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000434000)='GPL\x00', 0x20, 0xbc, &(0x7f000008f000-0xbc)=""/188, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) [ 74.753187] binder: 12566:12580 BC_INCREFS_DONE node 152 has no pending increfs request [ 74.761502] binder: 12566:12580 Release 1 refcount change on invalid ref 2 ret -22 [ 74.812117] binder: 12566:12580 unknown command 0 [ 74.829652] binder: 12566:12580 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000ace000-0x4)=0x0, 0x7292c7307d675ffd) write(r0, &(0x7f0000001000-0x10)="0212a1250200000009e5000000000900", 0x10) sendmsg$key(r0, &(0x7f0000ec8000-0x22)={0x0, 0x0, &(0x7f000006a000)={&(0x7f000000b000)={0x2, 0xa, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/14 21:59:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ae8000-0x58)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x3f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00006b8000-0x10)="e517b5bf91aa785dfbcde2090000e8fc", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000053000-0x38)={0x0, 0x0, &(0x7f0000545000)=[{&(0x7f0000f85000-0x36)='/', 0x1}], 0x1, &(0x7f000077f000)=[], 0x0, 0x0}, 0x4000004) readv(r1, &(0x7f0000578000)=[{&(0x7f0000637000)=""/95, 0x5f}], 0x1) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000b75000-0x10)='/selinux/create\x00', 0x2, 0x0) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000b54000)=[0x6, 0x5]) 2018/01/14 21:59:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000028a000)='./file0\x00', 0x0) mount(&(0x7f0000160000-0x8)='./file0\x00', &(0x7f00009f2000)='./file0\x00', &(0x7f0000a9f000)='mqueue\x00', 0x20, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000434000-0x8)='./file0\x00') socket(0x10, 0x0, 0x0) 2018/01/14 21:59:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f00008fa000-0x10)='/selinux/member\x00', 0x2, 0x0) bind$ax25(r0, &(0x7f0000e27000-0x10)={0x3, {"7bcae81cb8a321"}, 0x3f}, 0x10) syz_emit_ethernet(0x3a, &(0x7f000084d000)={@local={[0xaa, 0xaa, 0xaa, 0xaa], 0x0, 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@ipv4={0x800, {{0x9, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[@rr={0x7, 0xf, 0x9, [@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @rand_addr=0x0, @multicast2=0xe0000002]}]}}, @udp={0xffffffffffffffff, 0xffffffffffffffff, 0x2ae, 0x0, ""}}}}}, &(0x7f0000754000)={0x0, 0x1, [0xaf2]}) accept$alg(r0, 0x0, 0x0) 2018/01/14 21:59:14 executing program 2: mmap(&(0x7f0000000000/0x28a000)=nil, 0x28a000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000276000)='/dev/net/tun\x00', 0x0, 0x0) mmap(&(0x7f000028a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f000028b000-0x28)={@generic="375e0f27000800000000000077a9f8b5", @ifru_map={0x2, 0x1000, 0x0, 0x0, 0x0, 0x0}}) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f000004b000)={0x0, 0x2, "0530"}, &(0x7f0000287000)=0xa) ioctl$TUNGETVNETHDRSZ(r1, 0x800454dd, &(0x7f0000131000)=0x0) mmap(&(0x7f000028b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000028c000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f000028d000-0xd)='/dev/net/tun\x00', 0x0, 0xd953996e433ff856) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f000028c000-0x2)={0x0, 0x0}, 0x2) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000179000-0xb)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000220000)=0xb) 2018/01/14 21:59:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) semget$private(0x0, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:14 executing program 4: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000004, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000007000)="c0", 0x1) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000010000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000010000)='/dev/snd/midiC#D#\x00', 0x7ff, 0x0) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000)=0x0, &(0x7f0000005000-0x4)=0x4) mmap(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000011000)=""/246) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f000000f000)=0x7, 0x4) 2018/01/14 21:59:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000066c000-0x58)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000021d000-0x14)="79733976d8c3804aead96002ec08bbe60585ce12", 0x14) r1 = accept$alg(r0, 0x0, 0x0) prctl$getreaper(0x5, &(0x7f0000f2d000)=0x0) sendmmsg(r1, &(0x7f0000329000-0x78)=[{{&(0x7f0000ad7000-0x6)=@hci={0x1f, 0x0, 0x0}, 0x6, &(0x7f0000be8000-0x60)=[{&(0x7f0000a0a000)="5e2a6f5b35b122cd3b9c31f7e1ec3d90", 0x10}], 0x1, 0x0, 0x0, 0x0}, 0x0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000b4e000-0x8)={0x0, 0x0, 0x0, 0x0}, &(0x7f000087f000)=0x8) read(r1, &(0x7f00007e8000)=""/154, 0x9a) 2018/01/14 21:59:14 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="", 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f000027f000)={0x0, 0x0, &(0x7f00000ca000)=[], 0x10000000000000b6, &(0x7f0000720000)=[], 0x168, 0x10804}, 0x20000000) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000032000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, 0x58, &(0x7f0000613000-0x80)=[{&(0x7f0000f81000)=""/4096, 0x1000}], 0x1, &(0x7f0000f80000-0x36)=""/87, 0x57, 0x0}, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00009c8000-0xa)='/dev/cuse\x00', 0x0, 0x0) bind$bt_l2cap(r2, &(0x7f0000fc8000-0xe)={0x1f, 0x1, {0xfff, 0x100000001, 0xe4a, 0x5, 0xe7d9, 0x7}, 0x2, 0x2}, 0xe) 2018/01/14 21:59:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000325000)={0xa, 0x2, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f00008fa000)='/dev/net/tun\x00', 0x0, 0x5) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f32000)={@common="65716c0000006f001d007200001600", @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) r3 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common="65716c0000000000000000eaedff00", @ifru_addrs={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) write$tun(r2, &(0x7f0000cd8000-0x92)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x78, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0, @empty=0x0, @broadcast=0xffffffff, {[]}}, @tcp={{0xffffffffffffffff, 0x2, 0x42424242, 0x42424242, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @sack={0x5, 0x6, [0x0]}, @md5sig={0x13, 0x12, "822910e8b8da99bc230d1863079d0972"}, @md5sig={0x13, 0x12, "615d0677f2a7c89ff668945742684110"}]}}, {""}}}}, 0x82) 2018/01/14 21:59:14 executing program 6: clone(0x844400, &(0x7f0000000000)="", &(0x7f00002dc000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f0000e31000-0x1)="") r0 = socket$bt_bnep(0x1f, 0x3, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000001000-0x2)=0x8, 0x2) [ 74.987696] binder: 12618:12637 BC_ACQUIRE_DONE node 153 has no pending acquire request [ 74.996110] binder: 12618:12637 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000)='/dev/ptmx\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2800) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00005e5000-0x11)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00002b6000)={{{@in=@multicast2=0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0], @broadcast=0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000d90000)=0xe8) fcntl$setown(r0, 0x8, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f000000e000-0xc)="9c", 0x1) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000794000)="97207497ba9750e2c73c") ioctl$TCXONC(r0, 0x540a, 0x1) 2018/01/14 21:59:14 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) gettid() fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00002c8000-0x8)={0x0, 0x0}) gettid() fcntl$getown(0xffffffffffffffff, 0x9) r0 = getpgrp(0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000000)=0x9) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getegid() r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000e1f000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) mount(&(0x7f00003df000-0x8)='./file0\x00', &(0x7f0000d14000)='./file0\x00', &(0x7f0000d11000-0x4)='bfs\x00', 0x18000, &(0x7f00007c9000)="ae3e536183346ad184e231dfbcffe91f2c32383b9db28f0a96f8c61da41fe05352091458fe7c4fa8541ddcd2f7c61abefe9179c7c30c8da00affaaf4676b811315f06c7a9a75f35c8a") r3 = creat(&(0x7f0000e4b000-0x8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@time={0x77359400, 0x0}}], 0x30) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000015000-0x8)='./file0\x00', &(0x7f0000014000)='proc\x00', 0x0, &(0x7f0000fc9000)="") mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000143000)='./file0\x00', &(0x7f0000242000-0x6)='ramfs\x00', 0x0, &(0x7f0000916000)="") ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f0000c2a000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/01/14 21:59:14 executing program 4: mmap(&(0x7f0000000000/0x44b000)=nil, 0x44b000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, &(0x7f0000103000)=[]) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) write(r1, &(0x7f0000f13000)="b31e6fdd16aa4d7fd2fe5c27313c47939a5fa230ffbeaddd308d748a7a825759620d44d35c6241a7ba996f7edb", 0x2d) pread64(r0, &(0x7f000044c000)=""/39, 0x27, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000ddb000)='/dev/adsp#\x00', 0xffffffffffffc22d, 0x501000) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x1000) 2018/01/14 21:59:14 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f00001a6000)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00006e4000-0xc)={0x0, 0x0, 0x0}, &(0x7f000073f000)=0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000625000-0x28)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) read(r1, &(0x7f00003c1000)=""/69, 0x3) 2018/01/14 21:59:14 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000d4c000)=r0, 0x4) sync() 2018/01/14 21:59:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000bf6000)=0x177, 0x305) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f00003f4000)=0xfffffffffffffff9, 0x4) r1 = semget$private(0x0, 0x3, 0x210) r2 = inotify_add_watch(0xffffffffffffffff, &(0x7f000029b000)='./file0\x00', 0x0) inotify_rm_watch(r0, r2) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000f1b000-0x5c)={{0xa, 0x0, 0x400, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x8}, {0xa, 0x3, 0xa0e, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x7}, 0x1, [0x80000000, 0x8, 0x3, 0x5, 0x4c98, 0x3, 0x4, 0x80]}, 0x5c) semctl$GETNCNT(r1, 0xd95cb734d68f36e1, 0xe, &(0x7f0000162000)=""/0) sendto$inet6(r0, &(0x7f00009f1000-0x3d)="", 0x0, 0x0, &(0x7f0000f5b000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) recvmmsg(r0, &(0x7f0000f61000)=[{{&(0x7f0000f63000-0x10)=@ipx={0x0, 0x0, 0x0, ""/6, 0x0, 0x0}, 0x10, &(0x7f0000f5d000)=[], 0x0, &(0x7f0000f62000)=""/0, 0x0, 0x0}, 0x0}], 0x1, 0x2041, 0x0) 2018/01/14 21:59:14 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) semget$private(0x0, 0x3, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 75.033352] binder: 12618:12637 BC_FREE_BUFFER u0000000000000000 no match [ 75.053721] binder: 12618:12637 BC_INCREFS_DONE node 153 has no pending increfs request [ 75.062093] binder: 12618:12637 Release 1 refcount change on invalid ref 2 ret -22 [ 75.069945] binder: 12618:12637 unknown command 0 [ 75.074857] binder: 12618:12637 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:14 executing program 2: mmap(&(0x7f0000000000/0xfea000)=nil, 0xfea000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe7000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5402, &(0x7f0000371000-0x14)={0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_pts(r0, 0x8000000006) mmap(&(0x7f0000fea000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000fea000)='/dev/dsp#\x00', 0x4, 0x200) writev(r1, &(0x7f0000861000)=[{&(0x7f00006ab000)="fdccefe8b940dd5e00d0840860603a35b83a1b0a", 0x14}], 0x1) 2018/01/14 21:59:14 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket(0x0, 0x4, 0x8) r0 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00003bb000)={0x1, {{0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x2, [{{0xa, 0xffffffffffffffff, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @empty=0x0}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0xffffffffffffffff, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @empty=0x0}, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x190) 2018/01/14 21:59:14 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 75.148059] device eql entered promiscuous mode 2018/01/14 21:59:14 executing program 0: mmap(&(0x7f0000004000/0xffb000)=nil, 0xffb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6, 0x40) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001000-0x8)={0x0, 0x8}, &(0x7f0000001000-0x4)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000fa0000-0x10)={0x100000000, 0x8000, 0x2, 0x1, r1}, &(0x7f0000360000)=0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00003e6000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000fbf000)=0x5, 0x7, 0x0) mbind(&(0x7f00009aa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000c20000-0x8)=0x0, 0x5, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) [ 75.182792] binder: 12667:12682 BC_ACQUIRE_DONE node 154 has no pending acquire request [ 75.191282] binder: 12667:12682 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 75.196054] FAULT_FLAG_ALLOW_RETRY missing 30 [ 75.196140] CPU: 0 PID: 12666 Comm: syz-executor6 Not tainted 4.15.0-rc7-next-20180112+ #96 [ 75.196145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.196149] Call Trace: [ 75.196167] dump_stack+0x194/0x257 [ 75.196185] ? arch_local_irq_restore+0x53/0x53 2018/01/14 21:59:14 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002000-0x14)={0x5, 0x8, 0xfd, 0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xcd02bb2f1ce7fd79) getsockopt$inet6_dccp_buf(r0, 0x21, 0x0, &(0x7f00000ad000)=""/143, &(0x7f00005b4000)=0x8f) write(r0, &(0x7f0000c83000-0x2)="", 0x0) rt_sigpending(&(0x7f0000b55000)={0x0}, 0x8) modify_ldt$write(0x1, &(0x7f0000693000-0x10)={0x7a, 0x20000800, 0x0, 0x7, 0x3f, 0x3, 0x6, 0xffffffffffff448c, 0x1, 0x4}, 0x10) fchdir(r0) [ 75.196207] ? handle_userfault+0xb97/0x2500 [ 75.196227] handle_userfault+0xbd9/0x2500 [ 75.196235] ? handle_userfault+0x185a/0x2500 [ 75.196266] ? userfaultfd_ioctl+0x4520/0x4520 [ 75.196274] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 75.196283] ? __lock_is_held+0xb6/0x140 [ 75.196297] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.196319] ? print_irqtrace_events+0x270/0x270 [ 75.196331] ? print_irqtrace_events+0x270/0x270 [ 75.196340] ? get_user_pages_fast+0x277/0x340 [ 75.196361] ? perf_trace_lock+0xd6/0x900 [ 75.196370] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.196390] ? trace_event_raw_event_lock+0x340/0x340 [ 75.196403] ? __lock_acquire+0x664/0x3e00 [ 75.196414] ? check_noncircular+0x20/0x20 [ 75.196421] ? __lock_acquire+0x664/0x3e00 [ 75.196457] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 75.196471] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 75.196489] ? find_held_lock+0x35/0x1d0 [ 75.196514] ? __handle_mm_fault+0x3296/0x3ce0 [ 75.196526] ? lock_downgrade+0x980/0x980 [ 75.196543] ? lock_release+0xa40/0xa40 [ 75.196562] ? do_raw_spin_trylock+0x190/0x190 [ 75.196598] __handle_mm_fault+0x32a3/0x3ce0 [ 75.196620] ? __pmd_alloc+0x4e0/0x4e0 [ 75.196644] ? find_held_lock+0x35/0x1d0 [ 75.196669] ? handle_mm_fault+0x2a0/0x930 [ 75.196680] ? lock_downgrade+0x980/0x980 [ 75.196736] handle_mm_fault+0x38f/0x930 [ 75.196751] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 75.196758] ? vmacache_find+0x5f/0x280 [ 75.196775] ? find_vma+0x30/0x150 [ 75.196792] __do_page_fault+0x5c9/0xc90 [ 75.196817] ? mm_fault_error+0x2c0/0x2c0 [ 75.196831] ? lock_release+0xa40/0xa40 [ 75.196854] do_page_fault+0xee/0x720 [ 75.196867] ? __do_page_fault+0xc90/0xc90 [ 75.196887] ? _raw_spin_unlock+0x22/0x30 [ 75.196898] ? __mark_inode_dirty+0x262/0x1170 [ 75.196917] ? __inode_attach_wb+0xf50/0xf50 [ 75.196940] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.196966] page_fault+0x2c/0x60 [ 75.196977] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 75.196982] RSP: 0018:ffff8801d10e7928 EFLAGS: 00010246 [ 75.196990] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff825a9df1 [ 75.196995] RDX: 000000000000010c RSI: ffffc900038b7000 RDI: ffff8801d10e7d28 [ 75.196999] RBP: ffff8801d10e7a08 R08: 0000000000000000 R09: 1ffff1003a21ced1 [ 75.197004] R10: ffff8801d10e7858 R11: 0000000000000003 R12: 1ffff1003a21cf28 [ 75.197011] R13: ffff8801d10e79e0 R14: 0000000000000000 R15: ffff8801d10e7d20 [ 75.197038] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 75.197059] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 75.197075] ? iov_iter_revert+0x9d0/0x9d0 [ 75.197090] ? current_kernel_time64+0x122/0x2f0 [ 75.197110] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 75.197122] ? trace_hardirqs_on+0xd/0x10 [ 75.197131] ? current_kernel_time64+0x1d4/0x2f0 [ 75.197151] generic_perform_write+0x200/0x600 [ 75.197161] ? __vfs_getxattr+0x8b/0xc0 [ 75.197198] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 75.197207] ? file_update_time+0xd3/0x5b0 [ 75.197222] ? current_time+0xc0/0xc0 [ 75.197228] ? clear_nlink+0xb0/0xb0 [ 75.197238] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.197264] ? down_write+0x87/0x120 [ 75.197282] __generic_file_write_iter+0x366/0x5b0 [ 75.197290] ? check_noncircular+0x20/0x20 [ 75.197313] generic_file_write_iter+0x399/0x790 [ 75.197333] ? __generic_file_write_iter+0x5b0/0x5b0 [ 75.197351] ? iov_iter_init+0xaf/0x1d0 [ 75.197370] __vfs_write+0x684/0x970 [ 75.197377] ? lock_acquire+0x1d5/0x580 [ 75.197392] ? kernel_read+0x120/0x120 [ 75.197444] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 75.197454] ? __sb_start_write+0x209/0x2a0 [ 75.197471] vfs_write+0x189/0x510 [ 75.197489] SyS_write+0xef/0x220 [ 75.197505] ? SyS_read+0x220/0x220 [ 75.197512] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 75.197524] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 75.197547] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 75.197553] RIP: 0033:0x452cf9 [ 75.197557] RSP: 002b:00007f5cf06d3c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001 [ 75.197566] RAX: ffffffffffffffda RBX: 000000000071bea0 RCX: 0000000000452cf9 [ 75.197570] RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000014 [ 75.197575] RBP: 00000000000003b3 R08: 0000000000000000 R09: 0000000000000000 2018/01/14 21:59:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f000069b000)='.dead\x00', &(0x7f0000e48000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f00006e4000)="48fa9e181bf16a500e01b8cc3269495683d96d1bb09ba2cce5c38383eaf21239bc73bc2e", 0x24, 0xfffffffffffffff8) r1 = dup(0xffffffffffffffff) lstat(&(0x7f0000ce7000)='./file0\x00', &(0x7f0000634000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f00009f0000)={&(0x7f00000db000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00005a8000-0x10)={&(0x7f0000e67000)={0x104, 0xd, 0x9, 0x100, 0x6, 0x2, {0xb, 0x0, 0x8}, [@typed={0xc, 0x81, @binary="69f75e"}, @nested={0xb0, 0x5f, [@generic="babb5910000db1c04321023725", @generic="c044498cad074e9a3479d841f10f7728a40bc4c2cc5dbfb63cdd6685fee92b6e19d3cf6294c94f9c1c46cae48d4be16434250c79baf59590580796f0171bf1aeff9c0a5e38dd97522fa36c875811f366dc641e79bb861c8c2c30db4f1537e39f8604357ec9c3afda3f347971eedc4cb3feb4f51e4b65e9ad2583d812dd2643d2ce54", @typed={0xc, 0x52, @uid=r2}, @generic='dS', @typed={0xc, 0x31, @u32=0x2}]}, @nested={0xc, 0x71, [@typed={0x8, 0x59, @void=""}]}, @generic="892d523456f32abae2c1b007dd6d416b5ab8c99c5a5dd5184f96aa5589e927bebce2543d7a0f1c"]}, 0x104}, 0x1, 0x0, 0x0, 0x4}, 0x48000) request_key(&(0x7f00005da000)='id_resolver\x00', &(0x7f0000726000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000c96000)='system}&keyring/\x00', r0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000ad000-0xe8)={{{@in=@local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb1f, 0x2, 0xa0, 0x0, 0x2, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x3f2d}, 0x9, 0xffffffffffffffff, 0x2, 0x1, 0x1, 0x2}, {{@in=@broadcast=0xffffffff, 0x2, 0x7c}, 0xa, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x0, 0x2, 0x3, 0x80000000, 0x10001, 0x40, 0x7}}, 0xe8) perf_event_open(&(0x7f000047d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f00005c3000)='/dev/loop#\x00', 0x0, 0x4002) memfd_create(&(0x7f0000d0c000-0x2)="7b10", 0x0) getpid() mmap(&(0x7f00007c3000/0x4000)=nil, 0x4000, 0x3, 0x2851, r3, 0x0) 2018/01/14 21:59:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$midi(&(0x7f00003c3000-0xb)='/dev/midi#\x00', 0x0, 0x200000) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000928000-0x8)={0x0, 0x0}) bind$alg(r0, &(0x7f0000f74000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000061d000)="", 0x0) r2 = accept$alg(r0, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f000063b000-0xe)='/selinux/load\x00', 0x2, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000786000-0xc)={@broadcast=0x0, @dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f0000223000-0x4)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000b2c000)={@loopback={0x0, 0x1}, 0x4, r4}) getsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f000010f000)=0x0, &(0x7f0000088000-0x4)=0x4) recvmsg(r2, &(0x7f00006e3000)={&(0x7f0000f76000)=@generic={0x0, ""/126}, 0x80, &(0x7f0000f80000-0x30)=[{&(0x7f0000851000)=""/4096, 0x1000}], 0x1, &(0x7f0000f77000-0xe3)=""/0, 0x0, 0x0}, 0x0) getrlimit(0x6, &(0x7f00004da000-0x10)={0x0, 0x0}) 2018/01/14 21:59:15 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x38, &(0x7f0000cff000)="", 0x0) readahead(r0, 0x9, 0x7fff) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002000-0xc)='/dev/autofs\x00', 0x2, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000001000-0x8)=0x4) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000002000-0x4)=0x0) pipe(&(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000002000)=[{&(0x7f0000003000-0xfd)="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", 0xfd}], 0x1, 0xd) 2018/01/14 21:59:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000032000)='/selinux/relabel\x00', 0x2, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000f40000)={[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0xa00000000002, 0x0, &(0x7f0000887000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) setsockopt$inet_dccp_int(r0, 0x21, 0x0, &(0x7f0000dae000)=0x9, 0x4) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000d06000)=0x0) syncfs(r1) 2018/01/14 21:59:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00004c2000)={0x0}, 0x8) r1 = memfd_create(&(0x7f0000c2c000-0x1f)='vposix_acl_accessnodev([%ppp0&\x00', 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000cc5000-0x20)={0x1ff, 0x3, 0x6002, 0x2000, &(0x7f0000708000/0x2000)=nil}) signalfd(r0, &(0x7f0000732000)={0x0}, 0x8) 2018/01/14 21:59:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000aaa000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000c06000)=0x101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000e08000-0x8)={0x0, 0x0}) 2018/01/14 21:59:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 75.197579] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000006f3968 [ 75.197584] R13: 00000000ffffffff R14: 00007f5cf06d46d4 R15: 0000000000000000 [ 75.647008] binder: 12667:12682 BC_FREE_BUFFER u0000000000000000 no match [ 75.654230] binder: 12667:12682 BC_INCREFS_DONE node 154 has no pending increfs request [ 75.662484] binder: 12667:12682 Release 1 refcount change on invalid ref 2 ret -22 [ 75.670574] binder: 12667:12682 unknown command 0 [ 75.675607] binder: 12667:12682 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:15 executing program 6: r0 = socket$inet_dccp(0x2, 0x6, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt(r0, 0x0, 0x800000000030, &(0x7f0000001000-0x5)="", 0x20001108) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) accept(r1, 0x0, &(0x7f0000002000-0x4)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000000)=""/237, &(0x7f0000d0f000)=0xed) [ 75.706485] binder_alloc: 12707: binder_alloc_buf, no vma [ 75.710172] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/14 21:59:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x80000000) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000cd2000)="ffd36c09ba040000000000009ce601000000006a", 0x14) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000466000-0x290)={0x401, {{0xa, 0x2, 0x3ff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x1, 0x4, [{{0xa, 0x3, 0x9, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast2=0xe0000002}, 0xffffffffffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x1, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @local={0xac, 0x14, 0x0, 0xaa}}, 0x4}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x3, 0x6d7a, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xd65}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {{0xa, 0x0, 0xf65, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x290) 2018/01/14 21:59:15 executing program 2: mmap(&(0x7f0000000000/0x48000)=nil, 0x48000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000001b000-0x1b)="7d7d9574686f5e707230630100000400001e0070ff6f630ff8", 0x0) accept4$inet(r0, &(0x7f000003c000)={0x0, 0xffffffffffffffff, @broadcast=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000009000)=0x10, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f000000e000)={0x8, 0x0}) r1 = syz_open_dev$sndseq(&(0x7f0000028000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f000002e000-0x30)=[{0x2, 0x5}, {0x8, 0x0}, {0x4, 0x1f}, {0x3, 0x8}, {0x8, 0x6}, {0xb, 0x0}], 0x6) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f000001c000)={{0x0, 0x20}, {0x0, 0x0}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000049000-0x10)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000049000-0x50)={{0x5, 0x7}, {0x764, 0x2}, 0x4, 0x3, 0xfffffffffffffffe, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000025000)={0x800, 0x4, 0x1, 0x200, 0x5, 0x1a3, 0xfff, 0x8, 0x0}, &(0x7f000004a000-0x2)=0x20) mmap(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000041000)={r4, @in6={{0xa, 0x0, 0x40, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast2=0xe0000002}, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f000004a000-0x4)=0x8c) mmap(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000049000)={0x0, 0x22bf}, &(0x7f000000b000-0x4)=0x8) ioctl$KIOCSOUND(r2, 0x4b2f, 0x4) mmap(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000049000)={r5, @in6={{0xa, 0x3, 0xfffffffffffff789, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14}, 0x2}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) mmap(&(0x7f000004a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f000004b000-0x58)={0x1000, 0x1, 0x10000, 0xfffffffffffff002, 0x81, 0x222, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000049000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$key(r2, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000033000)={&(0x7f0000049000)={0x2, 0x5, 0x3, 0x0, 0x15, 0x0, 0x2, 0x1, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x73, 0x3, 0x1}, @sadb_x_nat_t_type={0x1, 0x14, 0xf42b, [0x0, 0x0, 0x0]}, @sadb_ident={0x2, 0xb, 0x359, 0x0, 0x515}, @sadb_x_nat_t_type={0x1, 0x14, 0x2f, [0x0, 0x0, 0x0]}, @sadb_sa={0x2, 0x1, 0x0, 0x12, 0xe5e, 0x69, 0x0, 0x40000000}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @empty=0x0}, @in6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe}, 0xd, 0x4, 0x14}, @sadb_ident={0x2, 0xa, 0x787af9e3, 0x0, 0x1}, @sadb_lifetime={0x4, 0x2, 0x2, 0x800, 0x20, 0x100000001}]}, 0xa8}, 0x1, 0x0, 0x0, 0x0}, 0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000006000-0x50)={{0x3, 0x3f6408dc}, {0xffffffffffffffc0, 0x40}, 0x437a, 0x7, 0x8, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/14 21:59:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00009e7000-0x8)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00006f3000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000f62000-0x4)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000a56000-0x11)='net/softnet_stat\x00') pread64(r2, &(0x7f0000015000)=""/0, 0x0, 0x2000000003) 2018/01/14 21:59:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x540e, &(0x7f00002d0000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KDSKBLED(r0, 0x4b65, 0x5) pwrite64(r0, &(0x7f0000b22000-0x1000)="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", 0xa9, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000244000-0x12)='/dev/snd/midiC#D#\x00', 0xffff, 0x46000) ioctl$sock_ipx_SIOCAIPXITFCRT(r2, 0x89e0, &(0x7f0000e2a000-0x4)=0xc07c) [ 75.710182] binder: 12712:12716 ioctl 40046207 0 returned -16 [ 75.755105] binder: 12707:12726 BC_ACQUIRE_DONE u0000000000000000 no match [ 75.755118] binder: 12707:12726 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000e58000-0xb)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00004e3000-0xd)='/selinux/mls\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f000010b000+0xb02)='/dev/midi#\x00', 0x3ff, 0x2004) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00006c4000-0x20)={@broadcast=0xffffffff, @loopback=0x7f000001, 0x1, 0x4, [@broadcast=0xffffffff, @loopback=0x7f000001, @local={0xac, 0x14, 0x0, 0xaa}, @multicast2=0xe0000002]}, 0x20) 2018/01/14 21:59:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x1000000000000008, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009a0000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f000024e000)='./file0\x00', &(0x7f0000a98000)={0x6df2, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000e97000)={[0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000c18000)={0x10000, 0x3, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) r3 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000f57000)='/selinux/create\x00', 0x2, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f000055a000-0x10)={0x0, 0x109000, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000747000-0xe8)={{{@in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in=@loopback=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@multicast2=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000525000-0x4)=0xe8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000001000-0x14)={@ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @broadcast=0xffffffff}, r4}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 75.755133] binder: 12707:12726 BC_FREE_BUFFER u0000000000000000 no match [ 75.755145] binder: 12707:12726 BC_INCREFS_DONE u0000000000000000 no match [ 75.755159] binder: 12707:12726 Release 1 refcount change on invalid ref 2 ret -22 [ 75.755167] binder: 12707:12726 unknown command 0 [ 75.755178] binder: 12707:12726 ioctl c0306201 208fdfd0 returned -22 [ 75.756411] binder: 12726 RLIMIT_NICE not set [ 75.778145] binder: 12712:12727 BC_ACQUIRE_DONE u0000000000000000 no match [ 75.778159] binder: 12712:12727 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 75.778172] binder: 12712:12727 BC_FREE_BUFFER u0000000000000000 no match [ 75.778184] binder: 12712:12727 BC_INCREFS_DONE u0000000000000000 no match [ 75.778199] binder: 12712:12727 Release 1 refcount change on invalid ref 2 ret -22 [ 75.778206] binder: 12712:12727 unknown command 0 [ 75.778216] binder: 12712:12727 ioctl c0306201 208fdfd0 returned -22 [ 75.836171] binder: BINDER_SET_CONTEXT_MGR already set [ 75.836181] binder: 12746:12748 ioctl 40046207 0 returned -16 [ 75.876330] binder: 12746:12753 BC_ACQUIRE_DONE u0000000000000000 no match [ 75.876342] binder: 12746:12753 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 75.876355] binder: 12746:12753 BC_FREE_BUFFER u0000000000000000 no match [ 75.876366] binder: 12746:12753 BC_INCREFS_DONE u0000000000000000 no match [ 75.876379] binder: 12746:12753 Release 1 refcount change on invalid ref 2 ret -22 [ 75.876387] binder: 12746:12753 unknown command 0 [ 75.876398] binder: 12746:12753 ioctl c0306201 208fdfd0 returned -22 [ 76.003456] binder: 12707:12713 transaction failed 29189/-3, size 0-0 line 2957 2018/01/14 21:59:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:15 executing program 6: mmap(&(0x7f0000000000/0xb05000)=nil, 0xb05000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00002ea000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000b05000-0x38)={0x21, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) mmap(&(0x7f0000b05000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$packet_int(r1, 0x107, 0x1e, &(0x7f0000771000-0x4)=0x0, &(0x7f0000b05000)=0x4) 2018/01/14 21:59:15 executing program 7: mmap(&(0x7f0000000000/0xb6e000)=nil, 0xb6e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f000049b000)={&(0x7f0000b6d000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000b6c000)={&(0x7f0000ae4000)=@delpolicy={0xe4, 0x21, 0xdab3c3fcdff443a3, 0x0, 0x0, {{@in6=@loopback={0x0, 0x1}, @in=@rand_addr=0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, [@migrate={0x5c, 0x11, [{@in=@dev={0xac, 0x14, 0x0, 0x12}, @in=@empty=0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @in6=@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}]}, @policy_type={0xc, 0x10, {0xf, 0x0, 0x0}}, @user_kmaddress={0x2c, 0x13, {@in=@local={0xac, 0x14, 0x0, 0xaa}, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0, 0xffffffffffffffff}}]}, 0xe4}, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) 2018/01/14 21:59:15 executing program 0: fcntl$getown(0xffffffffffffff9c, 0x9) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000001000)='/dev/audio\x00', 0x80000, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002000-0xc)={0x0, @local={0x0, 0x0, 0xffffffffffffffff, 0x0}, @multicast2=0x0}, &(0x7f0000001000-0x4)=0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) connect$packet(r1, &(0x7f0000001000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0x0, 0x0]}, 0x14) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001000-0x4)=0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) unlinkat(r1, &(0x7f0000003000-0x8)='./file0\x00', 0x0) r3 = getpgrp(r0) sched_getscheduler(r3) r4 = socket$netlink(0x10, 0x3, 0x5) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read(r4, &(0x7f0000001000)=""/4096, 0x1000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101800, 0x0) 2018/01/14 21:59:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f000068e000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00006eb000)='/dev/kvm\x00', 0x26101, 0x0) r2 = syz_open_dev$amidi(&(0x7f00003d7000-0xc)='/dev/amidi#\x00', 0x480000000, 0x1) r3 = getuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000cd1000-0xe8)={{{@in=@dev={0xac, 0x14, 0x0, 0xa}, @in=@dev={0xac, 0x14, 0x0, 0xe}, 0x2, 0x1, 0x0, 0x8, 0x2, 0xa0, 0x20, 0x0, 0x0, r3}, {0x9, 0x0, 0x100000000, 0x5, 0x7, 0xfb22, 0x80000000, 0x10001}, {0x6, 0x18, 0x4, 0x8001}, 0x7, 0x6, 0x0, 0x1, 0x0, 0x0}, {{@in=@local={0xac, 0x14, 0x0, 0xaa}, 0x2, 0xff}, 0xa, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x7, 0x0, 0x40, 0x8000, 0x8, 0x0}}, 0xe8) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000b8a000)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, {0xa, 0x1003, 0x0, 0x0, 0x7632, 0x0}]}) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f00008b8000)={{0x2, 0x1, @dev={0xac, 0x14, 0x0, 0xd}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, {0x307, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7ccd3ffd9b31adc3, {0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic="591c854ab2db481f146ab1e694405af3"}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00004ce000)={0x1, 0x0, [{0x38f, 0x0, 0x0}]}) 2018/01/14 21:59:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0xfffffffffffffffe) r3 = syz_open_dev$admmidi(&(0x7f00000a0000)='/dev/admmidi#\x00', 0x0, 0x800) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000464000)={0xfffffffffffffffc, 0x606b}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f000001b000-0xc)={0x20000000, 0x0}) r4 = dup3(r0, r2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000afd000)={{{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in=@loopback=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in=@local={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000c68000)=0xe8) getdents64(r3, &(0x7f0000474000)=""/228, 0xe0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000cfc000-0xc)={0x0, 0x0}) 2018/01/14 21:59:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000003000-0x10)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {r0, 0x1c9c380}}, &(0x7f0000003000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) [ 76.020219] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/14 21:59:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000037a000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000010000)={0x0, 0x5}, &(0x7f0000a07000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000413000-0x20)={0x2, 0x2, 0x8, 0xc5, 0x40, 0x7, 0x7fffffff, 0x3f, r1}, &(0x7f0000b4c000)=0x20) r2 = syz_open_dev$sg(&(0x7f00006a3000)='/dev/sg#\x00', 0x0, 0x806) ioctl(r2, 0x2284, &(0x7f000090a000)="") getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00004e2000-0x7)={r1, 0x8, 0x8000}, &(0x7f000021a000-0x4)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f000049e000-0x98)={r3, @in={{0x2, 0x3, @rand_addr=0xffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x401, 0x5}, &(0x7f000009d000)=0x98) [ 76.064340] binder: BINDER_SET_CONTEXT_MGR already set [ 76.079508] binder: 12764:12770 ioctl 40046207 0 returned -16 [ 76.100331] binder: 12758:12779 BC_ACQUIRE_DONE node 157 has no pending acquire request 2018/01/14 21:59:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x9) socketpair(0x3, 0x6, 0x0, &(0x7f0000b91000-0x8)={0x0, 0x0}) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000b85000-0x4)=0x0) bind$netlink(r0, &(0x7f0000ef9000-0xc)={0x10, 0x0, 0x0, 0x80000000000003}, 0xc) 2018/01/14 21:59:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x8929, &(0x7f0000000000)={@common='lo\x00', @ifru_ivalue=0x0}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000ae7000-0x14)={0xfff, 0x4, 0x100000001, 0x6, 0x5}) [ 76.108757] binder: 12758:12779 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f000069b000)='/dev/ppp\x00', 0x208040, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000066000-0x4)={0x800, 0xefc, 0x1}) r1 = timerfd_create(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00002ee000)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) timerfd_settime(r1, 0x1, &(0x7f0000003000)={{0x2400000000000000, 0x0}, {0x0, r2}}, &(0x7f0000010000-0x20)={{0x0, 0x0}, {0x0, 0x0}}) [ 76.136586] binder: 12764:12781 BC_ACQUIRE_DONE u0000000000000000 no match [ 76.137568] binder: 12758:12779 BC_FREE_BUFFER u0000000000000000 no match 2018/01/14 21:59:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:15 executing program 0: personality(0x1bb2baf3005ac117) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000d60000-0x10)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000000)={0x6}, 0x163, 0x800) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001000-0x8)={0x0, 0x7}, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x1ff, 0x1) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000003000-0xd)='/dev/dmmidi#\x00', 0xfffffffffffffff9, 0x141100) mmap(&(0x7f0000eb4000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000003000-0x10)='/selinux/member\x00', 0x2, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000eb5000-0xc)={@loopback=0x0, @multicast1=0x0, @broadcast=0x0}, &(0x7f0000003000-0x4)=0xc) 2018/01/14 21:59:15 executing program 7: clone(0x0, &(0x7f000067c000)="", &(0x7f0000c8d000-0x4)=0x0, &(0x7f0000be2000)=0x0, &(0x7f0000e7c000)="") fstatfs(0xffffffffffffffff, &(0x7f000036d000-0xd9)=""/217) r0 = semget$private(0x0, 0x4, 0x20) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000a3b000-0x9a)=""/154) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000d5d000-0xa)='/dev/cuse\x00', 0x282040, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000001000-0x4)=0x3722, 0x4) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000002000-0x8)={0xffff, 0x8}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0xf, &(0x7f0000f15000-0x4)=0x0, &(0x7f00002b1000)=0x4) 2018/01/14 21:59:15 executing program 2: r0 = syz_open_dev$mice(&(0x7f00003ee000-0x10)='/dev/input/mice\x00', 0x0, 0x248400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00003cf000)={r0, 0x50, &(0x7f0000c6e000-0x50)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16}}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000e2e000-0x48)={{0xffffffffffffffff, 0x2, 0xfffffffffffffffc, 0x3, 0x8bd}, 0x5, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f000069c000)={@empty=0x0, @broadcast=0x0, 0x0}, &(0x7f0000000000)=0xc) setsockopt(r1, 0x65, 0x10000000004, &(0x7f0000fe1000)="", 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000-0x4)=0x5) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x744c72ac, 0x3, 0x928e]}, &(0x7f0000001000-0x4)=0xa) 2018/01/14 21:59:15 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000b4b000-0x4)=0x0, &(0x7f0000c1d000)=0x4) preadv(r0, &(0x7f0000fa1000-0x50)=[{&(0x7f0000bac000-0x5d)=""/131, 0x83}, {&(0x7f0000881000-0x59)=""/89, 0x59}, {&(0x7f00002ab000-0x79)=""/121, 0x79}, {&(0x7f0000b91000-0x46)=""/70, 0x46}, {&(0x7f00003cb000)=""/125, 0x7d}], 0x5, 0x63) read(r0, &(0x7f0000e66000-0x62)=""/98, 0x62) sendmsg$nl_xfrm(r0, &(0x7f000000d000)={&(0x7f000000d000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000a000-0x10)={&(0x7f0000016000)=@newsa={0xf0, 0x12, 0x201, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast1=0xe0000001, @in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0xffffffffffffffff, 0x0}, @in6=@loopback={0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, []}, 0xf0}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 76.137586] binder: 12758:12779 BC_INCREFS_DONE node 157 has no pending increfs request [ 76.137604] binder: 12758:12779 Release 1 refcount change on invalid ref 2 ret -22 [ 76.137612] binder: 12758:12779 unknown command 0 2018/01/14 21:59:15 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000123000-0x10)='/selinux/create\x00', 0x2, 0x0) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00004b2000-0x1)=0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000441000-0x4)=0x0) getpriority(0x2, r3) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000bc000-0x18)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r4 = accept$alg(r2, 0x0, 0x0) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000dcb000-0x5)='/selinux/status\x00', 0x0, 0x0) ioctl$TCFLSH(r5, 0x540b, 0x8) sendmsg$alg(r4, &(0x7f00002ff000-0x38)={0x0, 0x0, &(0x7f0000985000)=[{&(0x7f0000a5a000-0x1000)="8b", 0x1}], 0x1, &(0x7f0000633000-0x90)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x0}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000c59000-0xa)='/dev/vcs#\x00', 0xffff, 0x121000) ioctl$TIOCGETD(r6, 0x5424, &(0x7f0000184000)=0x0) recvmsg(r4, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f0000031000-0x60)=[{&(0x7f0000589000-0x8d)=""/141, 0x8d}], 0x1, &(0x7f0000590000)=""/0, 0x0, 0x0}, 0x0) [ 76.137622] binder: 12758:12779 ioctl c0306201 208fdfd0 returned -22 [ 76.161538] binder: 12792 RLIMIT_NICE not set [ 76.178414] binder: send failed reply for transaction 158 to 12764:12781 [ 76.249887] binder: 12799:12810 BC_ACQUIRE_DONE node 159 has no pending acquire request [ 76.249905] binder: 12799:12810 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 76.249920] binder: 12799:12810 BC_FREE_BUFFER u0000000000000000 no match [ 76.249933] binder: 12799:12810 BC_INCREFS_DONE node 159 has no pending increfs request [ 76.249952] binder: 12799:12810 Release 1 refcount change on invalid ref 2 ret -22 [ 76.249961] binder: 12799:12810 unknown command 0 [ 76.249971] binder: 12799:12810 ioctl c0306201 208fdfd0 returned -22 [ 76.327619] binder: 12764:12781 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00002c1000)="75736572aa736563757269747900", 0x2000000005) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstatfs(r0, &(0x7f0000e82000-0x9a)=""/154) 2018/01/14 21:59:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d2f000)=0x0, &(0x7f0000ef5000)=0x4) mlockall(0x3) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) bind$bt_l2cap(r1, &(0x7f0000fd1000)={0x1f, 0x6, {0x2, 0x3b295db5, 0x7fff, 0x4, 0x800, 0x20}, 0x6, 0xffff}, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f00005ad000-0x14)={0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0}, 0x14) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000bcb000)={0x3, 0xffffffffffffffff, 0x2, 0x7, 0x7f, 0x101, 0xfffffffffffffffc, 0x4e83c17, 0x1, 0x9}) bind$inet6(r0, &(0x7f00004d8000)={0xa, 0x0, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8001}, 0x1c) 2018/01/14 21:59:15 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000322000-0xb1)="130000001000ffdde200f49ff60f050000230a00", 0x14) fcntl$notify(r0, 0x402, 0x1) 2018/01/14 21:59:15 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f000012e000-0xc)={0x3, 0xffffffffffffffff, 0x0}) ioctl$KDMKTONE(r0, 0x4b30, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f00008a1000)={0x8, 0x5, &(0x7f0000384000-0x28)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@alu={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000434000)='GPL\x00', 0x20, 0xbc, &(0x7f000008f000-0xbc)=""/188, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) syz_open_dev$dspn(&(0x7f0000e1c000)='/dev/dsp#\x00', 0x2, 0x20000) 2018/01/14 21:59:15 executing program 6: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000001000-0x10)={0x2, 0x1, 0xffff, 0x8}, 0x10) mmap(&(0x7f0000000000/0xf8f000)=nil, 0xf8f000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0xfffffffffffffff7) openat$ptmx(0xffffffffffffff9c, &(0x7f00006d6000)='/dev/ptmx\x00', 0x8000, 0x0) mmap(&(0x7f0000f8f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000f8f000)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x8000) mmap(&(0x7f0000f8f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$ax25_int(r2, 0x101, 0x0, &(0x7f000009a000+0xedb)=0x0, &(0x7f0000f90000-0x4)=0x4) mmap(&(0x7f0000f8f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000f8f000)='/selinux/context\x00', 0x2, 0x0) mmap(&(0x7f0000f8f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000bca000)={0x1, &(0x7f0000f8f000)=[{0x0, 0x0}]}) mmap(&(0x7f0000f90000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f90000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000f90000)={0x5, [0xff, 0x80, 0x400, 0x8e4, 0x9]}, &(0x7f0000f91000-0x4)=0xe) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000a82000-0x8)={r4, 0x20}) sendto$inet6(r1, &(0x7f0000797000)="", 0x0, 0x4000000, &(0x7f00008e5000-0x1c)={0xa, 0x1, 0x0, @loopback={0x0, 0x1}, 0xffffffffffffffff}, 0x1c) mmap(&(0x7f0000f8f000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000f90000-0x10)={0x5, &(0x7f0000b7f000-0x14)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) listen(r1, 0x7) 2018/01/14 21:59:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:15 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000013000-0x58)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000e55000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 76.335085] binder: 12764:12781 BC_FREE_BUFFER u0000000000000000 no match [ 76.335098] binder: 12764:12781 BC_INCREFS_DONE u0000000000000000 no match [ 76.335111] binder: 12764:12781 Release 1 refcount change on invalid ref 2 ret -22 [ 76.335118] binder: 12764:12781 unknown command 0 [ 76.335129] binder: 12764:12781 ioctl c0306201 208fdfd0 returned -22 [ 76.377323] binder: undelivered TRANSACTION_COMPLETE 2018/01/14 21:59:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f000082e000)='/selinux/user\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000c4c000-0x8c)={0x4, 0xfffffffffffffffa, 0x1, 'queue1\x00', 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0x40085112, &(0x7f0000b18000)={{0xffffff92, 0x0}, {0xffffffb0, 0x0}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 76.382574] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.406513] binder_alloc: 12831: binder_alloc_buf, no vma [ 76.412460] binder: BINDER_SET_CONTEXT_MGR already set [ 76.412473] binder: 12825:12836 ioctl 40046207 0 returned -16 2018/01/14 21:59:15 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000000)="5e984f8ef3370200000000000000e0cfebeee5aee488d4b7b0bd0fa53a6a00014a63d3e6b08f", &(0x7f0000ffb000)=0x0, &(0x7f0000001000-0x4)=0x0, &(0x7f0000f2b000)="") lgetxattr(&(0x7f0000843000-0x8)='./file0\x00', &(0x7f0000af8000)=@random={'user.\x00', 'selinuxppp1@!+()em0vmnet0vboxnet0&/)%:\x00'}, &(0x7f0000817000)=""/41, 0x29) r0 = syz_open_dev$sg(&(0x7f0000001000-0x9)='/dev/sg#\x00', 0xfffffffffffffffe, 0x101002) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$nfc_llcp(r0, &(0x7f0000000000)=[{&(0x7f0000000000)={0x27, 0x3, 0x800, 0x3, 0xfffffffffffff7d4, 0x1ff, "84309ee48dbcb3929c281c752b0710a4f845ddb28237db1a8b129545c290e205a22797a085780b5134c2e4bcaa0af1beaf22345f0fcfc5b35c98e2fc068a62", 0x2}, 0x60, &(0x7f0000000000)=[{&(0x7f0000000000)="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", 0x1000}, {&(0x7f0000002000-0x71)="716dc21797ff6029e5bb0414c0a29f6e1f44700a73b20c78b1182ec06386f19e0b47322c94a9cf5d3d6ee516120a117396388f3d1a9aaf2099bce4d50f2d38d40a3727ff21b0085b7bda7ea2e15f209768067c054f3a89747baeb8c541b478f002b0dbcc2b3afc9e07afcad2a297ccfff1", 0x71}, {&(0x7f0000002000-0x1b)="655450fe8ae51127f0a1c616046e04dc5bb73a8586c50bd9e17159", 0x1b}, {&(0x7f0000002000-0xa2)="5c17221fd4e94c082d93638fe6bbf790e367b85384b31d4a79e1c348ef7907b6bd0d27e1937bacf3bb491653c74186ad0a3644bf4e0b1494edade97822b43d92719d1800968cf51cfcd15272baecab6e26a7a9a3c1d46ea8a35ac6b559562a00b2c07dc6982d1bb80c24adc618516568bcd22ad3154553c623021bb1d55537ff6a57ab5d702867bca3836a165e2f266d47b9ced27968da28fb5df06536d59b42dd81", 0xa2}, {&(0x7f0000001000-0x23)="5ff771d68b4ab409e138d1478052ea4896789778d5651944bdf1aa56a01b77e8453bf8", 0x23}, {&(0x7f0000001000)="ce872716ab6c6ba21558ecc9ef6f92526542053d0268af79857e68b85bccf8cffb65060a2734adee01ff51c3cd81182ba2e88845a38dd4112a1fb1ad0126f594b7c1370c26a4e6f54fcbe6e8e9a7aeecca5f46431ad7dcccb1104168aeb3d3875f45016117b009aa3a9adc008105225461e6c4271ad65c8618ea2d3ca09582b9365f6d6e90a351e071f9e1b10c21be3b5ab70fa4610ec6d32da90bec00ad486b26157d0fe08f6aa2508c50f8099eb113386e9ce6aac11bf09f5f997c3c496898fdae9ee6627997fbdaac07d64a596951efa5bb28c4d038edd9f65cb48c540e5971e23e16", 0xe4}], 0x6, &(0x7f0000002000-0x28)={0x28, 0x11e, 0x6, "4698d608ea043bedfc18a5e7d7665ab4dc1a"}, 0x28, 0x10}, {&(0x7f0000001000-0x60)={0x27, 0x7f, 0xffff, 0x7, 0x1, 0x8000, "7667a8ef9522ebdf3762e6c20c3778c2ee3121861ec306e784edf4a993262db350607e083270efd167585ee6517bc1b514e1ab8ad20f1016bc6ea9cca380da", 0x8}, 0x60, &(0x7f0000000000)=[{&(0x7f0000001000-0xd7)="fa4b00b1e06f85e17d0b9c6b4aed25af3ef872c4c86cd737ded0597e4257dcac7f73d488c76d03b1a2a3120b93587f593fb5f0f1fb65076406794ef7108b8c8225ec67e018398f4bbc497d2eebf2bf56089d89d8bb317adcd93616ae3472579694cc2c1fc2c2f5c890f999497cfd3379db48a0abb50bb754c019eea8d74348b7f71f6bb06ebdf8593c81862e366a660cbbd8239bda9024fc83fd9234d6821c98bd0a1f709a145bb07bd52b5219beb037eebb3185d7f491c6f6e3d1f088de76756a31c4a601acff57a07a361574d627cddb7e3be19c9107", 0xd7}, {&(0x7f0000000000)="7ed0c928ec1dbdf6aec2352e0630481c5c3d096db7d31a6b30476747ed900f1278c536f327355bdba7967eca9ee3ba6ac0f518d9f99cc47e6187b0836693e10ed7c136da5da91fc5ef616ceea00865a4e63ed2fb4b5abc726f1cef7c01e956256a344b0a50f7589fae388fc44b7aaf0fc19436bcc0c867611d5ce3ada30da548c14e466ff3cbc57851b3331338a4843fd7c438078eaede2be381312248083dab8bc307a685538cac6353237bd697fd8966adeb08847063ba0c6f0c92ab1d6cd9f88656ac1b72a0d823f9bdf9319b78964f1a18736911f5baf47eaca0209054", 0xdf}, {&(0x7f0000000000)="e417e5122b03ea38d922e71e87c97133", 0x10}], 0x3, &(0x7f0000001000)={0xa8, 0x118, 0xffffffffffff92ec, "aaad93f9323773bc98577e822903f239e2df93aea6861f2b4f9a4a8e58f210ef4aa917eb9d7b6228eb85240fdd2d51520f3e6e5fc0ce99a123dbdae53015866d93a837a22999c993c4b6e06e83d7d2164fe0742110f7370c3f9db84cc71b718751c77a4e10fa6ce1d8dd18add0d1f64f7d716c748f06f739998e82bd72a8d6e6ffd9ef490e58926e718c3ee1b79332508892046db7e6dc1c"}, 0xa8, 0x20040000}], 0x2, 0x80) r1 = dup(0xffffffffffffff9c) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0xfff) 2018/01/14 21:59:15 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) wait4(r0, 0x0, 0xa0000001, &(0x7f0000969000)={{0x0, 0x0}, {0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00003b9000)='net/ip_mr_cache\x00') sendfile(r1, r1, 0x0, 0x8001) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000435000)={0x0, 0x2, 0x8}, &(0x7f0000853000)=0x8) dup2(r1, r1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f000085c000-0xa0)={r2, @in={{0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x20, 0x4, 0x2, 0xa01e, 0x3f}, &(0x7f0000add000-0x4)=0xa0) 2018/01/14 21:59:15 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d2f000)=0x0, &(0x7f0000ef5000)=0x4) mlockall(0x3) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) bind$bt_l2cap(r1, &(0x7f0000fd1000)={0x1f, 0x6, {0x2, 0x3b295db5, 0x7fff, 0x4, 0x800, 0x20}, 0x6, 0xffff}, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f00005ad000-0x14)={0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0}, 0x14) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000bcb000)={0x3, 0xffffffffffffffff, 0x2, 0x7, 0x7f, 0x101, 0xfffffffffffffffc, 0x4e83c17, 0x1, 0x9}) bind$inet6(r0, &(0x7f00004d8000)={0xa, 0x0, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8001}, 0x1c) [ 76.432433] binder: 12831:12835 transaction failed 29189/-3, size 0-0 line 2957 2018/01/14 21:59:15 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000c55000)='/dev/net/tun\x00', 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) r3 = socket(0x10002000000011, 0x8000000080003, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000928000-0x28)={@common="7379af6b616c6c6500001000", @ifru_settings={0x1, 0xffffffffffffffff, @sync=&(0x7f0000c15000)={0x8e80, 0xffffffffffffffff, 0x0}}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000630000-0x20)={@common='bcsf0\x00', @ifru_flags=0x20304}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000113000)=0x1000, 0x4) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000995000)=0x7fff, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000b13000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) bind$packet(r3, &(0x7f0000c85000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, 0x14) dup2(r3, r2) write$tun(r2, &(0x7f00008c5000)=@hdr={0x0, 0x3, 0x0, 0x5, 0x0, 0x0, @ipv4={{0x18, 0x4, 0x0, 0x0, 0x69, 0xffffffffffffffff, 0x0, 0x0, 0x29, 0x0, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, {[@generic={0x0, 0xd, "e2c2471ce0e2754fb962d6"}, @cipso={0x86, 0x2e, 0x3, [{0x7, 0x7, "1183a25cb8"}, {0x5, 0xd, "b119ecb8c92188fef728d1"}, {0x5, 0x9, "dd7c6c4504ca5c"}, {0x6, 0xb, "3c5169d45217195590"}]}, @end={0x0}, @end={0x0}, @generic={0x87, 0xe, "0e4a45db1690755120a368a1"}]}}, @igmp={0x17, 0x0, 0x0, @empty=0x0, "ce"}}}, 0x73) 2018/01/14 21:59:15 executing program 6: pipe(&(0x7f0000ccf000)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001000-0x28)={'vcan0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f0000178000)="fde1a53e1d2746dd8ef3a4640ecb54e2e43c027c9564e52a6e7e4a7fe6422341d8ca09a74029550b9b3cdde34e5d1e55ac32bd15afdd230b810bbb9d161279334dd0c588e5f6d5bb61342ad1f4e0aded297c875ae0f905177e02f8e48872a283edb9b6ec1b189009b37c445d2a06f2addf8361c76ed0ff2af1bd4b612684efef347fd092bd8754c54e46880fc918b413c573767009f6676816b8a05bb6318c0883889f141acfbcf11f25070d02e4ba6361fa50af3a5f38fcf9b916ddb593b193894125a1d035286ff7e97f068b15072428250739f69b52234adb1c0306", 0xdd, 0x20000050, &(0x7f0000001000-0x14)={0x11, 0x2, r2, 0x1, 0x80, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0]}, 0x14) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001000+0x64a)={0x0, 0x78, &(0x7f0000001000-0x78)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0x13}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x2, @dev={0xac, 0x14, 0x0, 0xa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x3, 0x7fffffff, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xc3}, @in6={0xa, 0x1, 0x8, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x80}, @in={0x2, 0x1, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000002000-0x4)=0x10) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000002000-0xa2)={r3, 0x9a, "5ccc94eba4f7fb3e14786cc6eaeefc0bc7c39178e8824e02f16180ae8e462408f3694e5e90c2020b96f6711ac7f4a4f3dc145f62543dec595d20204cde89b53f9aa5b8772ce1f767fab7bad620a6737280ac5a59a3107b802e1f885a5043bdab6bc221bffc535440369625043895a1d9db76c2212d0b41a5a9f1268842b279fd74d5265652e0d7072fd128e82a69516264a1feddf304a75ff944"}, &(0x7f0000002000-0x4)=0xa2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f0000002000)={0x1000, 0x4, 0x1, 0x1, 0xfffffffffffffffb, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000004000-0x9c)={r3, 0x94, "616080051cff62a6d35e387f076bab9ffda35af00aa6c1a3f8991a54457b205f8b48beac8c74f27f56729302a43cc0dc6fbe4ec09180404b716f6e1c7cb4622f040a532aeb819eefd6c36f01a37f3dce786226cbdf5925e2e7251a3f63b2cf858c2f9901c11f06e281ac60888bf08ccb2d7bfb1e76e7bcc14d8cd0c44739572637cbe0829ac80d473b65e698e4831248c48a9dea"}, &(0x7f0000004000-0x4)=0x9c) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000001000)={@generic="d1efb210f37b24e6fdbdebea527f1db1", @ifru_addrs={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000001000-0x10)={0x0, 0x0}, &(0x7f0000002000)=0x10) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000004000)=""/84) ioctl$VT_DISALLOCATE(r1, 0x5608) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000005000-0x4)=0x0, &(0x7f0000002000)=0x4) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom$inet6(r0, &(0x7f0000006000-0xe0)=""/224, 0xe0, 0x0, &(0x7f0000001000)={0xa, 0x3, 0xfffffffffffffffe, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x10000}, 0x1c) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000006000)={0x0, 0x0, 0x0}, &(0x7f0000005000)=0xc) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000003000-0x18)={0x0, 0x40, 0x8, &(0x7f0000007000)=0x0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001000-0x18)={r4, 0x3, 0x0, 0xffffffff, 0x7}, &(0x7f0000001000-0x4)=0x18) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000008000)={r5, 0x80000001}, &(0x7f0000005000)=0x8) 2018/01/14 21:59:15 executing program 3: shmctl$SHM_LOCK(0x0, 0xb) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/rtc\x00', 0x400000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000001000-0x80)={[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00007ed000)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) utimensat(r1, &(0x7f0000002000)='./file0\x00', &(0x7f0000003000-0x20)={{0x0, 0x0}, {0x0, 0x0}}, 0x0) clone(0x80000000, &(0x7f0000001000-0x1000)="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", &(0x7f0000001000-0x4)=0x0, &(0x7f0000001000)=0x0, &(0x7f0000001000)="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") mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) flistxattr(r1, &(0x7f0000001000)=""/49, 0x31) ioctl$VT_DISALLOCATE(r1, 0x5608) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f0000000000+0x3ab)=[{&(0x7f0000001000-0xd7)=""/215, 0xd7}, {&(0x7f0000003000-0x35)=""/53, 0x35}, {&(0x7f0000001000-0x63)=""/99, 0x63}, {&(0x7f0000003000-0xe4)=""/228, 0xe4}, {&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000-0x96)=""/150, 0x96}, {&(0x7f0000002000-0x81)=""/129, 0x81}, {&(0x7f0000003000-0x1000)=""/4096, 0x1000}], 0x8) shmctl$SHM_UNLOCK(0x0, 0xc) [ 76.466430] binder: 12825:12847 BC_ACQUIRE_DONE u0000000000000000 no match [ 76.474887] binder: 12831:12835 BC_ACQUIRE_DONE u0000000000000000 no match [ 76.474897] binder: 12831:12835 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:15 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:15 executing program 2: mmap(&(0x7f0000000000/0xd12000)=nil, 0xd12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) shutdown(r0, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@common='sit0\x00', @ifru_addrs={0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) mmap(&(0x7f0000d12000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000d10000)=[], 0x0, 0x0, 0x0) r1 = socket(0x5, 0x800, 0xffffffffffff44bf) mmap(&(0x7f0000d12000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000d12000)="1ab67415600918995deca2fe2b7985954c7ee7a46a2c547415ac558c67324cb9ee98b50a5e23733118cc044d09ac788ccd480f4f2ffac7ec5172881f81f10a5e978340822b1d3053a54beae8017d8294bc77320cd25bcc1aee7e8f069889e5681e1125be8c7805ca76ef53b3ef17fe2a438ba61779dd691d4ca5939fd6c5a6f92e05cf64b422caaddebf82befb6c", 0x8e) connect(r0, &(0x7f00001a1000-0x60)=@nfc_llcp={0x27, 0x1, 0x40, 0x7, 0x7fff, 0x6, "0b5fd85247440102bf045d3fdd154ca602cb4ce57345499a398000b08e5f459ec557d4a7c8bf7493aeb897fa8b7e451317aa3c6e72226d61265bea8cee19af", 0x7f}, 0x60) mmap(&(0x7f0000d13000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000d13000)=""/157, 0x9d, 0x3) mmap(&(0x7f0000d14000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000d15000-0x10)={0x0, 0x0}, &(0x7f0000be9000)=0x10) [ 76.474942] binder: 12831:12835 BC_FREE_BUFFER u0000000000000000 no match [ 76.474952] binder: 12831:12835 BC_INCREFS_DONE u0000000000000000 no match [ 76.474965] binder: 12831:12835 Release 1 refcount change on invalid ref 2 ret -22 [ 76.474973] binder: 12831:12835 unknown command 0 [ 76.474982] binder: 12831:12835 ioctl c0306201 208fdfd0 returned -22 [ 76.475356] binder: 12835 RLIMIT_NICE not set [ 76.522590] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.543772] binder_alloc: 12870: binder_alloc_buf, no vma [ 76.543797] binder: 12870:12873 transaction failed 29189/-3, size 0-0 line 2957 [ 76.565551] binder: 12870:12873 BC_ACQUIRE_DONE node 162 has no pending acquire request [ 76.565568] binder: 12870:12873 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 76.565581] binder: 12870:12873 BC_FREE_BUFFER u0000000000000000 no match [ 76.565594] binder: 12870:12873 BC_INCREFS_DONE node 162 has no pending increfs request [ 76.565612] binder: 12870:12873 Release 1 refcount change on invalid ref 2 ret -22 [ 76.565619] binder: 12870:12873 unknown command 0 [ 76.565630] binder: 12870:12873 ioctl c0306201 208fdfd0 returned -22 [ 76.571225] binder: 12873 RLIMIT_NICE not set 2018/01/14 21:59:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000064000)='/dev/input/mouse#\x00', 0x1ff, 0x80440) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000639000-0x2)=0x6, &(0x7f0000fa9000)=0x2) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000360000)={&(0x7f000092f000/0x3000)=nil, 0x3000}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000842000-0x98)={0x0, @in={{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7, 0x8}, &(0x7f0000d41000)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00002ce000)={r1, 0x2, 0x57}, &(0x7f0000b35000)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000ba4000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r0, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000c5b000)={0x0, 0x0}) capset(&(0x7f0000a31000)={0x19980330, 0x0}, &(0x7f00009b3000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_RMID(0x0, 0x0, 0x10) 2018/01/14 21:59:16 executing program 2: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000c27000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000fb7000)='./file0\x00', 0x141046, 0xffffffffffffffff) mmap(&(0x7f0000333000/0x3000)=nil, 0x3000, 0x0, 0x50, r0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00001a2000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000834000-0x8)='./file0\x00', 0x82) 2018/01/14 21:59:16 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffff9c, r0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000000)=0x0, &(0x7f0000000000+0xf71)=0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x80003, 0x6) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000ee7000)=0xd34, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000d47000-0x14)={0x0, 0x4, 0x200, 0x5, 0x1, 0xa1}, &(0x7f0000748000-0x4)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000b31000)={0xd04, 0x9, 0x8008, 0x1, 0x393, 0x7a9, 0x2, 0x3ff, r3}, &(0x7f0000f42000)=0x20) sendto$inet(r2, &(0x7f0000057000)="", 0x0, 0x0, &(0x7f0000eea000)={0x2, 0xffffffffffffffff, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r4 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000e07000)='/selinux/access\x00', 0x2, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000676000-0x38)={0x3, 0x0, [{0x40000fff, 0x0, 0x100000001}, {0x400000b2, 0x0, 0x8}, {0xb5b, 0x0, 0xe15}]}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000e03000)={r3, @in={{0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x8, 0x7, 0x2, 0x4}, &(0x7f0000df3000)=0xa0) ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00008c5000)=""/113) recvfrom$inet(r2, &(0x7f0000430000)=""/113, 0x71, 0x2060, &(0x7f0000ef4000-0x10)={0x2, 0xffffffffffffffff, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000a09000)={r3, 0xffff, 0x62, 0x2, 0x1, 0x7ff}, 0x14) 2018/01/14 21:59:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000eef000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c51000)="", 0x0) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f00001f5000)={&(0x7f0000f80000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, 0x7e, &(0x7f0000613000-0x80)=[{&(0x7f0000f81000)=""/4096, 0x1000}], 0x1, &(0x7f0000f80000-0x36)=""/87, 0x57, 0x0}, 0x0) 2018/01/14 21:59:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d2f000)=0x0, &(0x7f0000ef5000)=0x4) mlockall(0x3) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) bind$bt_l2cap(r1, &(0x7f0000fd1000)={0x1f, 0x6, {0x2, 0x3b295db5, 0x7fff, 0x4, 0x800, 0x20}, 0x6, 0xffff}, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f00005ad000-0x14)={0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0}, 0x14) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000bcb000)={0x3, 0xffffffffffffffff, 0x2, 0x7, 0x7f, 0x101, 0xfffffffffffffffc, 0x4e83c17, 0x1, 0x9}) bind$inet6(r0, &(0x7f00004d8000)={0xa, 0x0, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8001}, 0x1c) 2018/01/14 21:59:16 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000099f000)='/dev/sequencer\x00', 0x40, 0x0) ioctl$TIOCNXCL(r0, 0x540d) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={@common='ipddp0\x00', &(0x7f0000859000)=@ethtool_gfeatures={0x3a, 0x3, [{0x5, 0x6, 0xffffffffffffffff, 0x6}, {0x52a, 0xffffffffffff8001, 0x2, 0x56}, {0x79c2, 0x3, 0x8, 0x3}]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) write$tun(r0, &(0x7f0000001000)=@pi={0x0, 0x80f3, @ipv6={0x400, 0x6, "6aece1", 0x18d, 0x2b, 0x40, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @loopback={0x0, 0x1}, {[@dstopts={0x3a, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], []}, @dstopts={0x0, 0xd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@pad1={0x0, 0x1, 0x0}, @jumbo={0xc2, 0x4, 0x3f}, @jumbo={0xc2, 0x4, 0x9}, @generic={0x3, 0x51, "7d6b8d38ccdc1bd23d787cc0150e0ad39af13fbea29f4a3523a019563dd606942a5e35db7f76d4e8f25e4aebeedb8c8015c1cc15990958bbcac4e2ec8a886d2a8d44563e0162dc17f378e467e128ea7d98"}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x3b, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@ra={0x5, 0x2, 0x1ff}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, @fragment={0x8, 0x0, 0x81, 0x5, 0x0, 0x0, 0x2}, @dstopts={0x5e, 0xe, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@calipso={0x7, 0x10, {0x1, 0x2, 0xe9bf, 0x200, [0x6]}}, @calipso={0x7, 0x10, {0x1ff, 0x2, 0x80000000, 0x84, [0x81]}}, @calipso={0x7, 0x10, {0x66, 0x2, 0x48e83ff5, 0xff, [0xf3]}}, @calipso={0x7, 0x38, {0x9, 0xc, 0x8, 0x5, [0x2, 0xa8ab, 0x9, 0x0, 0x6, 0x800]}}, @pad1={0x0, 0x1, 0x0}, @ra={0x5, 0x2, 0x7}]}, @hopopts={0x3c, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@jumbo={0xc2, 0x4, 0x4}, @jumbo={0xc2, 0x4, 0x4}]}, @routing={0x2f, 0x4, 0x3, 0x2, 0x0, [@mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x6, 0x0, 0x10001, 0x1000, 0x0, 0x200000000000000, 0x1}], @icmpv6=@echo_request={0x80, 0x0, 0x0, 0x6, 0x67, "1dad48d43f206b22070c5db0ff561ae3d635ca"}}}}, 0x1b9) remap_file_pages(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x4, 0x2000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000003000-0x12)={@common='sit0\x00', 0x2}) fadvise64(r0, 0x41, 0x4, 0x4) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = getuid() mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000003000)=0xc) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000002000)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002000+0xc7e)={0x0, 0x0, 0x0}, &(0x7f0000001000-0x4)=0xc) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003000)={0x0, 0x0, 0x0}, &(0x7f0000003000)=0xc) r7 = getpgrp(0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000004000-0x4)=0x0, &(0x7f0000003000-0x4)=0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000004000-0x8)='./file0\x00', &(0x7f0000004000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = fcntl$getown(r0, 0x9) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000003000)=0x0, &(0x7f0000003000)=0x0, &(0x7f0000002000)=0x0) r12 = getgid() mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000003000-0x4)=0xc) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) stat(&(0x7f0000004000-0x8)='./file0\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getgid() r16 = gettid() mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003000)={{{@in=@broadcast=0x0, @in=@loopback=0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@dev={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000002000-0x4)=0xe8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000004000-0x4)=0x0, &(0x7f0000004000-0x4)=0x0, &(0x7f0000003000)=0x0) r19 = getpgid(0xffffffffffffffff) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000001000-0x4)=0x0, &(0x7f0000003000)=0x0, &(0x7f0000004000-0x4)=0x0) r21 = getgid() mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003000)=0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000004000-0xe8)={{{@in6=@remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000002000)=0xe8) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getresgid(&(0x7f0000003000)=0x0, &(0x7f0000004000-0x4)=0x0, &(0x7f0000003000)=0x0) r25 = gettid() stat(&(0x7f0000002000-0x8)='./file0\x00', &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000004000-0x8)='./file0\x00', &(0x7f0000002000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r28 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003000-0xf)='/dev/sequencer\x00', 0xa040, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$unix(r0, &(0x7f0000003000-0xa8)=[{&(0x7f0000001000-0x8)=@abs={0x1, 0x0, 0x2}, 0x8, &(0x7f0000001000)=[{&(0x7f0000003000)="", 0x0}, {&(0x7f0000000000)="71033bb1fffbb357a846bfd336ea758052c0a4e09ce71ff43f27315f24c695d0e322d60d6dcf8a5bdcf8f6070badd6d718d8d0316b3f3f4d1f32cc10b14248d5eb36db60", 0x44}, {&(0x7f0000003000)="04b6bc5bbf9614706726018e6976de366b403d90358ec4d17b465932cda2d963e37876451bf23d9e156040ad3373fda378f6985ea74331ec63706c80c817ea23e5424df0fbee73815b7c99d9fd29b310bc4344fe2fcc0d584f5af61126fb9be2b64ff27fabe615b15af3a89a83cc72be092ab4d516f36c41805f900281288a3435be5e52e4bf6caee0a931cd1365540bf6d1b226669bd815d239149dae0326301089c0b2fb29be0005d3a1032ed5bc8ce48a9d36e90edfa85044096d407582bdb1385f7d69aad3924415e8ba918d76eb34ea4562a42a45632c5a2f9bcc0c8add7cb11480a85a79775e90fe80", 0xec}, {&(0x7f0000003000-0x5c)="34947c5808c1c842a62d0826690ef04e5dea3729eb6ddc686f5c543429b30c92afdda445b7b12f958c5910f798677b5a7e740018ef1dff2b79ae996473f1d7d3f1b1391b287e8c61ab5fe370ac391f41bfb0fa306f367ccab3167db3", 0x5c}, {&(0x7f0000002000)="b87d874f3f210f7c964da928e3f5158a936ccfdf98b681fc51fb553180bc2b165e45c299a7e11eb84224eebb5888499cebddfc86b9e409d369e50b03817782171322d2a5bf53efffb6b5e0207fae377fff2bc884f6f9566b22ba4e03c524a524a66dfacf68df6b27daad61ded513a6", 0x6f}, {&(0x7f0000004000-0x8b)="430915b3acdabb9ea4acf2a5e8436aa1b693d2b4de6220c2f7c7889a84cca2b0a4c3ad0526473674afe910ea56ff3e47833526e9da6d5b891a32610813e231863e368428a4678442bae8fae6edb8fd2fdfdfa4215c4fe8815b535282148ebb3703f03a6cf6f7168ca7a38bde99c7aebf012201871c68efceced0c9f9bce7f100976531dcca23affa58520e", 0x8b}], 0x6, &(0x7f0000003000-0xb0)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @cred={0x20, 0x1, 0x2, r1, r2, r3}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0xb0, 0x40000}, {&(0x7f0000003000)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000002000-0x30)=[{&(0x7f0000001000)="7bc577fcc1a2d44b5da5c072d19c5128fc478908c7ed08431715ffbcfe3efcf0112e8f7a8d96e4dd06006c2059645763d0c123f48cdbeedd5f6c903d98e5b8b8009a304a6a07c303a16a24549f5f412128375fb200074188152b03644651c5a8ba423d923a0234", 0x67}, {&(0x7f0000000000)="46f84caa55ac9110fa48397b79e4285b0126812942314bff5709a26740e2ddc3366b0ae6fbbf2bc2963fa211750286146dbe83f8c461e31d25cf13af", 0x3c}, {&(0x7f0000001000-0x78)="126ac99df82634d228a2be769c4bd5714c8f5e5067379666d683dcc28945c684e84c0e908c5e42a548d27a36a61192d2dd65ebfcf19f7b1438b019d25ce67b283899fe7f51d698d28cc03283bd54f17e73c973c12a3f96f3b962124623056c9866896f5e741ce21e7cf1d810814ae4193f972191dbb3b1e2", 0x78}], 0x3, &(0x7f0000001000)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @cred={0x20, 0x1, 0x2, r22, r23, r24}, @cred={0x20, 0x1, 0x2, r25, r26, r27}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x128, 0x50}, {&(0x7f0000002000-0x6)=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000001000-0x30)=[{&(0x7f0000003000)="c9695f6832dbbe8cf5e2886b93a7a254aec8733fef2384f86717659595ab55f984eaf7566a98545c1e4309d69fa649b0a0975bc6b6707ec2c02fedaccb022fd4c009d846fc9bdd73fd4cabfdc89ad02e65243795b07adfa2058b4a7419957a766b53fc1b7e8e7758a99d018062c63dad29de8e5a2690276709cf8f2848e2535c7ed6c0b852c09933380d1b9e1f420147cfc1bb2088449de2aa13d197fd6bc6cdbcccc21c", 0xa4}, {&(0x7f0000004000-0xbe)="4581e72e5fe05b7b6198837d150ed85f4ffa522112a25c69f7065144cddaee19d5f603ec34de9fec67207815d55b0596ae48727245dac607d758cef53b86c9982252dbe184f7bf97d079748fc30153a5c0e97089ebd677d172629ef3845a808849996936d6efecabe66eb232e36982d01fc7c0ee56909842d0c3012459c17f6a74904fff9315fd2b915777b888ee56a94e9cb7d24960d089479450bdd9fd94832f5996771b2a774bb7df85c91e0d1c2757168b431e597684df4799867cc9", 0xbe}, {&(0x7f0000001000-0x5b)="89fd4eb0beb893bb4e9e0041696ab23ad0797b2ad086fdcd8a0afbb71c93ca341792a6a69c92ef88fef0054b1442e3adb926c59f5e905b2e1eea2b8d29ee223c54e2e45c8c33f36e4a9367a8995b6f80ddaae915ac2ecde1b437ec", 0x5b}], 0x3, &(0x7f0000004000-0x30)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r28, r0, r0]}], 0x30, 0x40}], 0x3, 0x40) [ 76.727571] binder: 12825:12847 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 76.735174] binder: 12825:12847 BC_FREE_BUFFER u0000000000000000 no match [ 76.742261] binder: 12825:12847 BC_INCREFS_DONE u0000000000000000 no match [ 76.749473] binder: 12825:12847 Release 1 refcount change on invalid ref 2 ret -22 [ 76.757293] binder: 12825:12847 unknown command 0 [ 76.762188] binder: 12825:12847 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000095f000)={0x8, 0x5, &(0x7f00007b8000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@alu={0x807, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f000017e000-0x4)='GPL\x00', 0x20, 0xbc, &(0x7f000008f000-0xbc)=""/188, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x32) r0 = syz_open_procfs(0x0, &(0x7f0000af8000)='numa_maps\x00') setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00005ff000)={0x6, 0xffe, 0x6, 0xc773, 0x7}, 0xfffffffffffffcfd) 2018/01/14 21:59:16 executing program 3: mmap(&(0x7f0000000000/0x1f000)=nil, 0x1f000, 0x3, 0x72, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f000001b000-0xe)='/selinux/load\x00', 0x2, 0x0) r1 = openat(r0, &(0x7f0000013000-0x8)='./file0\x00', 0x80000, 0x0) symlinkat(&(0x7f000001f000-0x3)='./file0/file0\x00', r1, &(0x7f0000013000-0x8)='./file0\x00') r2 = creat(&(0x7f000000f000)='./file0/file0/bus\x00', 0x0) fcntl$setlease(r1, 0x400, 0x8000) ftruncate(r2, 0x0) 2018/01/14 21:59:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d2f000)=0x0, &(0x7f0000ef5000)=0x4) mlockall(0x3) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) bind$bt_l2cap(r1, &(0x7f0000fd1000)={0x1f, 0x6, {0x2, 0x3b295db5, 0x7fff, 0x4, 0x800, 0x20}, 0x6, 0xffff}, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f00005ad000-0x14)={0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0}, 0x14) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000bcb000)={0x3, 0xffffffffffffffff, 0x2, 0x7, 0x7f, 0x101, 0xfffffffffffffffc, 0x4e83c17, 0x1, 0x9}) bind$inet6(r0, &(0x7f00004d8000)={0xa, 0x0, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8001}, 0x1c) [ 76.796519] binder_alloc: 12890: binder_alloc_buf, no vma [ 76.814553] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/14 21:59:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000e000-0xa)='./control\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000f5e000)='./control\x00', 0x3fa) r1 = open(&(0x7f0000028000)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f000002d000-0xa)='./control\x00', 0x0) r2 = openat(r1, &(0x7f0000eb7000)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000f9b000)='./control\x00', 0xc0) openat(r1, &(0x7f0000b03000)='./control\x00', 0x0, 0x0) 2018/01/14 21:59:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_netdev_private(r0, 0x89f6, &(0x7f0000269000-0xbc)="") r1 = syz_open_dev$usbmon(&(0x7f0000161000-0xd)='/dev/usbmon#\x00', 0xffffffffffff8001, 0xc0802) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x3) socket$inet6(0xa, 0x6, 0x0) 2018/01/14 21:59:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 76.814563] binder: 12893:12896 ioctl 40046207 0 returned -16 [ 76.845258] binder: 12893:12907 BC_ACQUIRE_DONE u0000000000000000 no match [ 76.845270] binder: 12893:12907 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 76.845283] binder: 12893:12907 BC_FREE_BUFFER u0000000000000000 no match [ 76.845295] binder: 12893:12907 BC_INCREFS_DONE u0000000000000000 no match [ 76.845310] binder: 12893:12907 Release 1 refcount change on invalid ref 2 ret -22 [ 76.845317] binder: 12893:12907 unknown command 0 [ 76.845327] binder: 12893:12907 ioctl c0306201 208fdfd0 returned -22 [ 76.862766] binder: 12890:12903 BC_ACQUIRE_DONE node 164 has no pending acquire request [ 76.862785] binder: 12890:12903 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 76.886816] binder: 12918 RLIMIT_NICE not set [ 76.905167] binder: BINDER_SET_CONTEXT_MGR already set [ 76.905176] binder: 12916:12921 ioctl 40046207 0 returned -16 [ 76.944692] binder: 12916:12923 BC_ACQUIRE_DONE u0000000000000000 no match [ 76.944703] binder: 12916:12923 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 76.944717] binder: 12916:12923 BC_FREE_BUFFER u0000000000000000 no match [ 76.944728] binder: 12916:12923 BC_INCREFS_DONE u0000000000000000 no match [ 76.944741] binder: 12916:12923 Release 1 refcount change on invalid ref 2 ret -22 [ 76.944747] binder: 12916:12923 unknown command 0 [ 76.944758] binder: 12916:12923 ioctl c0306201 208fdfd0 returned -22 [ 77.026501] binder: 12890:12895 transaction failed 29189/-3, size 0-0 line 2957 [ 77.026512] binder: 12890:12903 BC_FREE_BUFFER u0000000000000000 no match [ 77.026528] binder: 12890:12903 BC_INCREFS_DONE node 164 has no pending increfs request 2018/01/14 21:59:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d2f000)=0x0, &(0x7f0000ef5000)=0x4) mlockall(0x3) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) bind$bt_l2cap(r1, &(0x7f0000fd1000)={0x1f, 0x6, {0x2, 0x3b295db5, 0x7fff, 0x4, 0x800, 0x20}, 0x6, 0xffff}, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f00005ad000-0x14)={0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0}, 0x14) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000bcb000)={0x3, 0xffffffffffffffff, 0x2, 0x7, 0x7f, 0x101, 0xfffffffffffffffc, 0x4e83c17, 0x1, 0x9}) bind$inet6(r0, &(0x7f00004d8000)={0xa, 0x0, 0x2, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x8001}, 0x1c) 2018/01/14 21:59:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:16 executing program 7: mmap(&(0x7f0000000000/0xd000)=nil, 0xd000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000000d000)='/dev/sequencer2\x00', 0x2, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000007000)='/selinux/load\x00', 0x2, 0x0) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000002000-0x70)={[{0x0, 0x2, 0x101, 0x1, 0x4, 0x45, 0x1, 0x200, 0x100, 0x7f, 0x37c, 0x8, 0x869}, {0x1, 0x9, 0x200, 0x9, 0x8, 0x5dc2, 0xfffffffffffffffb, 0x3f, 0x1000, 0x9, 0xffffffff, 0x1f, 0x7f}, {0x400, 0x6, 0x5, 0x8cd, 0x3, 0xfffffffffffffff7, 0x2, 0x8, 0x8, 0x0, 0x8, 0xd70e, 0x80000001}], 0xad9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet(0x10, 0x2, 0x0) sendto$inet(r1, &(0x7f000000a000)="32000000180025ffff0700940d0914040201c2fe200000fd000000000d001600008444000100024fe514eea4eb4e56d7182e", 0x32, 0x0, 0x0, 0x0) 2018/01/14 21:59:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000fc2000)='./file0\x00', 0x141046, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000fb2000-0x12)='/dev/input/event#\x00', 0x2, 0x101002) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00004dd000)={0x7, 0x3, 0x101, 0x200, 0x2, 0x3}) write$evdev(r0, &(0x7f0000a12000)=[{{0x0, 0x2710}, 0x1, 0x3a, 0x2}], 0x18) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f000095c000-0x10)={0x1, 0x0, &(0x7f0000606000+0x38f)=""}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f000020f000-0x10)={0x4, &(0x7f00000d2000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f000057f000)={r2, 0x3b}) ftruncate(r0, 0x10000) sendfile(r1, r0, 0x0, 0x72439a6f) 2018/01/14 21:59:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x3, 0x84) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x21}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x10001, 0x0, 0x0, 0x0}, 0x14) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f00000ec000)=0x0, 0x4) 2018/01/14 21:59:16 executing program 0: mmap(&(0x7f0000000000/0xfec000)=nil, 0xfec000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f000089a000-0xe)='/selinux/user\x00', 0x2, 0x0) mmap(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000fed000-0x6)={0x8, 0x2}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000083000-0x28)={@common='ip6tnl0\x00', &(0x7f0000fec000-0x14)=@ethtool_modinfo={0x42, 0x0, 0x0, "8f81ee602417393c"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/14 21:59:16 executing program 3: syz_open_dev$dmmidi(&(0x7f00004dc000)='/dev/dmmidi#\x00', 0x8, 0x200900) mmap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000002000)='asymmetric\x00', &(0x7f0000002000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, &(0x7f0000002000-0x12)="5274727573740364757367725665783a4408", 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000001000-0xb)='cifs.idmap\x00', &(0x7f0000009000)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, r0) 2018/01/14 21:59:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 77.026547] binder: 12890:12903 Release 1 refcount change on invalid ref 2 ret -22 [ 77.026555] binder: 12890:12903 unknown command 0 [ 77.026566] binder: 12890:12903 ioctl c0306201 208fdfd0 returned -22 [ 77.076179] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/14 21:59:16 executing program 3: socket(0x26, 0x80005, 0x80000001) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = request_key(&(0x7f0000001000-0xb)='asymmetric\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000000000)=',\x00', 0xfffffffffffffffb) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f000022f000)='dns_resolver\x00', &(0x7f0000e38000)={0x73, 0x79, 0x7a, 0x3, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$search(0xa, r0, &(0x7f0000915000-0xd)='dns_resolver\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x1, 0x0}, r1) 2018/01/14 21:59:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d2f000)=0x0, &(0x7f0000ef5000)=0x4) mlockall(0x3) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) bind$bt_l2cap(r1, &(0x7f0000fd1000)={0x1f, 0x6, {0x2, 0x3b295db5, 0x7fff, 0x4, 0x800, 0x20}, 0x6, 0xffff}, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f00005ad000-0x14)={0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0}, 0x14) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000bcb000)={0x3, 0xffffffffffffffff, 0x2, 0x7, 0x7f, 0x101, 0xfffffffffffffffc, 0x4e83c17, 0x1, 0x9}) 2018/01/14 21:59:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f000047c000-0x108)={0x0, @in={{0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0xf1, 0x7, 0x100000000, 0x4, 0x7, 0x6, 0xdd68, 0x2, 0x7, 0x7ff, 0x6, 0x7, 0x3, 0x8000, 0x9]}, &(0x7f00004ec000-0x4)=0x108) socket$key(0xf, 0x3, 0x2) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000f38000-0xc)={r1, 0x7, 0x20}, 0xc) writev(r0, &(0x7f0000b97000)=[{&(0x7f0000f11000)='-4', 0x2}], 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000e74000)={0xffffffff, 0x6, 0x50be, 0x80000000, 0x0}, &(0x7f0000b63000)=0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000fb4000)={r2, 0x29, "9e2d6e7059bae165dc4fdd6618d8d7f03a6079e0010000002492c054aaa93783e01c05c28912e822423d"}, &(0x7f0000134000-0x4)=0x149639dc7c8ad4d9) 2018/01/14 21:59:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000169000-0x10)='/selinux/create\x00', 0x2, 0x0) sendto$inet(r0, &(0x7f00003a7000-0x91)="b04351b44f6771fbb4bbae12c8571cae46586a1dfae9c7bdccb0a45bee1a222da068f2978b0e17969fde7aa64404eb891428e81e9da9f0c54c1f9bbdcbc023af8505b2a4210c55c70ae18774dcbbb23abe78ac7435178da96ef32431a47b904122b3d64fb648df429505b9aa373d9d607a0afca558b2a43a01d02980b951856e612151b2793fb2b216a76e3a68fe75009d", 0x91, 0x4080, &(0x7f0000067000)={0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) setrlimit(0x7, &(0x7f0000bed000-0x10)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00001fc000-0x4)={0xffffffffffffffff}) 2018/01/14 21:59:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket(0x5, 0x0, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000)=0x0, 0x4) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) listen(r0, 0xff) accept(r0, &(0x7f0000baa000-0x9)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f0000d1b000-0x4)=0xffffffffffffff41) 2018/01/14 21:59:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d2f000)=0x0, &(0x7f0000ef5000)=0x4) mlockall(0x3) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) bind$bt_l2cap(r1, &(0x7f0000fd1000)={0x1f, 0x6, {0x2, 0x3b295db5, 0x7fff, 0x4, 0x800, 0x20}, 0x6, 0xffff}, 0xe) bpf$BPF_PROG_DETACH(0x9, &(0x7f00005ad000-0x14)={0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0}, 0x14) [ 77.110989] binder: 12929:12938 BC_ACQUIRE_DONE node 166 has no pending acquire request [ 77.119708] binder: 12929:12938 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 77.129219] binder: 12929:12938 BC_FREE_BUFFER u0000000000000000 no match 2018/01/14 21:59:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000431000-0xa)='net/nfsfs\x00') fstat(r0, &(0x7f0000bc6000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000291000)=0x4d) 2018/01/14 21:59:16 executing program 6: r0 = socket(0x1e, 0x4, 0x6) ioctl$int_out(r0, 0x5460, &(0x7f0000c18000-0x8)=0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$nfc_llcp(r0, &(0x7f0000001000-0x60)={0x27, 0x400008, 0x8000000000000, 0x7, 0x102, 0x9, "41e3ad2fe3645028b4753c0e573809aefe79d7819986051c6f6193245ca4fb9916f399e2d74e8a8d9681abbb61de2a0d506d7d2a7c50d026e300ed9ce88078", 0x1dc2fffffff}, 0x60) readahead(r0, 0x7fff, 0x800) 2018/01/14 21:59:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000051c000)='net/ipv6_route\x00') r1 = syz_open_procfs(0x0, &(0x7f0000799000-0x1)='coredump_filter\x00') ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000ac0000)=0x6) sendfile(r1, r0, &(0x7f0000daa000-0x8)=0x2, 0x755f) syz_open_dev$sg(&(0x7f000002f000)='/dev/sg#\x00', 0x80000000000004c, 0x220001) [ 77.129238] binder: 12929:12938 BC_INCREFS_DONE node 166 has no pending increfs request [ 77.129257] binder: 12929:12938 Release 1 refcount change on invalid ref 2 ret -22 2018/01/14 21:59:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000a7000-0xe)='attr/fscreate\x00') rt_sigprocmask(0x0, &(0x7f0000033000-0x8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)={0x0, 0x0}) ftruncate(r0, 0x3d) ioctl$int_in(r0, 0x5473, &(0x7f0000c0b000-0x8)=0x1) 2018/01/14 21:59:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d2f000)=0x0, &(0x7f0000ef5000)=0x4) mlockall(0x3) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) bind$bt_l2cap(r1, &(0x7f0000fd1000)={0x1f, 0x6, {0x2, 0x3b295db5, 0x7fff, 0x4, 0x800, 0x20}, 0x6, 0xffff}, 0xe) 2018/01/14 21:59:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = accept4(r0, &(0x7f0000800000-0x9)=@rc={0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0}, &(0x7f0000f6d000-0x4)=0x9, 0x800) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000f4f000)={r0, 0x4, 0xc88, "3d763851a4c7f1a0be5a2603e6b95dad3d83915ba807e2d9e0baf5d54951acfecfb4ea2dd2260322325939e580ea517885039bacddbf7dea008cc8fb8edef3bbb3a9ab05270553392980a489e1ae87905700d1863d6f6b7c1df7cbd02593cded22ec55f012144e7dbc6face1a4bb4092c4754ba836a9178c9a5d875644d174dbfd6dee266499bfb82c9b7c2d8244099046774e04f4e3827abeae5bb2763d4f45113b1ad76d55b036b7e9a25aec967a98ead261fe079b13a1bba69ce72faff41429b1de4ce1f66ca9964b3d6990bfb939188e"}) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f000003e000-0x4)=0x101, &(0x7f0000397000)=0x4) bind$netlink(r0, &(0x7f000098f000-0xc)={0x10, 0x0, 0x0, 0x5}, 0xc) connect$netlink(r0, &(0x7f00004b1000)=@kern={0x10, 0x0, 0x0, 0x0}, 0xc) bind$netlink(r0, &(0x7f0000315000-0xc)={0x10, 0x0, 0x0, 0x800042}, 0xc) 2018/01/14 21:59:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00006f5000-0x4)=0x0, &(0x7f0000af5000)=0x4) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00009cf000-0xc)={0x0, 0x0, 0x0}, &(0x7f0000eae000-0x4)=0xc) perf_event_open(&(0x7f0000171000)={0x2, 0x78, 0x73, 0xf1e, 0x0, 0xc, 0x0, 0x9, 0x0, 0x1, 0xfff, 0x6, 0x5, 0x100000000, 0x4, 0xf89c, 0x331, 0xe22e, 0x10000, 0x8ab, 0x8, 0x2, 0x5, 0x9172, 0xfffffffffffffffe, 0x7, 0x2, 0x0, 0x255d5de5, 0x40, 0x86af, 0x0, 0x7, 0x4, 0x5, 0x4d1bd267, 0x5, 0x4, 0x0, 0x7, 0x0, @perf_config_ext={0x6ef, 0x1}, 0x23000, 0x80, 0x9, 0x5, 0x200, 0x100000000, 0x9, 0x0}, r3, 0x8, r1, 0xa) listen(r2, 0x0) flock(r1, 0x1) preadv(r1, &(0x7f0000ec9000)=[{&(0x7f0000a69000)=""/76, 0x4c}, {&(0x7f000022e000-0x66)=""/102, 0x66}, {&(0x7f0000d9a000)=""/63, 0x3f}], 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000ba2000)=0x0, 0x4) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000aca000)='/selinux/enforce\x00', 0x200, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000961000)='/dev/cuse\x00', 0x40, 0x0) [ 77.129265] binder: 12929:12938 unknown command 0 [ 77.129275] binder: 12929:12938 ioctl c0306201 208fdfd0 returned -22 [ 77.201603] binder: 12958:12959 BC_ACQUIRE_DONE u0000000000000000 no match [ 77.201615] binder: 12958:12959 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 77.201626] binder: 12958:12959 BC_FREE_BUFFER u0000000000000000 no match [ 77.201637] binder: 12958:12959 BC_INCREFS_DONE u0000000000000000 no match [ 77.201649] binder: 12958:12959 Release 1 refcount change on invalid ref 2 ret -22 [ 77.201656] binder: 12958:12959 unknown command 0 [ 77.201667] binder: 12958:12959 ioctl c0306201 208fdfd0 returned -22 [ 77.227979] binder_alloc: 12966: binder_alloc_buf, no vma [ 77.228105] binder: 12966:12970 transaction failed 29189/-3, size 0-0 line 2957 [ 77.232844] binder: 12966:12970 BC_ACQUIRE_DONE node 167 has no pending acquire request [ 77.232864] binder: 12966:12970 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 77.232878] binder: 12966:12970 BC_FREE_BUFFER u0000000000000000 no match [ 77.232891] binder: 12966:12970 BC_INCREFS_DONE node 167 has no pending increfs request [ 77.232911] binder: 12966:12970 Release 1 refcount change on invalid ref 2 ret -22 [ 77.232919] binder: 12966:12970 unknown command 0 [ 77.232930] binder: 12966:12970 ioctl c0306201 208fdfd0 returned -22 [ 77.238256] binder: 12970 RLIMIT_NICE not set [ 77.327887] binder: 12981:12990 BC_ACQUIRE_DONE u0000000000000000 no match [ 77.327898] binder: 12981:12990 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 77.327911] binder: 12981:12990 BC_FREE_BUFFER u0000000000000000 no match 2018/01/14 21:59:16 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f000069f000-0x4)=0x1e, 0x4) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000002000-0x16)='/selinux/checkreqprot\x00', 0x101000, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000002000-0xa4)=""/164, 0xa4) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000001000)={0x5, &(0x7f0000001000-0x28)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000000)={r1, 0x20}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = socket(0x1e, 0x1, 0x0) setsockopt(r2, 0xffff, 0x81, &(0x7f0000fb8000)="ff010300", 0xffffffffffffff99) 2018/01/14 21:59:16 executing program 7: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000713000)={0x9, 0x1, 0x669989a2, 0x0, 0x1ff, 0x6, 0x400, 0x81, 0x5, 0xfffffffffffffff8, 0x7, 0x8, 0x0, 0x3, 0x1, 0x2, 0x1, 0x4, 0x800}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000e65000-0x4)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000a0b000-0x8)='ns/ipc\x00') readv(r1, &(0x7f0000fa7000)=[{&(0x7f0000c09000-0x4c)=""/76, 0x4c}, {&(0x7f0000604000-0x66)=""/102, 0x66}, {&(0x7f0000895000)=""/164, 0xa4}, {&(0x7f0000281000-0x9c)=""/156, 0x9c}, {&(0x7f00006c7000)=""/43, 0x2b}, {&(0x7f0000196000-0x5e)=""/94, 0x5e}, {&(0x7f00000ff000)=""/71, 0x47}, {&(0x7f0000fba000)=""/4096, 0x1000}], 0x8) ioctl$VT_RELDISP(r1, 0xb701) bind$bt_sco(r1, &(0x7f0000c2d000)={0x1f, {0x1, 0x3, 0x3f, 0x281b, 0x96, 0x7f}}, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00009b0000-0x4)=0x0, 0x4) 2018/01/14 21:59:16 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00004e4000)='/dev/loop-control\x00', 0x200000, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x3, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7}, 0x1c) sendto$inet6(r2, &(0x7f0000001000-0xc5)="3054e13fcdbf22dfb530e66c75eb3275ccd23d805ccb8515153174af2ed882425c66103dec4110ca28d08849bb3639925bf7fea3ac8f30dbc5a06a5a493050f13fb5b9344555b8453238b2115ac96b4f1f18e6d3e0a2b9dc30d8c2067d6a910a3fe8e6f28b4026ee589f81a21de0309bbcea88d497dad9d3a5032fba21cdc6764c642911059fd551aa8e2788da59e7b65513b490c94919cfc0372407e2b7d6c034a30b3fe33984e9a76dce07389dc9a8ce34b9813b405e615a9c2755cde218f92cdfc40504", 0xc5, 0x4000000, &(0x7f0000cf8000)={0xa, 0x2, 0x95, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x6}, 0x1c) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x200000000000002, &(0x7f0000691000-0x4)=0x77, 0xfc) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000e0f000-0x10)={0x1, &(0x7f0000d3e000)=[{0x6, 0x0, 0x0, 0xa0}]}, 0x10) fcntl$getownex(r1, 0x10, &(0x7f00009b1000-0x8)={0x0, 0x0}) sendto$inet(r3, &(0x7f0000f54000-0x1)="", 0x0, 0x20000802, &(0x7f000006d000)={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendmmsg(r3, &(0x7f00008fa000-0x12c)=[{{0x0, 0x0, &(0x7f0000621000-0x10)=[{&(0x7f0000b50000)="33b81c8c3c8409207aa26c6a41fdca2374c867a32142701a82f794f898474b16dc4be377cebf371a97cba397a1d6fe123698feb11a2cc2c2aeb33dcd27e27c0f1b2ddb0dedb5112832316f170447fd706393fa81c1a7650c10739c2a3afa47fee1793a6c4e3883c6f89c9508bf474e9e2b37da44be0a9ef6891c50d6e94dac5a334a5b8d4b30cfe7903eba51184380c92d4d684ffb6e40b15fea44576a8ca053a2cdfe53765878162bc3bb7eab49bb5529f44891c4d3a4b4ac8a1054cebae2d562ecd5f5a545bdc5f04dcda618b7448008af82479d5e39", 0xd7}], 0x1, &(0x7f0000073000)=[], 0x0, 0x0}, 0x0}], 0x1, 0x48000) kcmp$KCMP_EPOLL_TFD(r4, r4, 0x7, r1, &(0x7f0000221000)={r2, r1, 0x174}) setsockopt$inet6_buf(r2, 0x29, 0x4b, &(0x7f0000001000-0x2)="", 0x0) 2018/01/14 21:59:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:16 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008ff000-0x10)={&(0x7f0000d4d000-0x158)={0x2, 0x2, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x0}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000e49000-0xb)='/dev/audio\x00', 0x200080, 0x0) getsockopt$inet_int(r1, 0x0, 0x3f, &(0x7f00006a7000-0x4)=0x0, &(0x7f0000d2a000-0x4)=0x4) 2018/01/14 21:59:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d2f000)=0x0, &(0x7f0000ef5000)=0x4) mlockall(0x3) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) bind$bt_l2cap(r1, &(0x7f0000fd1000)={0x1f, 0x6, {0x2, 0x3b295db5, 0x7fff, 0x4, 0x800, 0x20}, 0x6, 0xffff}, 0xe) 2018/01/14 21:59:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:16 executing program 2: mmap(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f000000b000-0x8)={0x0, 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000008000-0x20)={@common='syzkaller0\x00', @ifru_flags=0x200}) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000012000)={0x0, 0x0}) mmap$binder(&(0x7f0000005000/0xd000)=nil, 0xd000, 0x1, 0x10, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000005000)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000d000+0x379)={&(0x7f0000001000)={0x11, 0x14, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {0x0, 0x0, 0x0}, []}, 0x14}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 77.327923] binder: 12981:12990 BC_INCREFS_DONE u0000000000000000 no match [ 77.327936] binder: 12981:12990 Release 1 refcount change on invalid ref 2 ret -22 [ 77.327943] binder: 12981:12990 unknown command 0 [ 77.327953] binder: 12981:12990 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d2f000)=0x0, &(0x7f0000ef5000)=0x4) mlockall(0x3) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:16 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:16 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1000000000000003, 0x5) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f000091e000)=0x10000, 0x4) r1 = dup(r0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000ee0000-0x4)=0x20, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000a2f000-0x4)=0x7fe, 0x4) sendto$inet(r1, &(0x7f000015e000)="", 0x0, 0x0, &(0x7f0000660000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_opts(r1, 0x0, 0x8, &(0x7f0000c06000-0x1)="c8", 0x1) recvmsg(r0, &(0x7f0000ee0000-0x38)={0x0, 0x0, &(0x7f0000aea000)=[], 0x0, &(0x7f0000eed000)=""/81, 0x51, 0x0}, 0x40002102) ioctl$sock_bt(r1, 0xdd1f, &(0x7f000088c000)="bc55ecd463b4099f6f3972075daa3870e682ddf3ba439919c284dc17f4b4b3091a8d3d4fd31a50abab7abdc14f8882e081d6b947d5eb72fd83") 2018/01/14 21:59:16 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d2f000)=0x0, &(0x7f0000ef5000)=0x4) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:16 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000b0000-0x8)='./file0\x00', 0x80) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000141000-0x4)=0x1) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000c37000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = creat(&(0x7f0000e4b000-0x8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000012000-0x2e)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, @time=@time={0x77359400, 0x0}}], 0x30) mount(&(0x7f0000c8f000-0x8)='./file0\x00', &(0x7f0000952000-0x8)='./file0\x00', &(0x7f0000807000-0x5)='cifs\x00', 0x2000, &(0x7f00006c2000-0x14)="") fsetxattr(r2, &(0x7f0000b46000)=@random={'user.\x00', 'cifs\x00'}, &(0x7f0000d66000)='cifs\x00', 0x5, 0x2) creat(&(0x7f0000978000-0x2)='./file0\x00', 0x2) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000002000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) rt_sigreturn() socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000f9d000-0x10)={0xa, &(0x7f000097d000-0x5c8)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, ""/128}]}) [ 77.488729] audit: type=1400 audit(1515967156.837:634): avc: denied { map } for pid=13000 comm="syz-executor2" path="pipe:[31849]" dev="pipefs" ino=31849 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1 [ 77.499789] binder_alloc: 13001: binder_alloc_buf, no vma [ 77.499811] binder: 13001:13009 transaction failed 29189/-3, size 0-0 line 2957 2018/01/14 21:59:16 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x5) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000124000)={0x0, 0x8, 0x6, [0x7fffffff, 0x0, 0x32a5, 0x4, 0x71a, 0x4]}, &(0x7f000078e000-0x4)=0x14) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000c10000)={r1, @in6={{0xa, 0x3, 0x401, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0xffffffff}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) setsockopt$inet_buf(r0, 0x0, 0x23, &(0x7f00002f2000)="e4a445eb7fff0500", 0x8) 2018/01/14 21:59:16 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000034c000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) get_thread_area(&(0x7f0000d4b000)={0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}) 2018/01/14 21:59:16 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 77.526830] binder: 13001:13009 BC_ACQUIRE_DONE node 169 has no pending acquire request [ 77.526849] binder: 13001:13009 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 77.526863] binder: 13001:13009 BC_FREE_BUFFER u0000000000000000 no match [ 77.526876] binder: 13001:13009 BC_INCREFS_DONE node 169 has no pending increfs request [ 77.526896] binder: 13001:13009 Release 1 refcount change on invalid ref 2 ret -22 [ 77.526904] binder: 13001:13009 unknown command 0 [ 77.526916] binder: 13001:13009 ioctl c0306201 208fdfd0 returned -22 [ 77.527108] binder: 13009 RLIMIT_NICE not set [ 77.539861] binder: 13006:13013 BC_ACQUIRE_DONE u0000000000000000 no match [ 77.539872] binder: 13006:13013 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 77.539884] binder: 13006:13013 BC_FREE_BUFFER u0000000000000000 no match 2018/01/14 21:59:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r0, r0) 2018/01/14 21:59:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) dup3(r0, r0, 0x80000) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000aad000-0x11)='/selinux/context\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00001c2000-0x4)=0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000a2c000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000066000-0x9)='/dev/kvm\x00', 0x20900, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000ffe000-0xe1)=""/225) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000ab5000-0x48)={0x1, 0x0, [{0x1b, 0x0, 0x0}]}) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000296000-0x4)=0x0, &(0x7f0000b95000-0x4)=0x4) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000ce3000)=0x100000001) 2018/01/14 21:59:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000005000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000af7000-0x138)={{0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x1000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0xf000, 0x1, [0x0, 0x0, 0x0]}, 0x0, 0x0, 0x13001, 0x0, 0x0, 0x0, 0x3000, [0x0, 0x0, 0x0, 0x0]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000ac3000/0x18000)=nil, &(0x7f0000fd1000)=[@text32={0x20, &(0x7f00003d5000-0x4b)="f3ab0fe21f66b879000f00d80ffd1e26643e3e0f01cb0f20e035000040000f22e0440f20c0350d000000440f22c0b89e0000000f23d80f21f835c00000e00f23f8b9120800000f3266369c", 0x4b}], 0x1, 0x0, &(0x7f0000056000-0x10)=[], 0x0) 2018/01/14 21:59:17 executing program 0: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000012000)='/dev/amidi#\x00', 0x0, 0x200000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000004000-0x18)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002000-0x1e)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013000+0xe95)=0x0, 0x4) r3 = dup2(r2, r2) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000003000-0x10)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000)=0x10) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xa, 0x32, 0xffffffffffffffff, 0x0) close(r1) 2018/01/14 21:59:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000ac8000-0x16)='/selinux/checkreqprot\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f000047c000-0xa0)={0x0, @in={{0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5, 0x8, 0x6, 0xfff, 0x4}, &(0x7f0000cdd000-0x4)=0xa0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000650000)={r2, 0x5, "772657dbb3"}, &(0x7f00005e2000)=0xd) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00001a3000)='/dev/cuse\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f000005f000)='/dev/ion\x00', 0x0, 0x0) close(r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002000-0x38)={0x0, 0x0, &(0x7f0000003000)=[], 0x51, &(0x7f0000002000)=[{0xff1e, 0x10e, 0x0, ""}], 0x10, 0x0}, 0x0) ioctl(r4, 0xc0184900, &(0x7f0000002000)="") mmap$binder(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) poll(&(0x7f0000381000)=[{r1, 0x8000, 0x0}, {r0, 0x0, 0x0}, {r1, 0x10, 0x0}, {r1, 0x8208, 0x0}, {r4, 0xc, 0x0}], 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f000032a000)=[], 0x0) clone(0x0, &(0x7f0000290000)="", &(0x7f0000187000-0x4)=0x0, &(0x7f0000b8e000)=0x0, &(0x7f00002df000)="") epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r4) [ 77.539896] binder: 13006:13013 BC_INCREFS_DONE u0000000000000000 no match [ 77.539909] binder: 13006:13013 Release 1 refcount change on invalid ref 2 ret -22 [ 77.539916] binder: 13006:13013 unknown command 0 [ 77.539936] binder: 13006:13013 ioctl c0306201 208fdfd0 returned -22 [ 77.579136] binder: BINDER_SET_CONTEXT_MGR already set [ 77.579145] binder: 13022:13024 ioctl 40046207 0 returned -16 2018/01/14 21:59:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:17 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f00001d8000)='keyring\x00', &(0x7f0000f85000)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$adsp(&(0x7f00000c0000-0xb)='/dev/adsp#\x00', 0x400, 0x80000) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000c68000)=""/0, &(0x7f0000200000)=0x0) keyctl$setperm(0x5, r0, 0x200e0802) keyctl$join(0x1, &(0x7f00007c9000)={0x73, 0x79, 0x7a, 0x0, 0x0}) keyctl$join(0x1, &(0x7f000096f000)={0x73, 0x79, 0x7a, 0x0, 0x0}) 2018/01/14 21:59:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:17 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_addrs={0x2, 0x2, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000747000-0x9)='/dev/rtc\x00', 0x0, 0x0) write$tun(r2, &(0x7f0000c6d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv6={0x0, 0x6, "5d11a3", 0x38, 0x3a, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[], @icmpv6=@dest_unreach={0x2, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], {0x0, 0x6, "eee427", 0x0, 0x3a, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, [], "38a52738c7b94dd6"}}}}}, 0x6a) renameat2(0xffffffffffffffff, &(0x7f0000292000-0x8)='./file0\x00', 0xffffffffffffffff, &(0x7f0000c46000)='./file0\x00', 0x0) dup2(r0, r2) [ 77.594545] binder: 13022:13024 BC_ACQUIRE_DONE u0000000000000000 no match [ 77.594557] binder: 13022:13024 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:17 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:17 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000d48000)='/dev/input/mice\x00', 0x0, 0xfffffffffffffffe) accept$packet(r0, &(0x7f0000f64000-0x14)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f00008c5000)=0x14) lstat(&(0x7f0000175000)='./file0\x00', &(0x7f0000789000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00002d1000)={{{@in=@empty=0x0, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x3, 0xffffffffffffffff, 0x1, 0x0, 0x2, 0xa0, 0x80, 0x33, r1, r2}, {0x6, 0x401, 0x33e8, 0x1ff, 0x5, 0x2, 0x7fffffff, 0xfffffffffffffffc}, {0x9, 0xffffffffffff0001, 0x100000001, 0x1}, 0x4, 0x3, 0x1, 0x1, 0x1, 0x2}, {{@in=@multicast1=0xe0000001, 0x2, 0x2b}, 0xa, @in=@loopback=0x7f000001, 0x2, 0x1, 0x3, 0x7, 0x1, 0x7ff, 0x100000000}}, 0xe8) tee(r0, r0, 0x5, 0x1) r3 = getpgrp(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000900000)='timers\x00') ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x7) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000a78000-0x20)={@generic="bd1dbb462993d8c3295b0eee753d5980", @ifru_addrs={0x2, 0x3, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$TCSETAW(r4, 0x5407, &(0x7f000019d000-0x14)={0x4, 0x1f, 0x10000, 0x3f, 0x10, 0x81, 0x5, 0x20, 0x400, 0x5}) r5 = syz_fuse_mount(&(0x7f0000922000-0x8)='./file0\x00', 0x6000, 0xffffffffffffffff, 0xffffffffffffffff, 0x9, 0x60008) readv(r5, &(0x7f0000ba1000)=[{&(0x7f00000fd000-0x1b)=""/27, 0x1b}, {&(0x7f0000025000)=""/211, 0xd3}], 0x2) 2018/01/14 21:59:17 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:17 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000001000-0xa)='/dev/vcs#\x00', 0x2, 0x80) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000991000/0x18000)=nil, &(0x7f00001c9000-0x18)=[@text64={0x40, &(0x7f0000001000-0x77)="b92d090000b8a4000000ba000000000f30b997000040b8af000000ba000000000f30c4a27931d1c4825d2bdd66ba610066b8a00066ef480f35c7442400f3ffffffc7442402af3fa8bcc7442406000000000f01142466ba2000b800600000ef3e66450f3881955f230000b805000000b92ab792f70f01c1", 0x77}], 0x1, 0x3, &(0x7f0000a0f000)=[@dstype3={0x7, 0xc}], 0x1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00009b5000)='net/igmp\x00') readv(r2, &(0x7f0000540000-0x40)=[{&(0x7f00001c2000)=""/44, 0x2c}, {&(0x7f00003ec000)=""/84, 0x54}], 0x2) [ 77.594571] binder: 13022:13024 BC_FREE_BUFFER u0000000000000000 no match 2018/01/14 21:59:17 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000cee000-0x18)=@get={0x1, &(0x7f0000f7c000-0xb0)=""/176, 0x5}) r1 = socket(0xa, 0x3, 0x5) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000db3000-0x4)=0x0) 2018/01/14 21:59:17 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 77.594584] binder: 13022:13024 BC_INCREFS_DONE u0000000000000000 no match [ 77.594598] binder: 13022:13024 Release 1 refcount change on invalid ref 2 ret -22 [ 77.594606] binder: 13022:13024 unknown command 0 [ 77.594617] binder: 13022:13024 ioctl c0306201 208fdfd0 returned -22 [ 77.636356] binder_alloc: 13034: binder_alloc_buf, no vma [ 77.636379] binder: 13034:13036 transaction failed 29189/-3, size 0-0 line 2957 [ 77.659835] binder: 13034:13036 BC_ACQUIRE_DONE node 171 has no pending acquire request [ 77.659851] binder: 13034:13036 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 77.659863] binder: 13034:13036 BC_FREE_BUFFER u0000000000000000 no match [ 77.659874] binder: 13034:13036 BC_INCREFS_DONE node 171 has no pending increfs request [ 77.659890] binder: 13034:13036 Release 1 refcount change on invalid ref 2 ret -22 [ 77.659901] binder: 13034:13036 unknown command 0 [ 77.659941] binder: 13034:13036 ioctl c0306201 208fdfd0 returned -22 [ 77.660110] binder: 13036 RLIMIT_NICE not set [ 77.705864] FAULT_FLAG_ALLOW_RETRY missing 30 [ 77.705877] CPU: 1 PID: 13031 Comm: syz-executor7 Not tainted 4.15.0-rc7-next-20180112+ #96 [ 77.705882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.705886] Call Trace: [ 77.705901] dump_stack+0x194/0x257 [ 77.705917] ? arch_local_irq_restore+0x53/0x53 [ 77.705938] ? handle_userfault+0xb97/0x2500 [ 77.705956] handle_userfault+0xbd9/0x2500 [ 77.705965] ? handle_userfault+0x185a/0x2500 [ 77.705992] ? userfaultfd_ioctl+0x4520/0x4520 [ 77.706007] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 77.706014] ? perf_trace_lock+0xc0/0x900 [ 77.706020] ? __lock_is_held+0xb6/0x140 [ 77.706028] ? print_irqtrace_events+0x270/0x270 [ 77.706045] ? trace_event_raw_event_lock+0x340/0x340 [ 77.706058] ? print_irqtrace_events+0x270/0x270 [ 77.706071] ? print_irqtrace_events+0x270/0x270 [ 77.706082] ? get_user_pages_fast+0x277/0x340 [ 77.706097] ? perf_trace_lock+0xd6/0x900 [ 77.706108] ? perf_trace_lock+0xd6/0x900 [ 77.706118] ? __perf_event_task_sched_in+0x200/0xc20 [ 77.706144] ? __lock_acquire+0x664/0x3e00 [ 77.706154] ? check_noncircular+0x20/0x20 [ 77.706161] ? __lock_acquire+0x664/0x3e00 [ 77.706192] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 77.706203] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 77.706219] ? find_held_lock+0x35/0x1d0 [ 77.706241] ? __handle_mm_fault+0x3296/0x3ce0 [ 77.706251] ? lock_downgrade+0x980/0x980 [ 77.706266] ? lock_release+0xa40/0xa40 [ 77.706279] ? copy_overflow+0x20/0x20 [ 77.706307] ? do_raw_spin_trylock+0x190/0x190 [ 77.706318] ? userfaultfd_ctx_put+0x720/0x720 [ 77.706346] __handle_mm_fault+0x32a3/0x3ce0 [ 77.706366] ? __pmd_alloc+0x4e0/0x4e0 [ 77.706376] ? print_irqtrace_events+0x270/0x270 [ 77.706386] ? plist_check_head+0xe2/0x130 [ 77.706404] ? find_held_lock+0x35/0x1d0 [ 77.706431] ? handle_mm_fault+0x2a0/0x930 [ 77.706442] ? lock_downgrade+0x980/0x980 [ 77.706492] handle_mm_fault+0x38f/0x930 [ 77.706507] ? __handle_mm_fault+0x3ce0/0x3ce0 [ 77.706515] ? vmacache_find+0x5f/0x280 [ 77.706531] ? find_vma+0x30/0x150 [ 77.706550] __do_page_fault+0x5c9/0xc90 [ 77.706575] ? mm_fault_error+0x2c0/0x2c0 [ 77.706592] ? trace_event_raw_event_lock+0x340/0x340 [ 77.706612] do_page_fault+0xee/0x720 [ 77.706624] ? __do_page_fault+0xc90/0xc90 [ 77.706632] ? check_noncircular+0x20/0x20 [ 77.706641] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 77.706654] ? futex_wake+0x566/0x680 [ 77.706666] ? drop_futex_key_refs.isra.12+0x63/0xa0 [ 77.706676] ? futex_wait+0x6a9/0x9a0 [ 77.706694] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 77.706716] page_fault+0x2c/0x60 [ 77.706727] RIP: 0010:iov_iter_fault_in_readable+0x1a7/0x410 [ 77.706731] RSP: 0018:ffff8801d10e7928 EFLAGS: 00010246 [ 77.706739] RAX: 0000000000010000 RBX: 0000000020011fd2 RCX: ffffffff825a9df1 [ 77.706743] RDX: 00000000000000c9 RSI: ffffc90002591000 RDI: ffff8801d10e7d28 [ 77.706748] RBP: ffff8801d10e7a08 R08: 1ffff10034ec2482 R09: 0000000000000000 [ 77.706753] R10: ffff8801d10e7858 R11: 0000000000000000 R12: 1ffff1003a21cf28 [ 77.706757] R13: ffff8801d10e79e0 R14: 0000000000000000 R15: ffff8801d10e7d20 [ 77.706780] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 77.706799] ? iov_iter_fault_in_readable+0x1a1/0x410 [ 77.706813] ? iov_iter_revert+0x9d0/0x9d0 [ 77.706825] ? current_kernel_time64+0x122/0x2f0 [ 77.706838] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 77.706849] ? trace_hardirqs_on+0xd/0x10 [ 77.706858] ? current_kernel_time64+0x1d4/0x2f0 [ 77.706875] generic_perform_write+0x200/0x600 [ 77.706883] ? __vfs_getxattr+0x8b/0xc0 [ 77.706912] ? filemap_fdatawait_keep_errors+0xb0/0xb0 [ 77.706919] ? file_update_time+0xd3/0x5b0 [ 77.706932] ? current_time+0xc0/0xc0 [ 77.706938] ? clear_nlink+0xb0/0xb0 [ 77.706963] ? down_write+0x87/0x120 [ 77.706979] __generic_file_write_iter+0x366/0x5b0 [ 77.706987] ? check_noncircular+0x20/0x20 [ 77.707003] generic_file_write_iter+0x399/0x790 [ 77.707020] ? __generic_file_write_iter+0x5b0/0x5b0 [ 77.707036] ? iov_iter_init+0xaf/0x1d0 [ 77.707051] __vfs_write+0x684/0x970 [ 77.707058] ? lock_acquire+0x1d5/0x580 [ 77.707072] ? kernel_read+0x120/0x120 [ 77.707114] ? rcu_sync_lockdep_assert+0x6d/0xb0 [ 77.707123] ? __sb_start_write+0x209/0x2a0 [ 77.707138] vfs_write+0x189/0x510 [ 77.707154] SyS_write+0xef/0x220 [ 77.707167] ? SyS_read+0x220/0x220 [ 77.707175] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 77.707185] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 77.707205] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 77.707211] RIP: 0033:0x452cf9 [ 77.707215] RSP: 002b:00007fe2d3e16c58 EFLAGS: 00000212 ORIG_RAX: 0000000000000001 [ 77.707223] RAX: ffffffffffffffda RBX: 00007fe2d3e17700 RCX: 0000000000452cf9 [ 77.707228] RDX: 0000000000000030 RSI: 0000000020011fd2 RDI: 0000000000000015 [ 77.707232] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 77.707236] R10: 0000000000000000 R11: 0000000000000212 R12: 0000000000000000 [ 77.707240] R13: 0000000000a2f7ef R14: 00007fe2d3e179c0 R15: 0000000000000000 [ 77.773319] x86/PAT: syz-executor7:13051 map pfn RAM range req write-combining for [mem 0x1c8b80000-0x1c8b81fff], got write-back [ 77.774628] binder_alloc: 13049: binder_alloc_buf, no vma [ 77.774653] binder: 13048:13058 transaction failed 29189/-3, size 0-0 line 2957 [ 77.776519] binder: 13049:13056 BC_ACQUIRE_DONE node 173 has no pending acquire request [ 77.776537] binder: 13049:13056 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 77.776548] binder: 13049:13056 BC_FREE_BUFFER u0000000000000000 no match [ 77.776560] binder: 13049:13056 BC_INCREFS_DONE node 173 has no pending increfs request [ 77.776580] binder: 13049:13056 Release 1 refcount change on invalid ref 2 ret -22 [ 77.776587] binder: 13049:13056 unknown command 0 [ 77.776598] binder: 13049:13056 ioctl c0306201 208fdfd0 returned -22 [ 77.795690] binder: 13048:13058 BC_ACQUIRE_DONE u0000000000000000 no match [ 77.795702] binder: 13048:13058 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 77.795717] binder: 13048:13058 BC_FREE_BUFFER u0000000000000000 no match [ 77.795730] binder: 13048:13058 BC_INCREFS_DONE u0000000000000000 no match [ 77.795745] binder: 13048:13058 Release 1 refcount change on invalid ref 2 ret -22 [ 77.795753] binder: 13048:13058 unknown command 0 [ 77.795763] binder: 13048:13058 ioctl c0306201 208fdfd0 returned -22 [ 77.796215] binder: 13058 RLIMIT_NICE not set [ 77.834502] x86/PAT: syz-executor7:13066 map pfn RAM range req write-combining for [mem 0x19f800000-0x19f801fff], got write-back [ 77.896958] binder: 13083:13085 transaction failed 29189/-22, size 0-0 line 2842 [ 77.921989] binder: 13083:13085 BC_ACQUIRE_DONE u0000000000000000 no match [ 77.922005] binder: 13083:13085 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 77.922104] binder: 13083:13085 BC_FREE_BUFFER u0000000000000000 no match [ 77.922117] binder: 13083:13085 BC_INCREFS_DONE u0000000000000000 no match [ 77.922131] binder: 13083:13085 Release 1 refcount change on invalid ref 2 ret -22 [ 77.922139] binder: 13083:13085 unknown command 0 [ 77.922151] binder: 13083:13085 ioctl c0306201 208fdfd0 returned -22 [ 77.922423] binder: 13085 RLIMIT_NICE not set [ 78.692582] audit: type=1326 audit(1515967156.966:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13030 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452cf9 code=0x7ffc0000 [ 78.692597] audit: type=1326 audit(1515967156.966:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13030 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452cf9 code=0x7ffc0000 [ 78.692613] audit: type=1326 audit(1515967156.978:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13030 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=211 compat=0 ip=0x452cf9 code=0x7ffc0000 [ 78.692630] audit: type=1326 audit(1515967156.978:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13030 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452cf9 code=0x7ffc0000 2018/01/14 21:59:18 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f000093a000-0x5)='user\x00', &(0x7f000098c000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000001000-0x50)="edf89ed572db4513387ee0a2bc18e8fb9674426153e1041fc646379cf3655efdcb82801430ebdd9ead25aefee68afc43a2eb8b389162a9d2e74e4e92b18822f023dbbc688427e709867be707b4a41df0", 0x50, 0xfffffffffffffff9) keyctl$get_security(0x11, r0, &(0x7f000094a000)=""/4096, 0xfceb) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000031b000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0004}]}) r1 = syz_open_dev$sndpcmc(&(0x7f00001c0000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40200) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) unshare(0x0) 2018/01/14 21:59:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000194000)='/selinux/create\x00', 0x2, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00007f3000-0x4)=0x81) r2 = open(&(0x7f0000b92000-0x7)='./file0\x00', 0x68042, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009c1000)=0xff, 0x4) fallocate(r2, 0x0, 0x0, 0x10000) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000c1d000)="", 0x0) sendto$inet(r0, &(0x7f000038d000-0x69)="", 0x0, 0x0, &(0x7f0000822000-0x10)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendfile(r0, r2, &(0x7f0000af5000)=0x0, 0x10001) 2018/01/14 21:59:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:18 executing program 2: openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00009cb000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x17e000)=nil, 0x17e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000004000-0x10)={&(0x7f0000013000-0x80)={0x2, 0x4000000000000d, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@empty=0x0, @in=@empty=0x0}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0xffffffffffffffff, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/14 21:59:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00008a8000)='./file0\x00', 0x8000, 0x1) sync_file_range(r0, 0x1009e5ce, 0x200, 0x5) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00004b9000)='/dev/dsp\x00', 0x80800, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f000060e000-0xd5)={0x0, 0xcd, "a668d8f89f94477afb73f6cfe35ecb7c8aefa42914a661c131e1c2a72c41e7b86b6ee2a6b8551db44f01d7fe6983f5568ab6173d61b1fefbf38a97869ea86b351d47eafedd515d2dcd4ef391dcefd5be82402e585c0b9a43d099d08255aced68890e964a51f5af5e2963cb1eac86f00fa8881b6f6d0b5edf83dab10e34e59c90c475cde3a471e3c479096423b02e301a88c5931ff846de6acd4b06c430fb4b8be1181ed9e8b71363dbe8439d75e055c190fc3509a9dafb28d8a7c24d979fe3e5c3cf4cec48befb107f862875ff"}, &(0x7f0000a93000-0x4)=0xd5) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000357000)={r2, @in={{0x2, 0x1, @dev={0xac, 0x14, 0x0, 0xc}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0xfffffffffffffde3) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000544000-0x8)=0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000389000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_names=@common='bridge0\x00'}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = add_key$user(&(0x7f0000c10000)='user\x00', &(0x7f0000cef000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000653000-0xc4)="580a02e73c57a217f68bf2aa815da17345fa208613b578078a40492a05856b819b07af6217ad85ea0c848c37b28d5a9fd10511ee6ec0d1d250b823cc8240145fb08aceccb38869af42928572e7a78cb3742c95cc2e48610b10557845c65079f60bb6f34923084a5749acd541eeeffd1399b51fbdfba259c0525c950c58688b2b0ac67d19ab3cd7c97d1cd54c466ef5e2e44cd3251fec10a2ec0960f77dfa012c82170e20d2248bf828d4961fc873929f5e14b066b7598dfbf02e49ea17f26c71326f5b76", 0xc4, 0x0) keyctl$invalidate(0x15, r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r4, 0x89f2, &(0x7f0000853000)={@common='sit0\x00', @ifru_map={0x407776, 0x0, 0x0, 0x0, 0x0, 0x0}}) 2018/01/14 21:59:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f000022a000-0x10)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00001a8000)={0x400000000000003}, 0xffffffffffffff9d) r1 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000047d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000c31000)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_buf(r1, 0x0, 0x483, &(0x7f0000ef1000-0x18)=""/24, &(0x7f000045f000-0x1)=0x27f) [ 78.692644] audit: type=1326 audit(1515967156.978:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13030 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452cf9 code=0x7ffc0000 [ 78.692659] audit: type=1326 audit(1515967156.981:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13030 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=9 compat=0 ip=0x452cf9 code=0x7ffc0000 [ 78.868697] binder: 13103:13110 transaction failed 29189/-22, size 0-0 line 2842 2018/01/14 21:59:18 executing program 3: mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f000000b000-0x18)=@generic={0x0, 0x1f, 0x3f}) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000002000)="0d576aa5b72ceb3f97738795af87125e", 0x10) r1 = socket(0x3, 0x80007, 0x800000000001) connect(r1, &(0x7f0000004000-0x58)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) getpeername$packet(r1, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random=""/6, [0x0, 0x0]}, &(0x7f0000005000-0x4)=0x14) r2 = syz_open_dev$dspn(&(0x7f0000008000)='/dev/dsp#\x00', 0x9, 0x2001) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f000000b000)=""/90) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r2, 0x891d, &(0x7f000000c000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_settings={0x1c0, 0x1, @fr_pvc=&(0x7f0000006000)={0x3}}}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f000000b000)={&(0x7f0000001000/0x3000)=nil, 0x7078eca9, 0x2, 0x4, &(0x7f0000003000/0x2000)=nil, 0x7}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000004000-0x18)=@generic={0xffffffff, 0x3, 0x800}) 2018/01/14 21:59:18 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendto$ax25(r0, &(0x7f0000000000)="0eef311daeafe1c6f8b9d16b674ccdb7b20eda0d01469bfc109de2065382a09a304278b5cb286645a49f5d2b55f448b02b2e2bd77ea515cac32a15b6bcea767d7ea7c5ed6ae3020eb951107158f3498466feb7e1a79d60c077b032ca27f1341c00a975743056f5984d20925558734fffb299df862994", 0x76, 0x40, &(0x7f0000002000-0x10)={0x3, {"cbc4475d779805"}, 0xdd4}, 0x10) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0) poll(&(0x7f0000df9000-0x20)=[{r2, 0x0, 0x0}], 0x1, 0x0) 2018/01/14 21:59:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000968000)={0x0, @multicast1=0x0, @local={0x0, 0x0, 0xffffffffffffffff, 0x0}}, &(0x7f0000804000-0x4)=0xc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000582000)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000232000-0x4)=0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000001000-0x10)={0x1d, r0, 0x0, 0x0}, 0x10) close(0xffffffffffffffff) 2018/01/14 21:59:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000001000)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs=@sco={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe1}}}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000d53000-0xb)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r0, 0x4028641b, &(0x7f0000075000-0x28)={&(0x7f0000d47000/0x3000)=nil, 0x7, 0x4, 0x4a, &(0x7f00007eb000/0x4000)=nil, 0x1}) sigaltstack(&(0x7f0000f01000/0x4000)=nil, &(0x7f0000001000-0x8)=0x0) r1 = syz_open_pts(0xffffffffffffff9c, 0x101000) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000be8000-0x8)={0xffffffffffff7551, 0x71b}) sigaltstack(&(0x7f0000006000/0x3000)=nil, &(0x7f0000005000)=0x0) 2018/01/14 21:59:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000f5000)=0xa, 0x4) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000014000)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000530000-0x8)='./file0\x00', 0x0, 0x0) symlinkat(&(0x7f000001f000-0x3)='/', r0, &(0x7f0000d07000-0x8)='./file0\x00') chroot(&(0x7f0000157000)='./file0\x00') getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000514000)={0x0, 0x7}, &(0x7f0000a71000)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000353000)={r1, @in={{0x2, 0x3, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x240, 0x9, 0x3, 0x7, 0xffffe00000000000}, &(0x7f00008ee000-0x4)=0xa0) fchmodat(r0, &(0x7f0000e51000-0x14)='./file0/file0/file0\x00', 0x0) 2018/01/14 21:59:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000ba9000-0x4)=0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000119000)='GPL\x00', 0x81, 0x88, &(0x7f000004a000-0x40)={0x80, 0x1, 0xfffffffffffffff7, 0x4f, 0x400, 0x7b, 0x1303, 0xffffffffffffffff}) readv(r0, &(0x7f000049d000-0x60)=[{&(0x7f000035a000)=""/49, 0x31}, {&(0x7f0000a08000)=""/182, 0xb6}, {&(0x7f00002c6000)=""/4096, 0x1000}, {&(0x7f0000f60000)=""/225, 0xe1}, {&(0x7f0000b7d000-0x18)=""/24, 0x18}, {&(0x7f00001e9000-0x23)=""/35, 0x23}], 0x6) perf_event_open(&(0x7f0000fdf000-0x78)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000aaa000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f000005b000)=0x3) [ 78.960408] binder: BINDER_SET_CONTEXT_MGR already set [ 78.995549] binder: 13124:13133 ioctl 40046207 0 returned -16 2018/01/14 21:59:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f00002b5000-0x10)='/selinux/create\x00', 0x2, 0x0) getsockopt(r0, 0x200000000114, 0x2717, &(0x7f000047c000)=""/0, &(0x7f0000000000)=0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000ed1000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_addrs={0x2, 0x2, @rand_addr=0x80000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2018/01/14 21:59:18 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000c39000-0xb)='/dev/mixer\x00', 0x101000, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4008ae90, &(0x7f0000000000)={0x3, 0x0, [{0x40000007, 0x4, 0x2, 0xff, 0x1, 0x2, 0x100000001, [0x0, 0x0, 0x0]}, {0xc0000019, 0x8000, 0x1, 0x300000000, 0x3, 0x7ff, 0x20, [0x0, 0x0, 0x0]}, {0xc000000f, 0x100, 0x0, 0x7, 0x2, 0xd41, 0x3, [0x0, 0x0, 0x0]}]}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000001000-0x1e)={0x2, 0x800, 0x200, "d3c8fcbdb1c8", "1eb9a8488bad260c8fd0112418d71f9c"}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockname$packet(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000000000)=0x14) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000001000)={@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4, 0x10001, 0x7fffffff, 0x0, 0x3, 0x40000, r1}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$mice(&(0x7f0000002000)='/dev/input/mice\x00', 0x0, 0xa001) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000003000)=0x4, 0x4) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000005000-0x8)={0xf1, 0xeb7, 0x8, 0xffff}, 0x8) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000005000)=0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) get_robust_list(r3, &(0x7f0000004000)=&(0x7f0000006000-0x18)={&(0x7f0000000000/0x1000)=nil, 0x0, &(0x7f0000000000/0x1000)=nil}, &(0x7f0000006000-0x8)=0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003000)={0x0, r0, 0x3, 0x1, 0x0}, 0x14) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x3, 0xfffffffffffff000, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x3}, {0xa, 0x1, 0x294, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x6}, 0x9, [0x0, 0x0, 0x1, 0x8000, 0x4, 0x2, 0x0, 0xfffffffffffffffe]}, 0x5c) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$key(r2, &(0x7f0000001000-0x38)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000007000-0x178)={0x2, 0x3ea7, 0x7, 0x9, 0x2f, 0x0, 0x2, 0x1, [@sadb_x_sec_ctx={0x12, 0x18, 0x2, 0x7f, 0x86, "7cb7d305c7ed0f0cb51d15de68e82f022f0960ab651a3459f90b9867b1c2b37be42283f837416756ccdedaed04262d95ba467df58ab95628d6481a55e420ffe51b9e2daa15ab689da12c1b0f67d1672d6a937b256caf1310c3dada188dde2bea48bf72a56cb5aa88df1be52b63e44c1e1fe7c56250bf8dce52e573d9914ed61c5dc6b491b2fa"}, @sadb_x_filter={0x5, 0x1a, @in=@broadcast=0xffffffff, @in=@remote={0xac, 0x14, 0x0, 0xbb}, 0x8, 0x14, 0x14}, @sadb_sa={0x2, 0x1, 0x1, 0x80000000, 0x3, 0x70, 0x4, 0x1}, @sadb_key={0xd, 0x8, 0x2f8, 0x0, "3a3058e3e99d088d20608829824583dc8a721a472611a3979855c8fdf642ef46177283fdbf2c8964ada1a8a6af106069d24bf6f1b8f7a009592fc960f48260d619eab782024c04f4d2b6128556b34c777823003d748aefe8053dd5f7061e5d"}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x4, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x7}}]}, 0x178}, 0x1, 0x0, 0x0, 0x0}, 0x20000001) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000001000-0x10)={0xfff, 0x5000}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = add_key(&(0x7f0000008000-0x8)='trusted\x00', &(0x7f0000008000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000007000)="c1649609602206c381c536deaec646c5212dfbb37678bff11460c9b8ae1b96e7583a5b89cb0174995666d31729751d1bea0d302b9bf6c48cfa15d99bd425b34f6921514a98c47410b03fbda875fb0c00e70e718893ee465d974fef928643da333b11d63f12f138230a6f7298308b894da912933fa16e2637b44ae2788f9daa7e0d39b4007d6323cda15cecbd", 0x8c, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000008000-0x8)='keyring\x00', &(0x7f0000008000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, r4) 2018/01/14 21:59:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$audion(&(0x7f0000609000-0xc)='/dev/audio#\x00', 0xf6, 0x100) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000389000)={0x0, 0x7fff, 0x7ff, 0x8, 0x7, 0x1, 0x1d91, 0x5, {0x0, @in6={{0xa, 0x2, 0x7ff, @loopback={0x0, 0x1}, 0x80000000}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x80, 0x6, 0x8, 0x100000000, 0xfffffffffffff000}}, &(0x7f0000f5d000-0x4)=0xb8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000a85000)={r2, @in={{0x2, 0x2, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) writev(r0, &(0x7f0000000000)=[{&(0x7f0000738000)="39000000110009046900000080000000fbffffff0800000045ffe0070000001419001a000400020004000700000000080003010c00001ee400", 0x39}], 0x1) 2018/01/14 21:59:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000843000)='/dev/snd/controlC#\x00', 0x1, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000e9a000)={0x0, 0xffffffffffffffff, 0x0, @remote={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, 0x0}, &(0x7f0000ea0000)=0x1c, 0x0) ioctl$sock_netdev_private(r2, 0x89ff, &(0x7f00005a9000)="e48d1daf25e2bc5652ea0fd69ef273247c6675688c1fd17fa69787cbfe3b7d5d95438c230f3b6d2bef1ca232355d4459d1758c6a9d643d63dacf3dff848337c281c689ae0b76eed85b4ee3ffb3aaf1565e4c0bdffcf8e0098c1594297bd829684efd559f30bc8e3014472c5369e2d178ba679b34d89685d24910eb8e5e869aa8cfa1dd294953c0fb82") bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000169000)={r2, r1, 0x4, 0x1}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000b47000-0x4c8)={{0x7, 0x0, 0x0, 0x0, "2a421c03781c85e5de4eae2be6be026f26ed58788e01428a987c6eb6d58814a89e3e9d707f1c8d002aaab2c6", 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], {0x0, 0x989680}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f000025f000-0x7)='ns/pid\x00') ioctl$sock_bt_hci(r2, 0x0, &(0x7f00009da000-0x20)="4d1be5e0cf9548faa9ccdb70ad351767bc3efd184fd2ddd1278cabd14e9d973e") connect$ax25(r3, &(0x7f000075b000-0x10)={0x3, {"5db901992be585"}, 0x162}, 0x10) mq_timedsend(r3, &(0x7f0000de1000)="d26014492c673f79e249c98118d33db939ea2ec246f07c478f272b3194fe34b5d29fb35f29fd9a1db48cb3acab39794a23ab6e65c76594a9681ea42fdd1ffbe3b796d1", 0x43, 0x103, &(0x7f00002ee000-0x10)={0x77359400, 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000eda000)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x5, 0x2, 0x0, 0xf, 0x7, 0x8b, 0x0}, 0x20) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 2018/01/14 21:59:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f000088c000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2000ff, 0x1, 0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 79.019767] binder: 13125:13141 BC_ACQUIRE_DONE node 177 has no pending acquire request [ 79.028084] binder: 13125:13141 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 79.044219] binder: 13124:13133 BC_ACQUIRE_DONE u0000000000000000 no match 2018/01/14 21:59:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f000031c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000fad000-0x35)=""/53, 0x35, 0x0, &(0x7f00000eb000-0xa)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f00006fe000-0x78)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000a5000)='personality\x00') sendfile(r1, r2, &(0x7f0000532000-0x8)=0x0, 0x3) connect$unix(r0, &(0x7f00000bc000)=@abs={0x0, 0x0, 0xffffffffffffffff}, 0x8) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f0000cdc000)={0x3b, 0x5ba000, 0x3f}) [ 79.046093] binder: 13152 RLIMIT_NICE not set [ 79.090227] binder: 13124:13133 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 79.093528] binder: 13125:13141 BC_FREE_BUFFER u0000000000000000 no match [ 79.093546] binder: 13125:13141 BC_INCREFS_DONE node 177 has no pending increfs request [ 79.093567] binder: 13125:13141 Release 1 refcount change on invalid ref 2 ret -22 [ 79.093575] binder: 13125:13141 unknown command 0 2018/01/14 21:59:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 79.093587] binder: 13125:13141 ioctl c0306201 208fdfd0 returned -22 [ 79.141373] binder: 13124:13133 BC_FREE_BUFFER u0000000000000000 no match [ 79.149338] binder: 13124:13133 BC_INCREFS_DONE u0000000000000000 no match [ 79.161975] binder: 13124:13133 Release 1 refcount change on invalid ref 2 ret -22 [ 79.170341] binder: 13124:13133 unknown command 0 [ 79.178084] binder: 13124:13133 ioctl c0306201 208fdfd0 returned -22 [ 79.188857] binder: 13170:13174 BC_ACQUIRE_DONE node 178 has no pending acquire request [ 79.197320] binder: 13170:13174 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 79.204845] binder: 13170:13174 BC_FREE_BUFFER u0000000000000000 no match [ 79.211863] binder: 13170:13174 BC_INCREFS_DONE node 178 has no pending increfs request [ 79.220081] binder: 13170:13174 Release 1 refcount change on invalid ref 2 ret -22 2018/01/14 21:59:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = getpid() prlimit64(r0, 0x80000000007, &(0x7f00008bd000-0x10)={0x0, 0x0}, 0x0) memfd_create(&(0x7f0000b51000)='em0%eth1\x00', 0x0) mkdir(&(0x7f000007f000-0x8)='./file0\x00', 0x2) 2018/01/14 21:59:18 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000536000)='/dev/vcs\x00', 0x80, 0x0) sendmsg$nfc_llcp(r0, &(0x7f0000ae1000-0x38)={&(0x7f0000ed8000-0x49)={0x27, 0x80000000, 0x9, 0x0, 0x10001, 0xffffffffffffff63, "7b5f60d4980a182d28e8077b083209c879ca9ad8c6ed30053474d7c1370e101f3dec52b3b270e72f5775134e7f31f1c911ae8b28f79227a19c7f5986c479ca", 0x6}, 0x60, &(0x7f0000da6000)=[{&(0x7f000001e000)="df30a45f40", 0x5}, {&(0x7f0000d38000)="4be298e49990130f7c308576bf060531fc1c42945c73699fa638d8f68dad880cc22a4c0d13c51d87a7145e6fcb9bf76509a753dec57434de16ac462d0d3f5ca0ff7c1dedb711b4a82f162327d86a86db04afdf24ec0b4ca6abb977a4046a28d7cfc4a76452ec93b0eae0947b747b4e83046fa14349319a96ea87b80b04d4520a803bbf8d146bca03d7cebf2cab6263a0fe429d2bc53a9948cf675008b5fd9f7e7ab782ec4a53", 0xa6}], 0x2, &(0x7f0000fad000)={0xf0, 0x13b, 0x5, "eef90bf300d487ca626c363a016b2de31c4482d91dbf63cb9a267c2001ec7945a096192f400c450d0a946ad48e03f32b3f1e1f7ce6e84718294152575532d625572630edb6fa8a73c7fe19f0da5bf957e5e7a3cc9cda68655ea75dfed47fbb8a12204e80201a1bbd1fd8da0928f326eb0ba1d95195782ae488554ccc302d3811f50ce8e55aba8edda77e44857295c43033223d25b9f606669f3c6a9a2e6278e2bdf37644e081663569cab901a09c620c34ad890cb28ac935bf695968a64a72de373cb0af8df2eb9ad0283a5a4344600c2da392316f899e47815c25e7"}, 0xf0, 0x4040000}, 0x20000000) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000187000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x75, &(0x7f00001c0000)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000ddb000-0x1)="e1", 0x1, 0x0, &(0x7f00006a0000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00009c4000-0x8c)={0x0, @in={{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000a4d000-0x4)=0x8c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00007fc000-0x8)={r3, 0x6}, &(0x7f000046e000-0x4)=0x8) ioctl$KVM_S390_INTERRUPT_CPU(r2, 0x4010ae94, &(0x7f000069f000)={0xe31, 0x7fff, 0x4}) sendto$inet6(r2, &(0x7f000035b000)='W', 0x1, 0x20000041, &(0x7f00000fc000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000db0000-0x8)={0x0, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000995000)={0x0, 0x2, 0x1, [0x2]}, 0xa) 2018/01/14 21:59:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000512000)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000647000)='/dev/input/mouse#\x00', 0x800, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000b4f000)={{0x0, 0x0}, ""/64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, &(0x7f000008a000)=0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x4) 2018/01/14 21:59:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00002f2000)=[{&(0x7f0000453000-0x1c)=@in6={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c, &(0x7f000031f000-0x10)=[], 0x0, &(0x7f0000095000)=[@init={0x18, 0x84, 0x0, {0xc47, 0x0, 0x0, 0x5}}], 0x30, 0x0}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000a7f000)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000bef000-0x9)='/dev/vcs\x00', 0x180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000afd000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000095000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000664000-0x90)={[0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000fe2000)={{0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x62689cc022a97de7, 0x0, 0x0, 0x104081, 0x0, 0x500, 0x0, [0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/01/14 21:59:18 executing program 2: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f000055d000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000000)=0x80) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000f72000-0xc)={0x2000000d, 0x0}) getpeername$llc(r1, &(0x7f00004c3000-0x10)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, &(0x7f0000db6000)=0xfffffc5a) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00006d3000)={0x7}, 0x4) sendmsg$key(r1, &(0x7f0000fac000)={0x0, 0x0, &(0x7f0000084000-0x10)={&(0x7f0000b4c000)={0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, []}, 0x10}, 0x1, 0x0, 0x0, 0x0}, 0x0) [ 79.220671] binder: 13175 RLIMIT_NICE not set [ 79.232443] binder: 13170:13174 unknown command 0 [ 79.237342] binder: 13170:13174 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 79.268888] kauditd_printk_skb: 19 callbacks suppressed [ 79.268894] audit: type=1400 audit(1515967158.616:660): avc: denied { getrlimit } for pid=13178 comm="syz-executor6" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 [ 79.282113] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/14 21:59:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00002a0000)='/dev/loop#\x00', 0x0, 0x44042) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000c73000-0xe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, "b3766620193d1f4940530562f1dfbcb5798e8eac40c2fc178a050bc7f51b2b3e87037ff1bb24fed073914de85ec337a49eef29498c04617373d22d2b7964d033", "e925b4592bb5e193f46ba1386e891c6db49c4bea66fbbe7eb6b9a7d05d12540b4d11fb5f3db1390b9d062ccab67690081b5399edc9b7e80599800da58a458ade", "43d0367956c5c9e6812abe7db76bfdf5d786b84b3f1685e63f2b71a33bd90026", [0x0, 0x0]}) set_tid_address(&(0x7f0000f50000-0x4)=0x0) 2018/01/14 21:59:18 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) r1 = creat(&(0x7f0000c0e000)='./file0\x00', 0x8) ioctl$int_in(r0, 0x5473, &(0x7f0000be3000)=0x4) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000a58000-0x4)=0x0) fcntl$getflags(r1, 0x40b) connect$inet6(r0, &(0x7f0000f03000)={0xa, 0xffffffffffffffff, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) 2018/01/14 21:59:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00008a8000-0x78)={0x4000000002, 0x78, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7dbf, 0x453}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000614000)="74756e08000000000000008000000000", 0x0) pwritev(r0, &(0x7f00000a4000-0x10)=[{&(0x7f000079e000-0x200)="b5", 0x1}], 0x1, 0x0) 2018/01/14 21:59:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 79.282121] binder: 13177:13191 ioctl 40046207 0 returned -16 [ 79.326627] binder: 13177:13197 BC_ACQUIRE_DONE u0000000000000000 no match [ 79.326637] binder: 13177:13197 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 79.326649] binder: 13177:13197 BC_FREE_BUFFER u0000000000000000 no match [ 79.326659] binder: 13177:13197 BC_INCREFS_DONE u0000000000000000 no match [ 79.326671] binder: 13177:13197 Release 1 refcount change on invalid ref 2 ret -22 [ 79.326677] binder: 13177:13197 unknown command 0 [ 79.326687] binder: 13177:13197 ioctl c0306201 208fdfd0 returned -22 [ 79.357807] binder: 13184:13195 BC_ACQUIRE_DONE node 179 has no pending acquire request [ 79.357824] binder: 13184:13195 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 79.357840] binder: 13184:13195 BC_FREE_BUFFER u0000000000000000 no match [ 79.357853] binder: 13184:13195 BC_INCREFS_DONE node 179 has no pending increfs request [ 79.357872] binder: 13184:13195 Release 1 refcount change on invalid ref 2 ret -22 [ 79.357880] binder: 13184:13195 unknown command 0 [ 79.357891] binder: 13184:13195 ioctl c0306201 208fdfd0 returned -22 [ 79.361118] binder: 13195 RLIMIT_NICE not set [ 79.404824] binder: BINDER_SET_CONTEXT_MGR already set [ 79.404834] binder: 13207:13212 ioctl 40046207 0 returned -16 [ 79.414839] binder: 13207:13212 BC_ACQUIRE_DONE u0000000000000000 no match [ 79.414851] binder: 13207:13212 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f00003e8000-0x1a)="7722af8ad14afc193ec832dc7cebceabb12724dd3f93cc1ddeda", 0x1a) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:18 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000b05000)={0x2002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x14) socket$inet6_dccp(0xa, 0x6, 0x0) 2018/01/14 21:59:18 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00007ff000)={@common='gre0\x00', @ifru_addrs={0x2, 0xffffffffffffffff, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) r0 = socket$inet(0x2, 0x8000000000000003, 0x2) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00009d1000)=0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/01/14 21:59:18 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/01/14 21:59:18 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000514000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) signalfd4(r0, &(0x7f0000000000)={0x7}, 0x8, 0x800) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000a8000)=[{&(0x7f0000463000-0x22)="5800000014000900a2bb4b80040d8c5628060000000004106a9643c218fe59009e4a03ca8164243e890000000a215a0004fbf50dfff90003a5000004001ce1ed5e0000000000221f100001000700f8ffff0000ec6b0f536e", 0x58}], 0x1) 2018/01/14 21:59:18 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000006000-0x2c)=[], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:18 executing program 7: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000001000-0xa)='id_legacy\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000002000-0xb)='security^*\x00', 0x0) keyctl$clear(0x7, r1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001000-0x20)={@common='ip_vti0\x00', @ifru_flags=0x1000}) openat$kvm(0xffffffffffffff9c, &(0x7f0000002000-0x9)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x9) add_key$keyring(&(0x7f0000002000)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000003000-0x20)={0x2, 0x0, 0x10003, 0x1f}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe7000-0xa)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003ba000-0x24)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_pts(r3, 0x117240) writev(r4, &(0x7f00009ca000-0x70)=[{&(0x7f00007bf000)="93035b7b273b8c04e22610231b2219e74b63828e1cffe4fe2e071242d18413acb77e69bf63c4cfad7ccc92939be17cdbc117fd750ce0dfb6d9aa56e9d0edabd4d99d64dd744261219309", 0x4a}], 0x1) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000003000)={0xfff, r2}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000a02000)=0x81) socket(0x40000000015, 0x5, 0x0) 2018/01/14 21:59:18 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000acd000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) utime(&(0x7f0000c97000-0x8)='./file0\x00', &(0x7f0000a98000)={0xedf2, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000af6000)={0x100000010006, 0x0, 0x0, 0x1000, &(0x7f0000a98000/0x1000)=nil}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00001f5000-0x9)='/dev/dsp\x00', 0x200040, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000f73000-0x4)=0x4, &(0x7f0000ff0000)=0x4) ioctl$KVM_SMI(r2, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 79.414865] binder: 13207:13212 BC_FREE_BUFFER u0000000000000000 no match [ 79.414877] binder: 13207:13212 BC_INCREFS_DONE u0000000000000000 no match [ 79.414890] binder: 13207:13212 Release 1 refcount change on invalid ref 2 ret -22 [ 79.414898] binder: 13207:13212 unknown command 0 [ 79.414910] binder: 13207:13212 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:18 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000048000)='/dev/snd/seq\x00', 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000021000-0x50)={{0x0, 0x0}, {0xe, 0x0}, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/14 21:59:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0x11) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00006fb000)={0x0, 0x0}) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000009000)=0x0, &(0x7f0000007000)=0x4) 2018/01/14 21:59:19 executing program 3: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/member\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000000)={0xfffffffffffffff8, 0x100000000, 0x9}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000000)=0x1c) finit_module(r0, &(0x7f0000001000-0x1)='\x00', 0x3) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001000-0x1e)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setgroups(0x0, &(0x7f0000000000)=[]) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x40) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000)='/dev/rfkill\x00', 0x80000, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002000)={&(0x7f0000003000-0x8)='./file0\x00', 0x0, 0x10}, 0x10) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000004000-0x4)=0x7, 0x4) open_by_handle_at(r3, &(0x7f0000001000)={0xf4, 0x100000001, "43f7bafbe5149da889892e544d6ae897e36d02108fc2ec58490a1674cd24cecf915fe62657ca0805924c58ba5c09a24e1bc46784eadada278555d74bbad4e814abbc79222ab036d44c8a493c7219277fbd77581fb3f986dfa94014e6ec9704e4504469f63960d1baad7c218ff69b27bee6e8bb3bc83f251d53185973d7d6ec61973a6a39188d0f960af8d6fe789027c139a5150a7526d728d9db011c63f023304a2aa396a4c9f8d1736ebfcb027997b51f6b9a937a3a1d28fbf7cd2cb207b13c9d8aa7c98ca97e8ee1ff15dd47341fff9889fe939670a442b55a0f555d49123dc31f1e108038e1a5ceee442f"}, 0x22a80) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000002000)=0x0, &(0x7f0000005000-0x4)=0x4) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000001000)=[0x0, 0x7]) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000006000-0xf7)=""/247) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000007000-0xc)={0x1, 0x0}) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000007000)=0x4, 0x4) syz_open_dev$amidi(&(0x7f0000004000)='/dev/amidi#\x00', 0x7c02, 0x800) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000008000)={0x0, 0x0}) [ 79.609184] binder: 13222:13228 BC_ACQUIRE_DONE u0000000000000000 no match [ 79.632240] binder: 13222:13228 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:19 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f000016a000-0x8)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000)=0xfea6) r0 = syz_open_dev$sndpcmc(&(0x7f000046d000)='/dev/snd/pcmC#D#c\x00', 0x8001, 0x20000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000c70000)=""/250) r1 = msgget(0x3, 0x3) msgsnd(r1, &(0x7f0000ad4000)={0x3, "fde1909521fb5e6925676e0054b163f059b05a7ab2b976ef798f25b46fb1de3a5610e60d3df7ab2396ff793e7ae11b289a0c127c1a8bbaf38118f32aae30288372ff1696f67494bdd1806876fa55e39797521c7b153f5f449673351f2eb0d8da8158a0ab0a306fd857fd05644ec27f171ce8e6d017d54d97cf"}, 0x81, 0x800) syz_emit_ethernet(0x1f, &(0x7f0000fd8000-0xbe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0}, [], {@llc_tr={0x11, {@snap={0xaa, 0x0, '[', "e2472e", 0x0, "88ce1d4f3ab6811b14"}}}}}, &(0x7f0000ea4000-0x18)={0x0, 0x1, [0x77c]}) [ 79.674168] binder: 13222:13228 BC_FREE_BUFFER u0000000000000000 no match 2018/01/14 21:59:19 executing program 6: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000002000-0xe)='/selinux/load\x00', 0x2, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x1000) socketpair$llc(0x1a, 0x1, 0x0, &(0x7f0000001000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f000063f000)='/dev/rfkill\x00', 0x82, 0x0) writev(r1, &(0x7f000018d000-0x10)=[{&(0x7f0000cd6000)='{', 0x1}], 0x1) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000739000-0x10)='/selinux/create\x00', 0x2, 0x0) 2018/01/14 21:59:19 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 79.685766] binder: 13225:13240 BC_ACQUIRE_DONE node 180 has no pending acquire request [ 79.685787] binder: 13225:13240 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 79.685802] binder: 13225:13240 BC_FREE_BUFFER u0000000000000000 no match [ 79.685816] binder: 13225:13240 BC_INCREFS_DONE node 180 has no pending increfs request [ 79.685835] binder: 13225:13240 Release 1 refcount change on invalid ref 2 ret -22 [ 79.685844] binder: 13225:13240 unknown command 0 [ 79.685854] binder: 13225:13240 ioctl c0306201 208fdfd0 returned -22 [ 79.687189] binder: 13240 RLIMIT_NICE not set [ 79.804529] binder: 13222:13228 BC_INCREFS_DONE u0000000000000000 no match [ 79.811575] binder: 13222:13228 Release 1 refcount change on invalid ref 2 ret -22 2018/01/14 21:59:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f000020e000-0x4)=0x0) capget(&(0x7f000087c000)={0x19980330, r1}, &(0x7f0000625000-0x18)={0x77e, 0x800, 0x200, 0x98, 0x7500ba97, 0xffff}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa, 0x0, 0x0}) read(r0, &(0x7f0000d15000-0xa)=""/10, 0xa) 2018/01/14 21:59:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000006000-0x2c)=[], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) seccomp(0x1, 0x0, &(0x7f0000159000-0x10)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) r0 = syz_open_dev$loop(&(0x7f0000c7c000-0xb)='/dev/loop#\x00', 0x0, 0x0) pwrite64(r0, &(0x7f0000b8d000)="c39261bbd51f1b406cf286829fb221c2797087d937253b2ea0a01bf9b8644a1d49bfb1f6ab0b4d80cee581f80d43fd1a82496b9b529b2f8db7c00affbbc19805ef1d0d3b83e0d4755dda90410adf6317b93713734ac35b322fde2cd18b40c73d85e1f6c525bd09c7e00c4c6dbb45507eae926b4f4db52fe5e394f776a10d6803c95fe65be703d76a0ba3244be1a18df9a5133360431fde236e15e39e47ed6fc96862f7d16653706f08c04dc5", 0xac, 0x0) lseek(r0, 0x0, 0x1) 2018/01/14 21:59:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00005f9000-0xf)='/dev/sequencer\x00', 0xa02, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f000038d000)=0x0, &(0x7f000031f000)=0x8) r1 = semget(0x2, 0x0, 0x40) clock_gettime(0x0, &(0x7f0000ca5000-0x10)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000fab000)={0x0, 0xff, 0xfffffffffffffff8, {r2, r3+10000000}, 0x3, 0x7fff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) semtimedop(r1, &(0x7f0000c7b000-0xc)=[{0x1, 0x100000000, 0x800}, {0x5, 0x5, 0x1000}], 0x2, &(0x7f0000ab9000)={0x77359400, 0x0}) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000f72000)=@assoc_id=0x0, &(0x7f0000975000)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f000012b000)={r4, 0xa14}, &(0x7f00001e2000)=0x8) write$sndseq(r0, &(0x7f00009a2000-0x150)=[{0x2, 0x0, 0x0, 0x3ff, @tick=0x0, {0x0, 0x0}, {0x0, 0x0}, @control={0x0, 0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x0, {0x81, 0x1}, {0x0, 0x0}, @connect={{0x0, 0x0}, {0x0, 0x0}}}], 0x60) 2018/01/14 21:59:19 executing program 6: timer_create(0xfffffffffffffffd, &(0x7f0000044000)={0x0, 0x14, 0x0, @thr={&(0x7f0000a86000-0x98)="", &(0x7f00009d0000)=""}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000454000)=0x0) clock_gettime(0x7, &(0x7f0000a74000-0x10)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00002c4000)={{0x0, r0+30000000}, {0x0, 0x989680}}, &(0x7f0000046000)={{0x0, 0x0}, {0x0, 0x0}}) timer_settime(0x0, 0x0, &(0x7f00007af000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006f5000)='/dev/audio\x00', 0x2802, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00001a6000-0x4)=0x0, &(0x7f0000661000)=0x4) r2 = semget(0x2, 0x0, 0x2a0) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f00008cc000-0x19)=""/25) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000d88000)={0x3, 0x1, 0x6, 0xff}, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00001aa000-0x10)={0x0, 0x8, 0x3f, 0x3}, &(0x7f000097c000-0x4)=0x10) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r3, 0x3}, &(0x7f0000001000-0x4)=0x8) 2018/01/14 21:59:19 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/01/14 21:59:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000092000-0x9)='/dev/kvm\x00', 0x400, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000d41000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f000021c000-0x10)={0x0, 0x10, &(0x7f0000d75000)=[@in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0xa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f00005ef000)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000680000+0xb7b)={r3, 0x9}, &(0x7f0000e8a000-0x4)=0x7) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000398000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000839000-0x20)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1, 0x0}) readv(r2, &(0x7f0000405000-0x20)=[{&(0x7f0000dc1000-0x7f)=""/127, 0x7f}], 0x1) futex(&(0x7f0000013000-0x4)=0x0, 0x0, 0x0, &(0x7f0000061000-0x10)={0x0, 0x0}, &(0x7f00003d0000-0x4)=0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) [ 79.819308] binder: 13222:13228 unknown command 0 [ 79.824178] binder: 13222:13228 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000f04000)=@nfc={0x0, 0x0, 0x0, 0x0}, &(0x7f000051e000-0x4)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000211000)={0x0, 0xbd9, 0x4, 0x4, 0x4, 0xdf}, &(0x7f0000838000)=0x14) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f000068a000-0x4)=r2, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f000044d000-0x8)=0x0) 2018/01/14 21:59:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000552000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000e04000)={0x12, 0x5, 0x0, 0x0}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00009fb000-0x9)='/dev/dsp\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00004ed000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_DMA(r3, 0xc0406429, &(0x7f0000ea7000)={r4, 0x1, &(0x7f0000e41000-0x4)=[0x3], &(0x7f0000fe9000-0xc)=[0x101, 0x4000000, 0x13af], 0x55, 0x4, 0x7fff, &(0x7f0000590000-0x10)=[0xffffffffffffffff, 0x3, 0x8, 0x9], &(0x7f0000843000-0x8)=[0x3, 0xd1], 0x0}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket(0x11, 0x802, 0x0) mmap(&(0x7f0000980000/0x10000)=nil, 0x10000, 0x0, 0x80012, r5, 0x0) [ 79.863445] audit: type=1326 audit(1515967159.212:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13269 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452cf9 code=0x7ffc0000 2018/01/14 21:59:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:19 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x40000000000036, &(0x7f000066b000-0xd0)="dc13b51a5b31306e78dd580871ab2144ece470d734cfe694f75d34e12d9d233f08008875c4ccd64ade0e8ce0442fbc50974e8e1195c604f8000000040002663d75dd0500000000000500048a5d070838a46611f937f96f7d4ff812a8f9fc3f0722e60000000000000000d359bdeb62c88a769c862f856d59f8b9f3aee345e59eee7026400a9cda06a2f125e2c3525ad0ffffffffffffffff3d728501902d973e668fa3f9b8974fec92b836614657ade603936ca6556ddfaedab6070000396f4b9b3e5a2db8352780dff40bb45a7883b0", 0xd0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000a1d000)={@generic="8bcb0bf74b51fea8fe634501fed6dab7", @ifru_flags=0x8000}) r2 = openat(0xffffffffffffffff, &(0x7f00006f8000-0x8)='./file0\x00', 0x2, 0x4) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00009b1000)=""/214) setsockopt$inet6_buf(r1, 0x29, 0x36, &(0x7f000097c000)="", 0x0) 2018/01/14 21:59:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) [ 79.916458] binder: 13273:13289 BC_ACQUIRE_DONE u0000000000000000 no match [ 79.916470] binder: 13273:13289 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 79.916482] binder: 13273:13289 BC_FREE_BUFFER u0000000000000000 no match 2018/01/14 21:59:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000011000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = socket$inet(0x2, 0x1, 0x0) fcntl$dupfd(r0, 0x406, r1) r2 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x8000000000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000038000)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00008d6000)={0x0, 0x80000, 0xffffffffffffff9c}) socket$inet6(0xa, 0x1, 0x1) socketpair(0x2, 0x1, 0x9, &(0x7f00003ba000-0x8)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000ac9000)={r4, 0x80000, r5}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000630000-0x20)={@common='eql\x00', @ifru_flags=0x301}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000ceb000-0x4)=0x2, 0x4) write$tun(r2, &(0x7f000062d000)=@hdr={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x415, 0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @broadcast=0xffffffff, {[]}}, @dccp={{0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "631306", 0x0, "f85e75"}, "20ae28937906218793eab5a80ba05d273c2e247d9e9f0168be27acd5f36ceb4132067a753a0657e0cfb84d7f8be8f3bf077c4e3a5f31da255789541813f48f49142487750794aec3dfd36aa1ab778ce4b67917b73fd9e19c47dff3c98444e08c20e472cb51201da227b2628a8ab08c5000390c26f364f7a7cc0999dee1c73d6b74194f3280140e06e931f734edf07a9c06ee842e06e8254f700cc66c98522f58aaa360849f3baa2c91476f5eac73b726cf30341243c2083bf7e913daa23e47d9d2d2bb5dfc3c8f247f4f83b40a4ef968621119dcf85f97d116b2a753f1dc26daa49a199d8387c80dfcf70875ca13e207f19eae92755937ee3f87e0bb01c1eaa55546a0a6ddef087e336e2249de27a070d3a4baa2a05d9d4dc00e9176823eb49017794e29b61221a7bf7470de9586aef03eb8b6de5639a12adbae0baa93787bce608bf3b39e472c1282cfe722ed0e21f5e594203a2528e1f310179839eee30af89f34b61fc1c213db861e676e17cb6cbf1413d5191ec5c44f10f38c6fa678bb055a65e5afd3adb1a305ac1b009c51d85349667da13606b80250130f7a903d149d87db56429c81d61d8c1827bba20da5601231c8fcda6a1dea3fe55c5717be351daa782f1c3229d280a23ebe5c1248223107e9a3887a0813eb5d5f73fdf257e4272b4348294efc29aed9fb989a719cbfc7b28def8100874fff7905199fb49d5a2b1b3007e0cac6dcb865cc9c1101e657e90daa2cfae4c2e8146f785b88884030df0d98ee14972f984a8855ee2398778a7b4d810bdd1ea8c5a8e2930c0fea8801a1aee4944af626836d204dbb496f6d3243327392b88174821c478cc74697ba8e42a40e27994146af75dec6bfa4d94b0b4626c4b254bec32bd10233f35adb030d9ec68e89101f75a593075e7317579938c281a89f45e0add2082d59c52ff42c9aec78d0db8536e4ca98d6bbb5bbf11c22cb169f93951b7e1d1efd80e1acff829ac54485fd1a1df70c449ca270e708a40e3656b69f228029d19f8a3b1da0234fb4964b571c239c890ffd1c549360ee6cf3eb15af714e11734b99ba9f6730eca1f56a6b13118fbcabb4e047e863c6136bc3295c4f424aa2d201d3a178a63f5049c02abbc807283673e76864f22d65d782a893f02775e7742e00affc2fa9df00be522f16671f8e65e6b5c19feb08d622cc90f2405d770aa42e14c3f40109bc0b59138789d21a70a88af3b58b6ad6a66e382a61e65eb0c7f7de947083703d42e28edc22bf74ed6866df6aea46731189e18af34b577c6ddf49c1a0814213080690d268984e755b3d8c0cc055d8157cb23d16228080980b00ad17d8dbaf6ff4a49ffc15c100ccbe55582f59a33d64eff9776c42aed91a9e1bdfe1461d382811165fc4a9699c3c6573cf31cdd64ca63cbaf1fba3fdfc"}}}, 0x41f) [ 79.916492] binder: 13273:13289 BC_INCREFS_DONE u0000000000000000 no match [ 79.916504] binder: 13273:13289 Release 1 refcount change on invalid ref 2 ret -22 [ 79.916510] binder: 13273:13289 unknown command 0 [ 79.916518] binder: 13273:13289 ioctl c0306201 208fdfd0 returned -22 [ 79.986328] binder: 13267:13293 BC_ACQUIRE_DONE node 181 has no pending acquire request [ 79.986348] binder: 13267:13293 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 79.986366] binder: 13267:13293 BC_FREE_BUFFER u0000000000000000 no match [ 79.986380] binder: 13267:13293 BC_INCREFS_DONE node 181 has no pending increfs request [ 79.986400] binder: 13267:13293 Release 1 refcount change on invalid ref 2 ret -22 [ 79.986410] binder: 13267:13293 unknown command 0 [ 79.986420] binder: 13267:13293 ioctl c0306201 208fdfd0 returned -22 [ 79.989962] binder: 13293 RLIMIT_NICE not set [ 79.994802] binder: 13300:13302 BC_ACQUIRE_DONE u0000000000000000 no match [ 79.994815] binder: 13300:13302 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 79.994840] binder: 13300:13302 BC_FREE_BUFFER u0000000000000000 no match [ 79.994863] binder: 13300:13302 BC_INCREFS_DONE u0000000000000000 no match [ 79.994886] binder: 13300:13302 Release 1 refcount change on invalid ref 2 ret -22 [ 79.994898] binder: 13300:13302 unknown command 0 [ 79.994916] binder: 13300:13302 ioctl c0306201 208fdfd0 returned -22 [ 80.080324] device eql entered promiscuous mode 2018/01/14 21:59:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 80.176739] audit: type=1326 audit(1515967159.212:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13269 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452cf9 code=0x7ffc0000 [ 80.201304] audit: type=1326 audit(1515967159.241:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13269 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=2 compat=0 ip=0x40d031 code=0x7ffc0000 2018/01/14 21:59:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000006000-0x2c)=[], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f000014f000)='pagemap\x00') r1 = syz_open_procfs(0x0, &(0x7f0000866000-0xb)='projid_map\x00') clock_gettime(0x0, &(0x7f0000e04000-0x10)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f000081f000-0x10)={r2, r3/1000+30000}, 0x10) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000d48000-0x68)={0x6, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) sendfile(r1, r0, &(0x7f0000318000-0x8)=0x0, 0x400000ff) 2018/01/14 21:59:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000809000-0x8)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f00008f7000-0x7)='mounts\x00') r2 = epoll_create(0x1f) r3 = request_key(&(0x7f0000e1a000-0x6)='rxrpc\x00', &(0x7f00002a1000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f00003a6000-0x7)='mounts\x00', 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000d87000-0x8)='keyring\x00', &(0x7f0000715000)={0x73, 0x79, 0x7a, 0x2, 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r3, &(0x7f0000587000)=[{&(0x7f0000751000)="e5c310f9d06ae1d3789ac74a440d747b75bd4c1f817c8fd0c64961cc44c8eb2b0175308de3e3265150f2100a27562257286e71cd0a", 0x35}, {&(0x7f0000e05000-0xad)="d735a965592e5550d4afc8ea8de10f5d7b965c2003ee048fbd23e1fd4d8fe90e2052bcc47bb7b670638de4537027fc024934fb03d626606463a720fe3429f8a7c684fa931390359e577bc246e6d4c57119e47c434edc9b84d050dd3fd405d9fbbb2c3937fa3da328d6db4c5111f685a26cfc116bcde3be99133aaa2ca866a4afef8ae54efe9c4b1ee9f5196d49e0d8c3331646d6b3d373468d9e0348c6d6c9fda7178f7e313f51ab220db60569", 0xad}, {&(0x7f0000bc9000)="bb3e1e6b2cc17db25fffdb79a26742c73a880a5ee069e3914447a4acf72993206b98ae91846fd38b3126b7f393da343dcb8f132e977fc58f0855c7f50278016c60c2a390", 0x44}, {&(0x7f0000505000-0x95)="dad25d9e72def0a94e309b2688f416750a489d893b8ff5b36414f0ed55c4ccd52610c2e4d3d970ec610ecd67a7765af471975244414f30e99607f77eaee96fdb1895e506c92a414770926cb1e211398c4e82de278caa18f109b59e9ea220daa9a1cdd79cdb2588a08f2f7d287d7664119f1724b71f29421dd5422b13f13f3e4323774af51275bd5e305e21b36aa84d82dab767b498", 0x95}, {&(0x7f0000ac0000-0x1000)="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", 0x1000}], 0x5, r4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000faf000-0xc)={0x0, 0x0}) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9f000-0x8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x0, &(0x7f000000a000)="") mount(&(0x7f0000dca000-0x8)='./file0\x00', &(0x7f0000b91000)='./file0\x00', &(0x7f0000013000-0x5)='affs\x00', 0x95420, 0x0) 2018/01/14 21:59:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f000033a000-0x10)={0x0, 0x0}) nanosleep(&(0x7f0000db6000-0x10)={r0, r1+10000000}, &(0x7f0000246000-0x10)={0x0, 0x0}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001b5000-0xa)='/dev/ptmx\x00', 0x106, 0x0) writev(r2, &(0x7f0000f9e000)=[{&(0x7f0000d64000-0xf6)='b', 0x1}, {&(0x7f0000cea000-0x1000)="59049b7f22cea0d72d72866a9b452395792872b29c6c431e7bff3e390d9b4ea9ffebde0505eb7550594295108b36dd8716cb971f74af726b2aed081ee7871ed3f578f236efe89fd20d08c38733a03761d531552f75559d757cb4c6dab5009b722622d77bcf5ffcf9e07fa062a2375de4806d0f18884c812da174c06b4677276f15215e8047ed2f6b93d0e1295d54676777777ae7df4062e10c7460ae16538fecc9afc9a6734f8e0c00745c7f4fd2c968dab4eb23dcf78b75bf32039a01b1b82c93245699a7a70c05ab11c666f27f699ee946488a91ab6ba052ca5a41381102030dc7f3c624b662b8bbb74aa76a72340798a8e3817f45b796918f8d20ee2472de0fad25a151a707bfc09184c5571d6b8fcb247772600539b906c63aa760d779c7b36a5fd3d4928b8d8e66154eca6c9e818fe6c59f3539fee524b7dd8b701738fc2ca0fec18398ae326563bed206f1218a8ce5265b223b17cccc352ebccc1e0f38935549d018a1d4729830b32a9902732be9f1f9088f5442874f2541128c779b61fa40bb8c3a9dd2c3055fa321c94e7a66f8aeeb54aef3d6e0f84ad26e40d3b54e21329d0289fd10da640ba4f2aef326ffa9844270afe87e8605c1ddfaa3f2455669e3f94b9e40bb1e4ebe8beb29e2158adf6df3944a4ae5ac56a321935f9b160acae04daa9777509cd7fd9ca571a733bf5e02a8fd9d59546219255225afdaa6206b992406ff56bb9df5d53361c3350b897fcd2d655dd25d40be558f10ce7d77e5971183f264fb5c018c3697d1a6e324c6bb3d9f66f12d5881da4335ff1738335e56e17a75f074f751e57640b9def1cddd5d80c9ae79599198161dc1225a09217b8f2865492ac312443f53a0ca02f0b389610508e63d5bbf5072d669c1c5e7ac7216c8f7fff404a49bcae535cd4869feb12c925f303cac09fcb00e7d8aa8e7216fdfebe4da3c4ec5e4e8bcd2060f78358b807761135827728d8f2ae65af34a654d21810011cfabe25f06a623803101d7c5c479fb81971f6d5c920e2ad26251512bac3eee3a817ab6787d38cd7fe7c7038e8244c72debfa595c1037abb2f90193fc6f27a81b4d2b6555d775a5a1f7784380d457bd01fd8acc7ad0f96f34127c629eadd567d50d69d7085284bb828f371c602ce09c149dcf9bafcbe777d0e2a8e7328dae04c41d53e6133924eaa0714c3fcc073a63fabba80a89e072962edd51d0dc8b82221a568018512a9be2183fc699eda0069ac54e647d180a7afa00a27bb867f3c1d8dc78c8e94eb78725342d64683b59dc672c38f2eac853a770a6e581662b522a53e2c8ebdf6e606fe0847cca71ae5505460716531b911917789e251eb1c8e1c9477ab42c9a0bbd43547f5c66754f3f1b8a8f661233328447b8b0f7cd62d2057f06361e69e373bb3630f320ddb74ad997929c2d585aafc350a70e539d1524c0", 0x401}], 0x2) 2018/01/14 21:59:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00009cc000)='/dev/sequencer\x00', 0x4401, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00001bc000-0x10)={0x0, 0xb4, &(0x7f0000bdf000)=[@in={0x2, 0x3, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x2, 0x344, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, @in={0x2, 0x2, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x3, @dev={0xac, 0x14, 0x0, 0x11}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in={0x2, 0x1, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x77, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0xffff}, @in={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x1, 0x8, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x8}]}, &(0x7f0000635000)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000a24000-0x67)={r1, 0xfffffffffffffed0, "053f36b5ab4ef184a4087a6f9b734fd15b37505318032645be15486272463c791c1f0670777b91d1c84f32c2dc7bb11040ec99840826b900d6890172f6403b124bdcf296e71a07bcd8fe2ef0c6fbfb089d3141812910c699d0e474cbcc725b"}, &(0x7f0000589000)=0xfffffffffffffd20) getresuid(&(0x7f0000b0e000-0x4)=0x0, &(0x7f0000fc2000-0x4)=0x0, &(0x7f0000f20000)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00008fb000)={{{@in=@multicast1=0x0, @in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@rand_addr=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in6=@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f0000103000-0x4)=0xe8) lstat(&(0x7f00009a4000)='./file0\x00', &(0x7f00004e5000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, r3, r4) r5 = getpgid(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00001c9000-0x110)={{0x177, 0x3, 0x2, 0x6, "dc0ee57adc8ebfe80aa1a4e2208aa2a154579fc25d5291f42ae6177ea036ef96ec892b7e7c96fe1d4705a950", 0x100000000}, 0x0, 0x0, 0x8, r5, 0xffffffffffff7d85, 0x1, "0b822a38c05c27049785759c17e6a9de6ecd79d7bd54bba92239ab42fa77dff52c9a1430e2bd6855b6daeab75936f07845959ee0a15beec6a93ff7a41dac4060", &(0x7f000057b000)='/dev/sequencer\x00', 0xf, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x80, 0x0, 0x1be, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet6(0xa, 0xa, 0x3f) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r0, 0x400448dc, &(0x7f00009f1000)="6f86ba6ac6f747123a94f584c0e848f4ed487dd6a459f8c7809fbdfce1b9fde57dd2a83c010443c98efd2b477f2b36d062bf78ffc73f0000000000007fff326130408a28629eb2bb5b8e9c6e26e4d52806ad93648b3a83696079d8248cb8b22059315566d0a3e57638d80c70dc8f884644ccb4a06e16311163adeafef97055c79c279e478ba8a88add5b5bfff8652c0703feaeefcddd27d8d7d26e5bd8ac4652104751531fd210872a5ece3b6e6d4eb4689946e96918aca25008410b4ad362320556de4d1aa93b539697a876c9fa2ed75f09a503ec8a") writev(r6, &(0x7f0000eac000-0x10)=[{&(0x7f0000e95000-0x2a)="290000001800310900030cff04000005020000000002ff000000500a0a000004000e000000f4ff01ad", 0x29}], 0x1) 2018/01/14 21:59:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x8, 0x80004, 0xfff) clone(0x23000000, &(0x7f0000f34000)="", &(0x7f0000883000)=0x0, &(0x7f000078c000-0x4)=0x0, &(0x7f00003f9000)="") 2018/01/14 21:59:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 80.225829] audit: type=1326 audit(1515967159.241:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13269 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452cf9 code=0x7ffc0000 2018/01/14 21:59:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:19 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000861000-0xe)='/selinux/user\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000f84000-0x108)={0x0, @in6={{0xa, 0x1, 0x8000, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x8}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x9, 0x4b4, 0xeaef, 0x4, 0x6, 0x1, 0xfff, 0xffffffffffff0000, 0xd0d, 0x0, 0x0, 0x6, 0x0, 0x4, 0x9]}, &(0x7f00000c7000-0x4)=0x108) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000985000-0x98)={r1, @in={{0x2, 0x2, @broadcast=0xffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff, 0xffff}, &(0x7f0000b00000-0x4)=0xfffffffffffffdb5) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00007e4000)={&(0x7f0000c06000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000002000-0x10)={&(0x7f0000002000)=@newsa={0x104, 0x10, 0x301, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in6=@loopback={0x0, 0x1}, 0xffffffffffffffff, 0x2b}, @in=@broadcast=0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0xffffffffffffffff, 0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0}, [@coaddr={0x14, 0xe, @in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/14 21:59:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = mq_open(&(0x7f0000112000)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}) mq_unlink(&(0x7f0000fc5000-0x5)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000)="", 0x0, 0x0, &(0x7f0000e0b000)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffff9c, 0xc02c5341, &(0x7f0000811000-0x68)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mq_timedsend(r0, &(0x7f00004fa000)="", 0x0, 0xb, &(0x7f0000fbc000)={0x0, r1}) r2 = perf_event_open(&(0x7f00004f0000-0x78)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) writev(r0, &(0x7f0000567000)=[{&(0x7f0000a6c000)="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", 0x1000}, {&(0x7f0000eef000+0x4ee)="8332583c840c1d95e53f9691b3bcc4d1e66f03d324bcc3a55d3b", 0x1a}, {&(0x7f0000e2d000)="ac7b3e88dbb1a7e8cd", 0x9}, {&(0x7f000090e000-0x1000)="6c0b355dfb71dd87b1498da43c448863fca0ae44e4b5918f0b64044eac2b28e41fb87405010bc56568d3a07093bfedcfee094d31a4514706f8d00866cc7096337643535ac640e53997aca7e009a1471456624d0a57ab1c380df956c89fe521758d5aeb4e4d88bbef0cf7925a5f990b26e0043822fca9d882a4c6eda09a19c4fdd9cfa561ff4a307ffaceafed7d39569c4a177c99b37d8543a3b69852c8f5195180b0addf5492ce9e4b6200b6520cc4284d99f9278ffad6927c9bfc633bd7f04da6b4ddd3838f2003ed66510d8596d9c0383c002c80326f5ce406c3e71d897bfe6eca0b114bb2c9a31b30ec0c5be8902b9074879a2e888b335e4cf738f5a9c7a8d84e8436c7c490d09452138b75d355d17d087e8702b356effd22ded34b30cbf81aa73c6358cb40cbdb249fa9da102726e70c20a6a7b59e35ef7fa56ad1597c00012fdafa06c36d975c681ecdb34355c46591899863c05eed4ec037b957efaf10decb029602dcdd3c7d96dede0978ba92b7d39ff1d0563345c3d92d2a44832c31513ba5ba18e96a5fabc7b2c1c2a8596e6a09eb3041fcc0e07c15ea6e6214ddac068f8de41986f0e952543c96dd3fe2c7909c1d5653d3f7ebf753025676136f6e65534452e970a8a8de9acf00f78a22d13d3ece58bd4ff2e0d9b702f02934760a56afbb2bea82d75f9c092f193462c7c14a2d742a055f203814f9ab796650c2a48553e1f30d50381a60c2577d489fd65f2c7f1bdb76aca662c412adaa4e7cd351838535fbd5440f029adc82dcfbc74b4f2a72e3c16f7660260a72b553659fe10e96eadf45626a5afc71ce842ffab4480909adab1982e27515802af7a3893fcbc2cf9aee840a40481036db6474fde053abb18c10e74c936be8a182e58a0a325cda4b2cd9a0fd96bb9c18634ac0e931531a3b9f6c4a0c5ff0622fb42e7f3159dccfb2bd64b2712636588d23f5f30faa28340f539ae59036bffde2a81cdb7cfeb46f227bea6bde0fc204e38aae62f0813a50739d7641fcc2f34c6fcc3a691abb88fca0e29fcda2edceedae89a4802a7fd0c021d3496ea86fc67a16345bf70e4eb44871f80dc8bdd4fd6c9b14b0fd862a78103d7f7a71eee3e2b4b65c25925438ec7d130a529e6b97af93c916203241273d0b8d83b2b52d44a1f3085ec49f6676c5b91936832f7338197c56f77e113bf6ca72831d840ecdee9eb84968077ad8c25d21588ee373dd13b2096794b66c77de1148ca4e22f138612f453215aeb0a5c9d96d53eeef68b28d5e470d412bc09a315943e66bd380569cccaa1bbece1b1a6531544a1599730e79f74dcb4e81e2c3871d41613c56c772cf138418c4dd4de3bfbb06ff12e99cc26e723d94c187255436916c43c16cbbc2125486de10b4f3e51cb38b8b18588f2b66219f14228dfc11732af2058c13e0ca62ce4b0298f70794072cd650afb862f5985819ce52cb3936f11644e48f4e619bb4bff5c09d6b2611f699dd6482d164e2968bc14f855d1d1d77092abce2620fed5d77894acc074967b73294bb48ae9c3804a43dfd3878f8022e380fe78d60898f94712d750270e562fe9a50c56411915e0609ff7aa0e54f19af2189a0736a5a1f8375761c153e05e94a3095ce0049f7354764ca22b4f2aa77f01803df37af5fdf13b369b9c294905f7b3ff02ec5b036ebb0983d78a0edc9d0626f3b01f52f1c55838e7877c3f20a228e4aeddc50c16107badf4a5f7d39da2e366a6c930ff936302d5614bf794b9158b010dc981c626a527daf6ce928d09e243936ee2bf76364ee1bc9515442a1bf56ed43dcaf693e840701ba5b6ef88c07b1bc3b3b2aea944899b4963bc2eb2d4737eb6038c0cffb2d705eb9a3806e005ba74c460c7adbc3cd26d6e3fb8d89ee78d9a574aa0c5bb005fdbc4b2612ef4c31c93777546704b7560bff7fba72592f8746b676a907f4561d5e8d000d4225fff60fda0fd7d040d6007541babf5ca0333a88062c3593f212d5f1cf173f8d3c487f2d2656bd1880b5773cd63a6c29e75458213caa323963662398f88f0a6037d4cf862aeec30eb2d37e248a69e2a6801ac58c2d83c8cae5690d2f088df60c2d2f69e934d6143bfe41f9c2370011600e2ddea307a4be5a8278abc38e756355ea3ae6c3b1f4f6476b9db8061e27ca2ab844ea03568d8004c46b71dee568959fd5256447732fa5180631b1531b85d3204c466fc66cc33a4d148656b60bf12afc4910817ec857a4f92d8bbd3fc5e497b33562e6775ad7d125d36aee344876f81d1b8600eb03977a36203c7a67cc074dbf0af6e038f50ec8031f67acef64184d0c3e9266785cfb5b395655f1d21d82c0abad4b11eca9b77459a1a4b89601020944b9bd51b29230e918f60200336958620b9486af365fba1106c61dee7be11437a5a1df5687594c92c09aedf5b70a26040cd01c37ce217bb3271f4432842d8ae4838bcf3474adb6233c343f8891a57ea90b4a3219b419c9a51485f67740260223c552b9a5cfbc0b84f50ae257be77f82e26e97b996103a222bcf8a189699f5ca06b1882144d73928f7633e1c1f46d5de05892e047f291610bf5d967396b3265e550592674a631d9564a474ab6840d1fb1a448db69328ea5f0c15c97dd3aef32cec084d3861fad4902c98837580afe9aca3abfdbdcee2fe047e475a4447c222776464b11a79d743138b29868006085a0da393a86c952d995bb2b3483c64f8cc1032fab08f35d32b6324f1d6fcb8f7afc9093333296f7263d3d44c8fb00bc7e906b5157c54fe7aeb32216bd1d28edfa9b8791d528260cfe03548616b84b82b817682a0cc72c11ddf84bf3fe1fb9743fece684b6c6583aa1e34a164e093158a8e40ce653c9603f0ad7e125cafc334e7b932b0a19abdae17aef44e75c2d7b4f4e825865fbb902c44fc6b0d58f77c514d281022086dd0e41d03b5c74df4111c982636a0e88fbc97bc9a59d0937d32a716c44c6f47d38ca7b4aef34d9c2f20e45f971749cdf2e9e1b2785ec5b5e149dfc62b95d86046fd7ddad2e4dc734fa163e73933a9f602322501dd4f84d1526f85f01f548c28cbbd71461af7f4d39ef1f0c52b09d2449bc0492aa7d8fe8b6f1c38b3423743891917f4e3504dc05ba0ca413057219ac1a331d998ea0735d814363ccc4cc4f754738fd45f576b7417d6a0d8d0648a7c5233ba08207593caadc088b690579c216751eb4d6c95252ed97b7b6bb774931a0410878ea6b8afb40194f3c9bb10af0a06d0300bffa1cdda842b8781463b339cde97032342e0cafdfd552e58576528e29823287233f03eecf19c2fbf39eb7048ef0ba52bbf8f47890b468d2b6482c6fb441a1afe2446eba22ffaf135173900a18ae23088786cfe53ebc19b1853e28985e177890a2bd4a41e5fce87e3c580325750819bc4a6f3ca581a9f6ef839c54ebcc80a716b3b228cad2b54e922ac4e745a1e9006209edb7f9c697f0732c2c0454e500b3ee93379a3eeb7f942cb2be02e4f90b18b02d9738cd653d1317a2aecfadd887f7214c79d684e902c5bf85f43b129b87efd572772e284fa97ecb922de181e14bec8e7a17c285702da258172a08a96e1e697be78cfca16f5d634631b707dc64d2d8ff9e27a9cfc33c1a0bba2b1c5c4765bdeaae731c329bc66ba673afea440ef5107c30388293c69820d49d9ddf7c9bf1af44651c8bf6ecefd3373adf843bbb5448f5f39f430bc699e5c17b9b5413c37ea1e0bab92694841f32fd8fe49f9a24c389058276cbb7416b3769ff07978e9317193de0686d1fd15cc2fc51be5a24ab52165a8d86cbb185c2babf71e6066273c84923e0594f3201a6dfbffe6f8bdcc3dab47cadf82291bbb8a6366d9ea1a033139fce161824f59d001d908f6c1b88e868e3f65d5ce400025f53518a35e86f0dfca9473f2172239a0ffa24c17b3cfd9e565f033621f67b623ec88a1d42ca06cb9d4f7f38f7a6ab3b62f12e8c3a9f403bff9eb7b1eb69025c7c02774ba3d0b3f697f0718e3f9b0751079fe7d0867b92a3806302df242b5db006d3f9acbc56af67499692848a742c6fcf238ada1760f5f2b9a6850eb76e798ea3a68eae8410247dc4cc33617e9a842515d68172868bf480c67e60dad797ced73d984660421d6d8494f6bd338f26ab8c9350bde05296c110c69f3c7de3573d399358b59a08c3e91566a5d25381fe5c65ee9471079d55bba315782b684f147231b0ba30338e79a38ae6e33b037cdd604dd56a2b749536ffb7aca4418b605909f2857e5ae89391909102242e659a0166a9f84ed7eede21b4efb5125dfa68eb45d8e8a125e9a9c1dee79fb868f1ee1abc1352b2f5b62197b0067f8ce2b6d235922ad08fa3ec8e1f994c53b0cb4ee9b9ce3f6f93a4251a51a93beeb93deb64c3840a17c625db0b9916199355d5790e4d7b072ed165268d3e38fb54d810aa460fe55a12273ab5e2c0ce145b358d120a59ded6f1e9d746b66175f755c36b5b0b4e5ec03f2191ad8fe2d3593db02dd4f609339543e30cf64b872b62941126f5b522ed43ad68ee5bbfcf32b2c00b045908da442c0dca93951e437f3d5d5b9971968dc5f64baf100c5bb1183944f532e58ee3999164ae4915d3299d6713ec65b2ce331fcc853e6a330b24ca17d1ea84aaf87f2a66b581d01843b73ce3a85db2b4314b862863b8c0bdf440947c38d9f3b6499aedebb8a8a094758584b89b1c66611380d575b988209358c2cbc3a54da2fbdac8d29248601f0f071708012f490d2733e9bb2e93c11eda0d895fa5e436f95e5e885d94043c88a01809386d78968cf66f89afb9cfb9efa8f1930ad64bd3100851f14b484b40b4755523fbceb212e6787b0cb55bd868357b1769580de7c751aaf7129f655f27f21828218653bd409052ff54b939683c8fc84dfbef75f92795b16ae292bc66384206bbb5c1eb584519bcc88168e7d29c7917a643c1430a91bd170c1ab2dbcccc2196985031dfb8a5d0097d5dbbd62aaa0f8c3340ad325dd11ff5d87ac0b21d421ebdcacd3591b60e67670135b9bebe6b1bd8dc2dcca3887ab033b38db174bdd5bf5e13afe4a9f4644142cbbbcb9ea6e8dc2f0d18106b9bd71fe23f74cdaae0e5fcb6ca57797868e6d80354e4bb5811a249b2a198a80a265dafa8299993b47d6aaffcfbc17914b84230614aa461463529263161f6f1d726e1887b102c9d016cc5701140a19a89632d8ae33de41c1bd7ef2d4294ee704f7e7e61d0314a4c24ee7d8d50ccc0a446c725b3b66e7c1db62b8403feb13e3b19a992ba9e9f7a5be80bce631d0685f6434e0ad2dbc04f3ca4e3a0ed25c68ac91d21e6582415a6585ad1aae22f781b3b160676edc8656adaf2fd5d79b0786baa6f8fe579c713b1f2feb936a05a135fa3414384c7d418c5bd6d1b0c9dde8cfc80f59cbb6770424562c68951003a1c5b6b2afe21ec46c17983fd24cde11b0f2ce9289f274ad026644d2f4ceffeaf58ab8024570189ee155e4153e94a1908da946e4a62ec90d1827f4a71d9e1bb8d69de7b5067d812e0f3afc2f76c3d28a43d903eb1edacf979fb379019efd6be9bb7e6af8cf48c429cfbe6a1568a8d59c8d30b653fd6052964ac1076657bf6ff355a9cf09f998ca694b9ed79dfe50c579bd92c66897cc083113ecc1021f3b3251b07e9acb4b035882a284f342ba1fa7654b1115c41175e1223cd0b9788e597154249c2597c2f085ed330ca0230c30725f999d02823de5820e4db05cf3a1aef76a2d2ffbf67b02037791ccdeb5b3b49ffed5603d59d68d83531b7aa8124a55d1259934ee8d93ab6772ff2aa2d", 0x1000}], 0x4) 2018/01/14 21:59:19 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 80.271116] audit: type=1326 audit(1515967159.241:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13269 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452cf9 code=0x7ffc0000 2018/01/14 21:59:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$tun(&(0x7f0000768000-0xd)='/dev/net/tun\x00', 0x0, 0x400000) bind$alg(r0, &(0x7f0000b85000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256_mb\x00'}, 0x58) r1 = syz_open_dev$sndmidi(&(0x7f0000719000)='/dev/snd/midiC#D#\x00', 0x7, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000768000-0x9)='/dev/kvm\x00', 0x210000, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f000049b000-0x18)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00003f8000-0x8)={0x1, 0x100, 0x1ff, 0x8ba2}) bind$alg(r0, &(0x7f0000b9f000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) 2018/01/14 21:59:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000838000)='/dev/kvm\x00', 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000174000)=0x7) ioctl$KVM_SMI(r2, 0xaeb7) timerfd_create(0x7, 0x800) r3 = msgget$private(0x0, 0x28) msgctl$IPC_STAT(r3, 0x2, &(0x7f000074a000)=""/4096) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000482000-0x4)=0x0) [ 80.342934] binder: 13322:13351 BC_ACQUIRE_DONE node 182 has no pending acquire request [ 80.342951] binder: 13322:13351 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 80.342975] binder: 13322:13351 BC_FREE_BUFFER u0000000000000000 no match [ 80.343050] binder: 13322:13351 BC_INCREFS_DONE node 182 has no pending increfs request [ 80.343068] binder: 13322:13351 Release 1 refcount change on invalid ref 2 ret -22 [ 80.343075] binder: 13322:13351 unknown command 0 [ 80.343119] binder: 13322:13351 ioctl c0306201 208fdfd0 returned -22 [ 80.344361] binder: 13351 RLIMIT_NICE not set 2018/01/14 21:59:19 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000b7c000-0x18)="02000000020001001300be8c5ee18c88", 0x10) clock_gettime(0x0, &(0x7f000065a000)={0x0, 0x0}) ppoll(&(0x7f0000e25000)=[{r0, 0x1000, 0x0}, {r0, 0x2, 0x0}, {r0, 0x0, 0x0}, {r0, 0x28, 0x0}, {r0, 0x400, 0x0}, {r0, 0x8, 0x0}, {r0, 0x80, 0x0}, {r0, 0xa000, 0x0}, {r0, 0x80, 0x0}, {r0, 0x20, 0x0}], 0xa, &(0x7f0000fde000-0x10)={r1, r2+10000000}, &(0x7f0000467000)={0xeb}, 0x8) close(0xffffffffffffffff) 2018/01/14 21:59:19 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:19 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f000031b000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x407ffc0003}]}) prctl$void(0x80000000000001f) timer_delete(0x0) r0 = request_key(&(0x7f0000566000)='encrypted\x00', &(0x7f00000ba000)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f00002a8000)='self{wlan1eth0cpuset\x00', 0xfffffffffffffffe) r1 = add_key$user(&(0x7f000029a000)='user\x00', &(0x7f0000731000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000384000-0x1a)="9fb230f55b421e6d6e5073b174055a47e880dbf19b651f08134a", 0x1a, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f0000a3f000-0x5)='user\x00', &(0x7f00006fa000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, &(0x7f0000a76000)="", 0x0, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000538000-0xc)={r0, r1, r2}, &(0x7f0000c97000-0xcd)=""/205, 0xcd, &(0x7f0000127000-0x38)={&(0x7f0000745000)={'poly1305-simd\x00'}, &(0x7f00003ed000-0xe1)="8207d2b9e57390053819244ec8fa5da43613073eac4fb583eca4cbfa682c0707e95bee7352358e51444e36bfea5990e636da75d69e2c74ba3c9bbf1066e11f84356a5a18bc97f329ee47ea900c82680b47f559ed83012de52aec5181fefde612ed1a3ec08ce2314923d4311402231a44744f2c980f20177d1c544051d198dfe89b04b7f165dc95bbace0d489d5e3b6141e683a3a089e9f2c72853e5448e4fd29f612f6e0c960ef6fa4c55c3fc25bcb9689786e8b7f8f16bc0b08dd5ff6cbd0182653487c91ffaff1d05aeeb3cce431d3504cf6be4c82cff436716b8e6f596cf18f", 0xe1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000d48000)={@generic="282dfac32d94bdd0dcaa85ffb0fd6e32", @ifru_addrs={0x2, 0xffffffffffffffff, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) 2018/01/14 21:59:19 executing program 6: mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f0000007000-0x9)='/dev/sg#\x00', 0x3, 0x0) ioctl(r0, 0x40084149, &(0x7f0000006000-0x1f5)="") 2018/01/14 21:59:19 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000187000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000e46000-0xf)='attr/keycreate\x00') ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f000024c000)={[{0x7fff, 0x3, 0x3, 0x4, 0x1, 0x8, 0x6, 0xd6, 0x743, 0x8, 0x8001, 0x0, 0xfffffffffffff450}, {0x8, 0x9fe, 0x4, 0x4, 0x2, 0x4, 0x7fff, 0x1, 0x7ff, 0x4, 0x6, 0x1000, 0x3ff}, {0x800, 0x0, 0xffffffff, 0x6, 0x3, 0x78f, 0x3, 0x8, 0x4, 0xbb9b, 0x2c, 0x0, 0x2}], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000e83000+0x729)=0x0) sendto$inet6(r2, &(0x7f000035b000)="", 0x0, 0x8, &(0x7f0000e17000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0xfffffdef) connect$inet6(r0, &(0x7f0000361000-0x1c)={0xa, 0x2, 0xc6da, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x4}, 0x1c) 2018/01/14 21:59:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:19 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00009b0000-0x9)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000656000-0x10)='/dev/sequencer2\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000a27000)=[@in6={0xa, 0x0, 0x7, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, 0x0}, @in6={0xa, 0x1, 0x6, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x13}, 0x2}, @in={0x2, 0x1, @rand_addr=0xfffffffffffffff9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @in6={0xa, 0x0, 0x10001, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @multicast1=0xe0000001}, 0x2}, @in6={0xa, 0x1, 0x253a, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc}, 0x7}], 0x80) pipe2(&(0x7f0000e3f000-0x8)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = dup3(r5, r4, 0x0) clock_gettime(0x0, &(0x7f0000e80000-0x10)={0x0, 0x0}) ppoll(&(0x7f000010a000)=[{r6, 0x0, 0x0}, {r5, 0x0, 0x0}, {r6, 0x10, 0x0}, {r5, 0x2, 0x0}, {r3, 0x3110, 0x0}, {r3, 0x1080, 0x0}, {r5, 0x400, 0x0}, {r5, 0x102, 0x0}], 0x8, &(0x7f0000b77000)={r7, r8+30000000}, &(0x7f000036a000)={0x8}, 0x8) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000e4e000-0x138)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, [0x0, 0x0, 0x0]}, {0x0, 0x0, [0x0, 0x0, 0x0]}, 0x80000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f00000d5000/0x18000)=nil, &(0x7f0000fed000)=[@text16={0x10, &(0x7f0000b24000)="66b80500000066b9c12f00000f01d9660f2a9cf5ff65660fae3fba610066ed0f092e0f01cb650f01cb66b9150b00000f322e2e0f01dff00fbbac4b5c", 0x3c}], 0x1, 0x8, &(0x7f00001f9000-0x10)=[], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/01/14 21:59:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 80.366923] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 80.388223] mip6: mip6_rthdr_init_state: state's mode is not 2: 0 [ 80.476744] audit: type=1326 audit(1515967159.244:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13269 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=18 compat=0 ip=0x452cf9 code=0x7ffc0000 2018/01/14 21:59:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:19 executing program 6: mmap(&(0x7f0000000000/0x20000)=nil, 0x20000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f000000e000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x267) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000020000)=0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f000000d000)=0x4, 0x4) bind$inet(r0, &(0x7f0000007000)={0x2, 0xffffffffffffffff, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r0, &(0x7f0000004000)="", 0x0, 0x0, &(0x7f0000002000)={0x2, 0x0, @empty=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) [ 80.501206] audit: type=1326 audit(1515967159.244:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13269 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452cf9 code=0x7ffc0000 2018/01/14 21:59:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:19 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:19 executing program 6: mmap(&(0x7f0000000000/0xb000)=nil, 0xb000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x16, &(0x7f0000006000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0}, @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xaa}, [], {@llc_tr={0x11, {@snap={0x0, 0x0, "d2", "9718a1", 0x0, ""}}}}}, &(0x7f0000002000-0x10)={0x0, 0x0, []}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f000000c000-0x2)='/dev/rfkill\x00', 0x4800, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f000000c000-0x4)=0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000001000+0xcb)=0x40, &(0x7f0000001000)=0x2) fstat(0xffffffffffffff9c, &(0x7f000000c000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f000000b000)={0xe000000000000000, 0x20, r1, 0x7fffffff, r2, 0x80, 0x3f, 0x3}) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000002000)={0xeed1, 0x7, 0x7}) 2018/01/14 21:59:19 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 80.540356] binder: 13373:13382 BC_ACQUIRE_DONE node 183 has no pending acquire request [ 80.540375] binder: 13373:13382 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nfc_llcp(0x27, 0x3, 0x1) sync_file_range(r0, 0x6, 0x1000, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = open(&(0x7f0000fa0000-0x8)='./file0\x00', 0x101000, 0x2) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00003b0000)={0x0, 0xa}, &(0x7f00002b5000-0x4)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000a9c000)={r3, 0x100}, 0x8) r4 = inotify_init1(0x0) r5 = dup2(r1, r4) setsockopt$inet_opts(r5, 0x0, 0x3, &(0x7f0000fb7000)="860801ff3f", 0x5) 2018/01/14 21:59:20 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000cf8000)=[{&(0x7f0000fb7000-0x64)=""/1, 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000f49000)=[{&(0x7f00005e4000)="a8", 0x1}], 0x1) dup2(r0, 0xffffffffffffffff) 2018/01/14 21:59:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:20 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000a81000)='/dev/rfkill\x00', 0x40200, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000003000+0xb03)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f000000e000-0x10)={&(0x7f0000016000)={0x1c, 0x22, 0x829, 0xffffffffffffffff, 0xffffffffffffffff, {0x1, 0x0, 0x0}, [@generic="1e27602d74"]}, 0x1c}, 0x1, 0x0, 0x0, 0x0}, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/vcs\x00', 0x20000, 0x0) setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f000014b000-0x4)=0xffffe00000000000, 0x4) timer_create(0x5, &(0x7f0000370000-0x60)={0x0, 0x35, 0x4, @tid=0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000426000)=0x0) timer_delete(r3) getsockopt$inet_udp_int(r0, 0x11, 0x1, &(0x7f0000113000-0x4)=0x0, &(0x7f0000d13000)=0x4) mq_timedsend(r2, &(0x7f0000006000)="4f2e5955ee403fc13c6f5700f27f77198125221c46b82c4919b780c85fad1dba78034a813b0d19a857146a1944585d77d1a7", 0x32, 0x283, &(0x7f0000d80000)={0x0, 0x0}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00006c7000-0x10)={0x8, &(0x7f0000e5f000)=[{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f000008f000)=""/1) [ 80.540391] binder: 13373:13382 BC_FREE_BUFFER u0000000000000000 no match [ 80.540404] binder: 13373:13382 BC_INCREFS_DONE node 183 has no pending increfs request [ 80.540423] binder: 13373:13382 Release 1 refcount change on invalid ref 2 ret -22 [ 80.540431] binder: 13373:13382 unknown command 0 [ 80.540442] binder: 13373:13382 ioctl c0306201 208fdfd0 returned -22 [ 80.667772] binder: release 13373:13382 transaction 184 out, still active [ 80.667777] binder: undelivered TRANSACTION_COMPLETE [ 80.667797] binder: send failed reply for transaction 184, target dead [ 80.707998] binder: 13422:13428 BC_ACQUIRE_DONE node 185 has no pending acquire request [ 80.708055] binder: 13422:13428 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 80.708068] binder: 13422:13428 BC_FREE_BUFFER u0000000000000000 no match [ 80.708079] binder: 13422:13428 BC_INCREFS_DONE node 185 has no pending increfs request [ 80.708097] binder: 13422:13428 Release 1 refcount change on invalid ref 2 ret -22 [ 80.708103] binder: 13422:13428 unknown command 0 [ 80.708114] binder: 13422:13428 ioctl c0306201 208fdfd0 returned -22 [ 80.776169] audit: type=1326 audit(1515967159.244:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13269 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x452cf9 code=0x7ffc0000 [ 80.776189] audit: type=1326 audit(1515967159.245:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=13269 comm="syz-executor0" exe="/root/syz-executor0" sig=0 arch=c000003e syscall=8 compat=0 ip=0x452cf9 code=0x7ffc0000 [ 80.825549] binder: release 13422:13428 transaction 186 out, still active 2018/01/14 21:59:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_bp={&(0x7f0000ba4000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$llc(0x1a, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000d0a000-0x80)="ff55d36cffba04365d00000000000001", 0x10) 2018/01/14 21:59:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000fbf000)="", &(0x7f0000744000)=0x0, &(0x7f0000f8b000)=0x0, &(0x7f00000d5000)="") r0 = memfd_create(&(0x7f00004f7000-0x2)='-\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x9, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000ad9000)={0x42ef54, {0x400003ffffffe}, 0x0, 0x0}, &(0x7f0000255000-0x20)={0x0, {0x0}, 0x0, 0x0}, 0x8, &(0x7f0000237000)={0x0}) syz_open_dev$evdev(&(0x7f00009e9000-0x12)='/dev/input/event#\x00', 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000833000-0x9e)=""/158) rename(&(0x7f0000bab000)='./file0\x00', &(0x7f00002ab000-0x8)='./file0\x00') ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000e0b000)=0x0) execve(&(0x7f0000f8b000-0x8)='./file0\x00', &(0x7f0000a7c000-0x38)=[], &(0x7f00006fd000-0x10)=[]) syz_open_procfs(0x0, &(0x7f0000889000-0x8)='syscall\x00') 2018/01/14 21:59:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000035000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000676000)='/dev/sequencer\x00', 0x200, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000af6000-0x20)={0x3, 0x0, 0x10001, 0x7fffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000aae000-0x10)={0x6, r2}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000a2d000-0x20)={0x3, r2, 0x10000, 0x3}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00009d1000-0x4c8)={{0x8, 0x0, 0x0, 0x0, "973765eae554d7fdffd2b00c75130f34253c4ccdb83c480f51d7cf0723923abc758a634e31309e23e1cfb424", 0x0}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], {0x0, 0x0}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/14 21:59:20 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000013000-0x58)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f000090d000)='/selinux/access\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000fcb000)=0x7, 0x4) clone(0x0, &(0x7f000054e000)="", &(0x7f000089e000)=0x0, &(0x7f0000dac000-0x4)=0x0, &(0x7f0000d0e000)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000e55000)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/01/14 21:59:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00002b7000)='/dev/rtc\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00002e1000)=0x0) r2 = getuid() r3 = getegid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00007e8000-0xc)={r1, r2, r3}, 0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000040fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = shmat(0xffffffffffffffff, &(0x7f0000ef6000/0x2000)=nil, 0x4000) shmdt(r4) request_key(&(0x7f0000dba000-0xa)='blacklist\x00', &(0x7f00001b7000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f0000ba1000-0x20)='ppp1mime_type@:selinux.security\x00', 0x0) 2018/01/14 21:59:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 80.825554] binder: undelivered TRANSACTION_COMPLETE [ 80.825578] binder: send failed reply for transaction 186, target dead 2018/01/14 21:59:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00007bc000)="797334106d005507ebf607ecc3b524d6b56f7db5af38949d731c4ff26174892609521d7244d732ac81a01a7f10c259faf822977b215183dd58e01fd6d7a9022c7d8d59b21797cb2236569b70e040a60000000000004ac3506469e3fab4385528def0485087ec6c4953310f9e4a901b6f8065171571df", 0x2000000800000002) write(r0, &(0x7f0000ffe000-0x5)='#!', 0x2) write(r0, &(0x7f00001a4000-0xa3)="e7058c55bb6d3eb19c36a5b04497393a967f04701abf9ebf78fbd01fb5d63e5ea2cff2ca7d9e0eb6905e5eb9cbcf34c47bc9c1a187cbf8fe75579eacc9bfd2d9e5d5447fed5473b5447e6d0cb2b42001000000000000008f18da7c20596f0d602923ed7478f97f8cc704c7560ee72c2e37f2ebddff12982928e59ffcb375", 0x7e) fcntl$lock(r0, 0x7, &(0x7f000044e000-0x3)={0x0, 0x0, 0x0, 0x0, 0x0}) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f000038d000-0x10)=[&(0x7f0000046000)='/dev/vga_arbiter\x00'], &(0x7f000034c000-0x8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/01/14 21:59:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:20 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001000-0x10)='/selinux/access\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000001000-0x4)=0x1) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000652000-0x70)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2018/01/14 21:59:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:20 executing program 6: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = syz_open_dev$sg(&(0x7f0000ebf000-0x9)='/dev/sg#\x00', 0x2, 0x400040) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00004bb000)={0x0, 0x7}, &(0x7f0000fc0000-0x4)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000cb000-0x20)={0x7ff, 0x0, 0x200, 0x0, 0xdae, 0xffff, 0xa1, 0x7ff, r2}, &(0x7f0000799000-0x4)=0x20) close(r0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000bd4000)='/proc/self/net/.fkey\x00', 0x0, 0x0) rt_sigsuspend(&(0x7f0000b5b000-0x8)={0x3}, 0x8) 2018/01/14 21:59:20 executing program 2: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000009000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000fbe000)={0x0, 0x1000, "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"}, &(0x7f0000001000-0x4)=0x1008) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001000-0x10)={r1, 0x1, 0x8, 0x3}, &(0x7f0000509000)=0x10) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)=0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setrlimit(0xf, &(0x7f0000002000-0x10)={0x200, 0x3f2}) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000003000-0x8)={0x0, 0x0, 0x0, 0x0}, &(0x7f0000001000)=0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001000)={0x1, [0x7]}, 0x6) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000003000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0xb8, 0x0, &(0x7f0000004000-0xb8)=[@transaction={0x40406300, {0x4, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x48, 0x10, &(0x7f0000000000)=[@fd={0x66642a85, 0x0, r0, 0x0, 0x4}, @flat={0x77622a85, 0xa, r2, 0x4}, @flat={0x77682a85, 0x1, r3, 0x4}], &(0x7f0000003000)=[0x30, 0x0]}}, @release={0x40046306, 0x3}, @register_looper={0x630b}, @dead_binder_done={0x40086310, 0x3}, @clear_death={0x400c630f, 0x3, 0x1}, @reply_sg={0x40486312, {{0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x28, &(0x7f0000003000)=[], &(0x7f0000003000)=[0x20, 0x18, 0x20, 0x28, 0x28]}, 0x4}}], 0x65, 0x0, &(0x7f0000002000)="95961953a78898dae01097028bab03fec024b726f9310a48b792fa72bbd276bb916d584503987eaa5c45e3f136bc1777656b279a00a71522dcdf96e8b9b7b10628229e41e2f8436fc9e92d35cb50e075336c71dc51170637418ecae6dfcce28b3982dc56e4"}) fcntl$notify(r0, 0x402, 0x24) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clock_getres(0x6, &(0x7f0000005000-0x10)={0x0, 0x0}) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000005000)={{0x3, 0x3, 0x7, 0x3, 0x100}, 0x7, 0xe123, 'id1\x00', 'timer0\x00', 0x0, 0x4, 0x6, 0x7, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000005000-0xe)='/selinux/user\x00', 0x2, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r4, 0x80045301, &(0x7f0000007000-0x4)=0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000008000-0x10)={r1, 0x2c, &(0x7f0000004000)=[@in6={0xa, 0x1, 0x7, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, 0x5f08}, @in={0x2, 0x2, @rand_addr=0x8000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, &(0x7f0000008000-0x4)=0x10) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000009000-0x38)={&(0x7f0000008000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002000)={&(0x7f0000009000-0x14)=@ipv6_getanyicast={0x14, 0x3e, 0x2, 0x5, 0x1, {0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) [ 80.902658] binder: 13444:13449 BC_ACQUIRE_DONE node 187 has no pending acquire request [ 80.911067] binder: 13444:13449 BC_DEAD_BINDER_DONE 0000000000000004 not found 2018/01/14 21:59:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:20 executing program 7: mmap(&(0x7f0000000000/0xf64000)=nil, 0xf64000, 0x3, 0x32, 0xffffffffffffffff, 0x0) creat(&(0x7f000089b000-0x8)='./file0\x00', 0x10a) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000f60000-0x4)=0x1ea, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00005e9000-0x4)=0x1ff, 0x4) [ 80.954186] binder: BINDER_SET_CONTEXT_MGR already set [ 80.958801] binder: 13474 RLIMIT_NICE not set [ 80.958813] binder: 13474 RLIMIT_NICE not set [ 80.961911] binder: release 13444:13474 transaction 188 in, still active [ 80.961921] binder: send failed reply for transaction 188 to 13444:13449 [ 80.970552] binder: 13444:13449 BC_FREE_BUFFER u0000000000000000 no match [ 80.970571] binder: 13444:13449 BC_INCREFS_DONE node 187 has no pending increfs request [ 80.970592] binder: 13444:13449 Release 1 refcount change on invalid ref 2 ret -22 [ 80.970600] binder: 13444:13449 unknown command 0 [ 80.970613] binder: 13444:13449 ioctl c0306201 208fdfd0 returned -22 [ 81.000454] binder: 13470:13485 BC_ACQUIRE_DONE u0000000000000000 no match [ 81.000465] binder: 13470:13485 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 81.000478] binder: 13470:13485 BC_FREE_BUFFER u0000000000000000 no match [ 81.000491] binder: 13470:13485 BC_INCREFS_DONE u0000000000000000 no match 2018/01/14 21:59:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:20 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000635000+0x43e)='./file0\x00', 0x0) mount(&(0x7f000022c000-0x8)='./file0\x00', &(0x7f00006b0000-0x8)='./file0\x00', &(0x7f00000db000)='ramfs\x00', 0x1, &(0x7f000000a000)="") stat(&(0x7f00004af000-0x8)='./file0\x00', &(0x7f00003f9000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$usbmon(&(0x7f0000f53000)='/dev/usbmon#\x00', 0x5, 0x200800) recvmsg(r0, &(0x7f0000b92000-0x38)={0x0, 0x0, &(0x7f000028c000-0x10)=[{&(0x7f0000190000-0xbe)=""/190, 0xfffffffffffffcc0}], 0x1, &(0x7f00002b2000)=""/4096, 0x1000, 0xff}, 0x40002003) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f00006ff000-0x4)=0x2, 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000cb9000-0x8)={0x0, 0x0}) sched_rr_get_interval(r1, &(0x7f0000cff000-0x10)={0x0, 0x0}) 2018/01/14 21:59:20 executing program 0: mmap(&(0x7f0000000000/0x31000)=nil, 0x31000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x400000005, 0x0, &(0x7f0000027000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000031000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000032000-0x28)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000002d000-0xe)=@ethtool_sfeatures={0x3b, 0x2b, [{0x0, 0x0}, {0x1, 0x0}]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/14 21:59:20 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00005ea000-0x11)='/dev/qat_adf_ctl\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={@common='nr0\x00', @ifru_names=@common='ipddp0\x00'}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x0) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000ec5000-0x28)={@common='ip6_vti0\x00', @ifru_data=&(0x7f0000003000-0x20)="da347ffd7c96a7092cb16b7b94e9f20000d00000f5ff05444f52d30faba2821c"}) 2018/01/14 21:59:20 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000280000)='/dev/audio\x00', 0x200000, 0x0) accept$alg(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) fstat(r0, &(0x7f0000d7b000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00007a8000)='./file0\x00', &(0x7f0000684000-0x44)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000786000-0x18)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0]) open(&(0x7f00000b3000)='./file0\x00', 0x141, 0x1) setgroups(0x3, &(0x7f000076b000-0xc)=[r2, r3, r4]) bind$alg(r1, &(0x7f000018d000-0x58)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x6b) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000d1000-0x10)="", 0x0) r5 = accept$alg(r1, 0x0, 0x0) recvmmsg(r5, &(0x7f000037a000-0xb4)=[{{&(0x7f00005c9000)=@in={0x0, 0xffffffffffffffff, @rand_addr=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10, &(0x7f00000ac000)=[{&(0x7f000008e000)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0}, 0x0}], 0x1, 0x0, 0x0) 2018/01/14 21:59:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000d06000-0x4)={0x7}, 0x4) io_setup(0x1f, &(0x7f0000e7f000)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00003f6000-0x10)='/dev/sequencer2\x00', 0x200200, 0x0) r2 = syz_open_dev$audion(&(0x7f0000b76000-0xc)='/dev/audio#\x00', 0x5, 0x1) io_cancel(r0, &(0x7f0000ea3000)={0x0, 0x0, 0x0, 0x1, 0x200, r1, &(0x7f0000f32000)="", 0x0, 0x5, 0x0, 0x1, r2}, &(0x7f0000cc5000)={0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000859000-0x4)=0x0, &(0x7f0000269000)=0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f000037f000)=0x100000001, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f000023d000-0x20)={r3, 0x3, 0x1, 0xfffffffffffffff8, &(0x7f0000e85000-0x18)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) r4 = syz_open_dev$vcsa(&(0x7f000055b000-0xb)='/dev/vcsa#\x00', 0x1, 0x2000) ioctl$KDDELIO(r4, 0x4b35, 0x356) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f000067e000)=0x0, &(0x7f0000df0000)=0x4) 2018/01/14 21:59:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 81.000504] binder: 13470:13485 Release 1 refcount change on invalid ref 2 ret -22 [ 81.000513] binder: 13470:13485 unknown command 0 [ 81.000524] binder: 13470:13485 ioctl c0306201 208fdfd0 returned -22 [ 81.094078] binder: undelivered TRANSACTION_COMPLETE [ 81.095073] binder: 13470:13475 ioctl 40046207 0 returned -16 [ 81.105481] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/14 21:59:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 81.138488] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/14 21:59:20 executing program 0: semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000bd000)=[0x5, 0x200, 0x2c3c, 0x1, 0x9]) 2018/01/14 21:59:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x8, 0xe, 0xffffffffffffff) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00003d0000)={@loopback={0x0, 0x1}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0}) [ 81.144055] QAT: Invalid ioctl [ 81.156382] binder: 13494:13501 BC_ACQUIRE_DONE u0000000000000000 no match [ 81.156393] binder: 13494:13501 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 81.156693] binder: 13494:13501 BC_FREE_BUFFER u0000000000000000 no match [ 81.156705] binder: 13494:13501 BC_INCREFS_DONE u0000000000000000 no match [ 81.156719] binder: 13494:13501 Release 1 refcount change on invalid ref 2 ret -22 [ 81.156728] binder: 13494:13501 unknown command 0 [ 81.156738] binder: 13494:13501 ioctl c0306201 208fdfd0 returned -22 [ 81.238589] binder_alloc: 13494: binder_alloc_buf, no vma [ 81.238616] binder: 13496:13510 transaction failed 29189/-3, size 0-0 line 2957 [ 81.238675] binder: 13496:13504 ioctl 40046207 0 returned -16 [ 81.244994] binder: 13496:13504 BC_ACQUIRE_DONE u0000000000000000 no match 2018/01/14 21:59:20 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:20 executing program 0: mmap(&(0x7f0000000000/0xfd5000)=nil, 0xfd5000, 0x300000c, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000fd5000)=0x0, &(0x7f00008c7000)=0x4) mmap(&(0x7f0000fd5000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000725000)='/selinux/context\x00', 0x2, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000fd6000-0x11)='/selinux/relabel\x00', 0x2, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000c23000-0x20)={@common='teql0\x00', @ifru_flags=0x1000}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000da9000-0x8)={r0, r0}) 2018/01/14 21:59:20 executing program 3: mmap(&(0x7f0000000000/0x586000)=nil, 0x586000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000586000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000586000)=""/210, 0xd2, 0x10000, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00004e6000-0x38)={&(0x7f000009f000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f00002bf000)={&(0x7f000057d000)=@newpolicy={0xb8, 0x13, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, []}, 0xb8}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/14 21:59:20 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000001000-0x18)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000001000-0x18)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000816000)={0x0, 0x0, &(0x7f0000001000)=[], 0x0, 0x0, &(0x7f0000000000)=""}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x70, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}, @register_looper={0x630b}, @clear_death={0x400c630f, 0x2, 0x4}, @reply_sg={0x40486312, {{0x4, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x38, 0x10, &(0x7f0000c58000)=[@fda={0x66646185, 0x1, 0x1, 0xa}, @fd={0x66642a85, 0x0, r1, 0x0, 0x3}], &(0x7f0000000000)=[0x78, 0x0]}, 0x6}}, @dead_binder_done={0x40086310, 0x3}], 0x47, 0x0, &(0x7f00009c5000)="675eac75ed12cc06cc3e2854d1cabd3a3a4c53ed9e30360550ad146e7f45ef8248f7a83593bd831ca173c0ac712e8d1954439b8e2e334f2882e5dcee5617fb0c34fa2e2f40bbb8"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00002dd000)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x8000)=nil, 0x8000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000005000)='/dev/binder#\x00', 0x0, 0x0) close(r2) r3 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) mmap(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f0000004000-0x18)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000003000-0x30)={0x14, 0x0, &(0x7f000000a000)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000004000)=""}) mmap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f000000b000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) poll(&(0x7f000000b000)=[{r0, 0x200004020, 0x0}, {r2, 0x8001, 0x0}, {r2, 0x2004, 0x0}, {r0, 0x400, 0x0}, {r1, 0x1000, 0x0}], 0x5, 0x2b) poll(&(0x7f000000d000-0x10)=[{r2, 0x0, 0x0}], 0x1, 0x28) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000b000-0x30)={0x44, 0x0, &(0x7f000000a000-0x7c)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000a000)=[], &(0x7f0000003000)=[]}}], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) 2018/01/14 21:59:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000ecb000-0x8)={0x0, 0x0}) r0 = eventfd2(0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(r0, &(0x7f0000b7a000)=0x0, 0x8) 2018/01/14 21:59:20 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 81.245009] binder: 13496:13504 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 81.245117] binder: 13496:13504 BC_FREE_BUFFER u0000000000000000 no match [ 81.245126] binder: 13496:13504 BC_INCREFS_DONE u0000000000000000 no match [ 81.245153] binder: 13496:13504 Release 1 refcount change on invalid ref 2 ret -22 [ 81.245160] binder: 13496:13504 unknown command 0 [ 81.245168] binder: 13496:13504 ioctl c0306201 208fdfd0 returned -22 [ 81.245264] binder: 13504 RLIMIT_NICE not set [ 81.272458] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/14 21:59:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="", 0x0) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:20 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 81.344596] binder: BINDER_SET_CONTEXT_MGR already set [ 81.353640] binder: 13522:13525 BC_ACQUIRE_DONE u0000000000000000 no match [ 81.353652] binder: 13522:13525 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 81.353665] binder: 13522:13525 BC_FREE_BUFFER u0000000000000000 no match [ 81.353678] binder: 13522:13525 BC_INCREFS_DONE u0000000000000000 no match 2018/01/14 21:59:20 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="", 0x0) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:20 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f000005a000-0xd)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000599000)={0xfffffffffffffffd, 0x0, "636c69656e74310000000000000000100000000000000000000000000000001300000000000000000200", 0x0, "cccd31a3acd0bf53", "f6dce4d05671ccda1915e4d656cdf198c237f6eb2713f9ed1f1a54bb5ebc6136", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/14 21:59:20 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000-0x15)='/proc/self/net/pfkey\x00', 0xc0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x80}, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={r1, 0x5, 0x10, 0x9, 0xc6f}, &(0x7f0000001000-0x4)=0x18) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000c76000-0x8)='./file0\x00', 0x0) r3 = socket(0x20000000000000a, 0x2, 0x0) r4 = dup2(r3, r2) getsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f00005df000)=0x0, &(0x7f0000dca000-0x4)=0x4) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f00003c8000-0x2)=0x8001, &(0x7f000067c000-0x8)=0x2) 2018/01/14 21:59:20 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) capget(&(0x7f0000013000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000f39000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f0000bf3000-0x4)=0x0, &(0x7f000092c000)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r1 = syz_open_dev$dmmidi(&(0x7f00009bb000)='/dev/dmmidi#\x00', 0x8, 0x400002) connect$nfc_raw(r1, &(0x7f0000ca3000-0x10)={0x27, 0x82, 0x0, 0x7}, 0x10) 2018/01/14 21:59:20 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000573000)='/dev/rtc\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f00001e4000-0x18)={0x0, 0xfffffffffffffff8, 0xfffffffffffffff7, &(0x7f00003f8000)=0x0}) r1 = getegid() fstat(r0, &(0x7f0000cd2000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r1, r3) write$tun(r0, &(0x7f00004fa000)=@pi={0x0, 0x9bff, @ipv4={{0x7, 0x4, 0x200, 0x2, 0x72, 0x3, 0x2, 0x8000, 0x0, 0x0, @multicast2=0xe0000002, @local={0xac, 0x14, 0x0, 0xaa}, {[@lsrr={0x83, 0x7, 0x1, [@multicast1=0xe0000001]}]}}, @icmp=@parameter_prob={0xc, 0x0, 0x0, 0x4, 0x2a, 0x0, {0x12, 0x4, 0x10000, 0x0, 0x2, 0x3, 0x0, 0x7f, 0x5c, 0x6, @loopback=0x7f000001, @local={0xac, 0x14, 0x0, 0xaa}, {[@rr={0x7, 0x1b, 0x91, [@empty=0x0, @rand_addr=0x800, @broadcast=0xffffffff, @multicast2=0xe0000002, @multicast1=0xe0000001, @loopback=0x7f000001]}, @lsrr={0x83, 0x13, 0x800, [@loopback=0x7f000001, @loopback=0x7f000001, @remote={0xac, 0x14, 0x0, 0xbb}, @loopback=0x7f000001]}, @generic={0x83, 0x4, "80c0"}]}}, "0aaa40dca0a1"}}}, 0x76) r4 = syz_open_dev$admmidi(&(0x7f0000dde000)='/dev/admmidi#\x00', 0x6, 0x200) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f000051d000)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f000049d000-0x4)=0x0) r7 = gettid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000e0000-0x4)=0x0) r9 = gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000cde000)=0x0) r11 = getpid() r12 = getpgid(0x0) sendmsg$netlink(r4, &(0x7f0000bb4000-0x38)={0x0, 0x0, &(0x7f0000d67000-0xa0)=[{&(0x7f0000a32000-0xf4)={0xf4, 0x31, 0x510, 0x5, 0x1, "", [@typed={0xc, 0x8a, @pid=r5}, @generic="5e597fc985979d05102e372e08548ac696c5539d97e1587c694638c919758e00373598a494c72621daa6cec61d4a700cb7c3e395a432832be30f93be1eab8e005db8aed9657e2e103d0ebaa2a07d44f3951e", @typed={0x14, 0x94, @str='/dev/rtc\x00'}, @typed={0xc, 0x4c, @ipv4=@remote={0xac, 0x14, 0x0, 0xbb}}, @typed={0x18, 0x15, @ipv6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}}, @generic="45b3f8b10ab3c99e0d1b8832c1d1abfe6930e2db8d1bb32c721ca28b7ab34872811d1bfdf16cd6414d7d21e159c31bac06abaf0457628adccf17a3558715f808752574b32a09184e0d1c5cb6d1f0"]}, 0xf4}, {&(0x7f0000e87000)={0x10c, 0x2c, 0x100, 0x0, 0x2, "", [@generic="8b13ae35bb09311b9758f5ba9747924c1ccbac1459845c2221a9e53cbad0e0068cf3e51ccb420c2d7306b93a32c88248f293e674e93c5c8fbbb9db87d6aaf2353cc333e898a3a506273bd7d18cbbeeda2699ca19e39a656953f6ff85d9f83014f0eed586c6ef20dd92f2aaa956d52b117e4025b04eacc620302d8b67e6fd5b25cca0e882c71260ff3e8fbd7d24b565f871f36e7145a22396889e2749db3b16626611cfa5d7116305222a838f611562598ba422efe3105b2add35ef0f5f67d9a5c1dae486943e2a9296da760a33e3ac074b684272fcfeb6b5baf77f2cb29e0dff80cb63875bfe663caf689edf883575fb3934b4592aaebd74e7baef85"]}, 0x10c}, {&(0x7f00000eb000)={0x1528, 0x3d, 0x402, 0x6, 0x3, "", [@typed={0x10, 0x6, @u64=0x5}, @generic="26fe5e0750a0343266d8858f7b875831a6e9f83b313b941bd9749725807c94fd97c8dcb4982296e13bb9064f7326406dcd5b692a20caf04f5c31ad7aa639ae6f48a247bfd1567696f5a6caf5dd8ecb27d04d627ad0e6e5edad279e8e1d8ffbde0492830ace764bb8ce329c951d2b647a57677e481bb0f7e0970b27c45d7e7f6efff3a5a7dd47b85daec001efa90233add71d8768bba60837a655669ef4d480051aa480a792e9c0a80b462c1e190a7a2305ce7aa44dade57d8bd5463786057a79230b4a1f2229bc065b2e0f31043c898524414108b41bb9f7fdb6e49280e67faf03d3c175b2", @generic="92b959b606367cad8f61c66acac5474cc1bce83d485c0141c3497ee7fe58b48e27fb503d26fa27556f02cd75aaa6284a2a6e4daa032eb2614af4f71497e70c84535983fce5", @generic="ea81e6b9fd51f06961347f68406fb2541c0217725b3b62494416c8f40cf356791b5cfbcb1bf3771f7b31609bd6e31abf0ded18a486fe5aeba6e759661065828fc4797cc0675d31059355084687536828ad3fff22ed21d833b76897e2b238a5183819d73f0c469aae5d3499f920bdf321825ee476899839fae14fac3cc90652c12acbf32c6eb21aee33732c297a3ed61b0b88958c044ceb743b08fafb9c7f776ee79551ed43b8b15b2da40a4b4766a39a55c919526cba3de37b8c18faf4da7223d2f2b7d1d0dcbeb435a218c090abf7579215f504945c5c22c2ccf0cbe950a7698336467c9db312ac0d54aeef4b267bf2b8f75ecbdbe75590e90af7831fff68e715a41ea5d20ccec774d87cdeeb771014bf38a9208696cb3ad08061de78155dba8585de8ecd2748b192d78cbec3fed87c7779634c6c5026def701c0dc232f15c0a805284adf1b1934603d0ddae3a4621a57a12d14e2fe3f6cbe99a57c6dc8c13584176a1feddd71346464e23d1c60a8edbb80d8a99583dd8f55282a7687ece5c36ee4d8b55d6f86e6217fdec9cbc5e45654aed5c1a3b96be920cf094a55dfb92e828ad0b03dfc2d837f62cd58791ced76628c3c2e34fb165f1b2e94b34d7a147ab8dc32d5f974f1e439e22a0cce75e08cc8529a49bb9185cafb61c131ca0bcefd250cba43b17adae7f8090477d164c9cb75ce5668a55ab96edb1d85b22bd4ab9f33f90012e695df5347ce9d78699fae6bbad719d18651516180cd8f821468259f7586a273e5cee38df7b8bdaa3a79572103036cdde782b570ade315b3b9ea54487f45ef0ef2959b514d44abc40bd5905fb5a01abf31ec9f6d8de43af30ec2104d9b3e5b2b65d368a0a13d01e6ec1f1ddd379b89c65b5027b64a2d59ee3172dac34ab64bf49c0da259c0b6c3005aa2abf2b187895fb4b75b2cce7be6ee2f4e54a9cfd06e3d1fd4bfff3e2916919dbd07676e82acbed2152fe5eb174480911f35269039cc4875ceaa7394b528b571409b96d99c53bb6d326ed333e61ef41220370a57bb7e09fcd67fb93d288a3b70a126da85bb99bf8f9dee15f0f305a1f748d2b160c6bb992056b6e612e569cc19ce6f00684d4c6ccd24795adf5fc89152dcc3805e72a9eaae45058704988e1f2e0bbfb7b56b8a36d041f0a659e883a6fae2e3db584a800a90fa2ec3c55bd260d934dc0c3fdd11cbf54825845b45c7cbc373bda603d445ecccffb3144609c2256a1fd6d085455ee1c1300e3820021c79fc49d9a263162a57eda401ba8dd7ec1ced09ef513dae03b844c3ec9a5a8192e6306f6354f8d9d1697acdebbc6adc55ca939268ab4bfde4513b5e417d98e3a683595ff28b7ed8a2999c434a944acd5560e1390cf0a669e262cb525e009bbe2cb0a156040a7bb151b12af419905312b0eabaf7778bb92d7d21c267bfa0884772df1a29d0a964566bd6bbbd206e77bd4b7fbde4bf343e9cf5ef9536b6d215a798b7462d4927dd9a2246e0bf08b23d0a6b960733698bd2f9bb657b330f01e8c5ca582afd09e5c36fae3cb0aa29e9af5d60540bc4ad59a9aeb226654a680ae14b0dfd3585d310063ff0f861d49b6c52f8bd316b72df787d1da5cc3d1d6134e1d58cd78d90be4c5627b944afa5bd05f0dead56f3536bdda6cff311d9a315ae9da28ba60741516e962dbcf54ddf143ade06459ebcc0cf18f412990355193b78a0a4cf648ca4df04e9a6284a24a3ffe2bb9aca92a2763c2a27089ffee9c3f995c2a3bb86d3bbfd57a7f25d7f706eab1eb65fbf86534d49b692051105688620e70c3a00df390ea0475c276b9cf68166feca9fd8109d22903e2b11143eebeba20c86bc3ddd9ef20b4f6e0ae56bbe40aa4a873e5c09f8e2c422c3315690794f923c995cff7eb73f3ec1475102b83bfbec4d2973013afa51d78fa05c2f3eda9fc019dcb4ff579ddd750d206448d37c1b307aef4a1726cca4863c5e53acbd1cda2f7bcb1b8a100e2ef23eea2707541143a565cd70f5bbe34d4774b7e15e8a85a04b17ee7385a738d72ec32726da830c0866da0a700364dae44e914ca7f9b13d73646f7fa6d208117967d2ec3aff6503092e818263c93a83637465494887ea7b33dc1fe4d714c6dc7b19a040525f8ca2eb7d876cafc0a98fc20c3b05aaaaa1425c0806a04946eff6b6a2428f646e8bd354428bc362049472a1baeb444179a6fb37ffffe27022316f90ae0f17ceaab0813580edd9db1d1e16abe2b1b8506db1bd1d404508b4effd60fced3fd415e2818492e0e64e4947b9762ecaf7eec473c520fb9b75949b521c64cafa3ce50c33eafbfb0e37d62833bc3c5c12b4aa1554dd0a33ee462288015e5316cb63d780998c7c258d6c8637b1924377bac537a68c828721448d2a98c820b8ec320be4661e0f35af8afa754ec8906ce630d772d94d3fcd74134725176e39e9aef454d13c9f5a86d9dfb7683dd83d7af0f2e5ef92073c83643d10570f3a57ca42b0ca8d038c378f3938ccfe912e08194758bf6f3364392fb79a1b29f855c7ebe131a368c29ff7815697e70ce5e703b0c5cf96542967c3a50ecde22f93c6913852a6a4916d8b9e4afa19bb9aac02c5a8acbad517b6cc94737bca43909561f0d9140289a316d0dd20693cf7a5c83b424baab38045e51b4b07a579ec204f2980c81675261f5a61694787f965146cabf03ef508264df94a1ed69e0794f31306d1ae47ac80bf8f80131eb47d75857e92f94117398f952d1112dc0f6226c885b668d1813801163a5ec87d746e6e002bd3c371907bd36813a4f8aff5c867af74a5666de2f3503cbaadca5bfeef02923d3d3ade6fea53a87dfabc34b554abd2f24de66c6d2edc0cf7e6187f28c90b804ccb1da412b667aceb8d12d7da512740833967df480a80e64ab770429692a48b2d5c30ab39727d4b6274dd6ae6c6168edeeef97d1798bcd1538e6bccd3905046f9ce4af4acb7f0ed195807d1271afe92af72de40c24cfa2877436f80f10237f2503ef1b2e64f08344eb7123a286fdc41ebb731f9edec42e4b371eea049303d4e25e49b228302ba6798005ca04786dbd6379e1b80ec0420f5f8aacc54568be07010321d7c91f865d02c413e305efa862a747cf3f62f570da478ae95a4bcf6b16f0f3f2c969b7927c589007ec319ea02095347378d6ccd61e09bfda0f4bd2c9e90e231e1c37f969d669198b7fd4945118a939c9150a9d3c1d3410a77e2c221dbe38384915e2632668299796e39c4b6f4a3496d830ad61e9bcecafac2c161d5c6750913a54d101f7c59338985e455deb8bbf96646dea08d44b9ebbcfab74a9d2e53671c69e96ffd884ed89012cf0ae3e7608050988ca57745f37950e8410af31890c1b78c259981bc2e8cb072271b0c2c2f481829d3e389b7cad4463969d10f7bc129ef68f7c884416c4c7717fd6d2c60d115b61cedc8289328f3364b57ba022187d9fc47c73ac21bd6c18d1e471f991c76d2010b317f1b9c7ba10a61a86c569f4f65b6c79da9af9cf3bfc3b53b1ea81701999008430cc2988127f34805bc7ffe6fb543862d96931b5b2bbad33ffb5220b296b4df287000562de7a4b66b7bbfca8f1d8cdea8893969efe554e68644e8ea6099ec5513972749a1e161f7e3a832b61f760cdf1485aa87ae72c3a9b789c8843b1b6f818840615c3706fde584d45870f5f93344b6c9f336c1b4a7f1af0cf66f21a14d88d6184b0a7f35f1103b981564342b9ef5ab430c2430808c27c39231339cca2897d430196806e6fcf309b9bf975a8c78c4634661d4193eb1b01f30e89e5aaf226c808f845595fbb744ea8dbe72599f5fabc9a5b815ad81fb087272b895d0fab73d091435ea9319310e0f4a578b6db5c3b4f180874fea33b344891748988b0797afb589ec945065ae64ff6b5cf73ce535b28b45c62a308284948f8c9855360ed1c37231b6881305f80f2acadcc231e4b3317121d5d0826f26d4156502e93e0b10830d0097dde19d7bf9a27df558faa0c683f18cbeedd3a15f2411cdaa3c0967ad994be1e78b22ac13b767e42858676cfc32011edec7edcfbdfb2ecae6e303928a84ee8a8ac777cc2b8ab3d1e7d9f3a633acae097fcea3f9a42ad5f18db9ada1afa8ccc9dedbee2b424e899959a63db07075a7f4ad739b906ce149e7727b90c1d35664f18a1bc0d63969fbbc5e3c0576190cdb7d17d32e250d874fce751ef3aa37ec5041eaab8ffd693c12668b49568886ddd68bd06476438c58291b7787d486df97987b385223306d1d1599930ac17a6f8e7739cb58e1c87cacd12bcb2d0cf301237ab3d9ef1e67cedb4e92ae202e325698fd344d8c4aa123402ec3e7539432f0e4b18cbd51718dd0ce416b05514ff5d3ad2cbd9c8b9da553b6174b94f6f18aa8098fb4244014c6e965e190cc1af24deddb30dffd42b6dd8052b3b904dbee1c4c25a201740caf91852976ee9475009070330e27f379accbb2b2ce9cbc4873dffb4643d65220af04f087d208a7ac2fb980c32e76508d4db2d5fad7521d94c2ac31f8b60850e47a9975f1b5a1586875c4058a1f58274ccf68c8e975f12c80dd53feef25268896081f3648206532a949919fe3305d651b2c1b252dcf449a27137f1f5b0ef0f3d74a73379512e8b2d1144c4a42ddf94f5291d5e18c4dfd38edb9e4e6ef1efc8f6053990c673a8f9e25cc6c9ecbc833c886701970414e07277e1be66f5fad331fe0a67baf328a864f540858e7e16538dca88425d15ae58a049058e6a588371852edf14c0952227443d0db273c334e56df55c2985b79f27ae60229c3105f0ce6671147aeecaa1d8f7c36bfa24dbd4778d2f77bd5669a8e78d7d38110137e33a605d51728c5552fc4f4b6e83a62edd202c426c10f2902557d44b114dd53cca51501733961693dde00aa8500bfdf331695d03db33894a4bb9b845cfaff48f414aa209e18fbf27bbb5ccb1f2610ffadf9a4f42b8fac4a0b39ad1ee04af83a6cac0f3854476e69afc628ebd7d783f4c74fbb648f67b754807d84644292e7a2af3367141028ca3edd49ac393d63d3f1c16c36cfbe8560205b35afad91d00458ee0cb3de5884da5682a7d9507e07a1c446eb7d97952432d3d84d020d23dae8ef7f5c9d8a00d9f143e7f47894c50bc7751cc2027033b56df8da7eeea14fc3dd4ab7e72745fdbc9074aa0ba09a14357f5c0e945a73b2b26bee1b6e04e21069af87ff4a05c944844ca4a80693ca27c854bd403bd032a37a6adedda0c4bae6419043f2a2f642d9edab740b92219837fe01b883aba257b851b9b31df7e3db99a14ce582358ba180cf39610a934f1184ec6b33571c0823cd6acbadc01777a53fff225743844cc4a43080341d13e15a4d99cbbc69e2fd9c86061c694101e4bcad83097babd09fa0de29dda80a21d5ecd9079872c2075bb3e378f0b4b4cf752c179062c217e8f4ccd7ddbca941c06859f72370e7894c72cf0a73aa0725c7410064fd27fcd236df54e2085bc8e6c100d4216f252acc78acef1bd5ba7e90e42c664eaaf1b694195162c4cdc1d4326a1c136ebc62a913eab0aeb6172cd2c2b1321fb5fba5df0941b33a192d619d79a2bd59eb695091ec3727ae4e6a56a68a320a24230d6ddcf5588dbd23ef83bd0051e394960d7ec49248814b0572482467857924c1fb0e61c56913b39f673e64d0ac73199b3cef0a2cfb08831d5636d3f0836a23939400e966fe21dd3bf53020dd840c2e8d7962102945487286b35983899a58926e2bec97617ee471d6e770594742ac69bd6c633d9240a1dd5417bd8263a6a532e7d84f8d866c27f9cc", @typed={0x10, 0x78, @u64=0x7fff}, @generic="eedf48a4ef5edc949884c61679dd59ce4db218d7e7f2ee4c8e9b6fbc995ddc466a2543660912d45e348cbc17e61497c73d1e69ca219cb323cae80fe825ee1d0ae218aee4721551b6c6c90832906daf799b02b12657bfebcb87d8495f4c013aeb7cafe133d358cfee89c2278740ad3d9a03c6d02fea838a9ff7c9c17390e75e3ceef23358745736acb98e7f0896e6f22f081f8d5a41571cf61fddc5660a565ad2d48f84834bc3ee5532c44d0869fadeda844e91ece75240253730c557a6d30dc1a13ff3701ebc54b22087215f31286415ab338f9070e46f4204d69dc2909b8d502b1d", @generic="51e5721ee221ad8d79", @nested={0x68, 0x94, [@typed={0xc, 0x48, @pid=r6}, @generic="2ce26fabc7bf92340acd33e21e5bb20a5f9ce1639dbfec2f79989a4267fd1b57fe4aff7bd5dcb9e87035089ac8673d6a36fa2ce4b39c1896c0eda4ce2fde733b0fd1555a9e9d2896", @typed={0x10, 0xc, @u64=0xfffffffffffffffc}]}, @nested={0x1f0, 0x3, [@generic="58fe25489b78defc42bf3e22c669157a21a117a4f05a8d8e35651ac9590261f0bb1d6a205d6845973568a9a36227d589ff20615ea95af7f2c8a8cffc902e7bedd3ddaf267ce013b75e0f8410e4a9719f5a", @generic="b3f553b4db64d45ea536d501eee34e9d346c8d94a7568fea8ed0f58a9fd1a9d955b8750400f46b3ac445b982fa147de17ba1ff78e361694c80d64bbe1f3b72a5cb6dccea94b86aaf90154353f785a819dd7b0734aa6042df3356b758cf060d45a4030bf23e8d2a61071bc7ccff1ef5de60c98390561ca50ea34e3ed79a8c024104b3b44f9f7409d901d3bd5e8b3ca06f7a39f344156cb11ebd", @generic="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"]}, @nested={0x88, 0x32, [@typed={0xc, 0x18, @uid=r2}, @generic="9118eb886f55b13efc8c4f37b23296179476a91f79b65638091641458d985fd940c4e6772b601aca71de784deee781ac31e338f1d93c2fa3a9fcc8bee1776d985b9ce10dc29c81db0d96c3f1457458dbfe809b7dc3ba4c6bec67b2c7a1a913a3be71f1ec30fafe3b89549af0039e4ab503f9c5b2c94a67c3"]}]}, 0x1528}, {&(0x7f000076f000)={0x18f8, 0x2f, 0x200, 0x6, 0x1, "", [@generic="e7282a57586e45359ce1f60ee7", @nested={0x128, 0x4e, [@generic="59f9139f2944a0d691001f42c38574465fea6c352e93828fecf905bd084d86f9e5189ecb9145c78ff906a29a38d020e59bc60cb5c0fa5b72736bb230118b8ccc55e701ff9ee3ad0545788906d32f5fb78679ad24f7303532403a79cb1e426e55b93c9585761ffb6d5ad99833b2546f74a71d5d56d3c8084e3c2538c4e8f61342597a0dcaf5942c0d69b24297a3d5b79cbb3aec176c92035333caeea017f1086e1edacbec750b3badd479846f555b63d921fccbb05c45f40bb32d1faf525827e7a9c4c1bf428cb2839a1f00a2242347cfc41c1655dda480f1bab2e401ac86ce563bf52f520b47508f6c69e4fc0d0cef14432b5064dcf102", @typed={0xc, 0x1, @ipv4=@multicast1=0xe0000001}, @typed={0xc, 0x4b, @fd=r0}, @typed={0x14, 0x48, @str='/dev/rtc\x00'}]}, @typed={0x10, 0x8c, @u64=0x9}, @typed={0x18, 0x72, @ipv6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}}, @generic="225739d0ea633c1608504b6cd55f2a6d1dae6205c5f3449ded2dffbd92c410a04f8051670d8c353fabef501bacff308d44a82d4d3cb2467fad9ecc58d64c11acc64bb058e65983725505bbdddfcde4d2278095ec053279d95578eb4d06e24270f60559411effd5b3176d642ae7a13d8f5e9aa832d93f669cff60a046f8a9563bb43eec650ddfab0da2d5ae4c02628edb0ba02ad73e2908af60f0bf05064ddbeb", @nested={0x174, 0x10, [@generic="956343c4252d229eead6dae9b5720037beed3482b5e9ea094bf1bfaa8dca22d9ef41aa5149dde83c12808d8be0e72c15e2bf2da1218864957097066a67108baf334d8ba55896dd701904c21c75a2dfc3d8886b55dd325aff43e3c81296725c32d17dc7d13aca79afa81520001e0d1737dc265468a365f0cef91277103cf6e6409ee7d664e7324f9f932a92007b9e955b85493f81c0793eadeb5689383f65c63c97ea", @generic="a6cdee4b90b77a690d1c12709eda2856469233c5fe91be462f3c7aeaebe99048b66f8f60144d5e8d3a901b882118d66fd0981474501cadbc563cf526bc17a4c3958dd72017624e1fb4bf32041fca6bdc1730d8efc0343d4b08dafd8afb9b7ae9553d07f5a84d8521f94c2dba01f5461858f8113e02c7e257d44dcc2333f9702f89636f78a04d2283afc6ed894b879e5dfd0b07eb64d8b47289abedd4254bdf25bb", @typed={0x8, 0x93, @void=""}, @typed={0x18, 0x3c, @ipv6=@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16}}, @typed={0xc, 0x29, @pid=r7}]}, @nested={0x1224, 0x75, [@typed={0x8, 0x2d, @void=""}, @typed={0xc, 0x8f, @u32=0xfffffffffffffff8}, @generic="7c309b4d9ed6fe42d0d494b97b001395f681fcbc35f8e09dd8aecdce83b95988e8d0c8484604a898f8b9432eac732efa0caffc8adfc807d69cec4a8c0a7d8aabc88752a51b18fee65126979b5a5a2294cc72cec46b0f45e6be7a9bd4a3256f9d12d2039d925dac1dde213a0d92c4f428046c3e0b71efaf7f25f57e019c8f5d76155b3f85a5b2012aea7e6864e2b77593c4cd8934246e76c87d574b5bc5585d12f0ecd962aafe27e345156d88", @generic="b0f42200376be91aacdc051af85f7bcdc30547d5173ab9b132994baf400373e856fc4b6684a5cf53e730bbfc7c8249b28def41ffb9a7a33252fc06048a836ce11ecef07555c1715d54", @generic="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", @typed={0x108, 0x88, @binary="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"}, @typed={0xc, 0x28, @fd=r0}]}, @nested={0x34c, 0x8e, [@generic="ebc1b8ab752f1f2e1b6a6a57341332a9cd0e08fe639f3ac4ea62a1eb9f8dafde6ffc2456e20670795d983d8fdfa07d1e307ea2516bb3aa9b4532eaa7a429c1", @generic="f5f9eded062396a018aa9f0dcac9bd6e35ddb0e77528901e241cf7c342deaf459204ac56d749e84d6d16092ab15da45a5b30012f1cc6928b54ec67dff65baaeffcb5065eba00609edfdc110f8d5d697fc0139c1d930036dcee6f68c358cbd74db0996cb38bb8217f030b374700e98387d065b8c36c81d68b0ee4a691e33e78aea55dd4b6f3c891c4673398410a38752a50927a04002a3190aa05cc49bf", @typed={0x10, 0x6a, @binary="7d46f5c5e8486ce0"}, @typed={0xc, 0x6c, @u32=0x8}, @generic="32576e2728623b1f076b11e894643f59d8ff993197adad1bb27be0ce3e8734ed83d0974c235fe80a38cad2ab69e3c146fb3b65403f66291dea0ee344e14980626ffab1d9fdccebc7a4543686cd81f2cb", @generic="3c735eaafd208d393786e2c803ce29886d976519a1734aa4ad064496628e26aab047e1e8d2249567192ca0b1d524f18deab8e1f5386e31988125e6f20e5438dc5a2aafe7ae1e29eb3aa2cb97c9f3c74801f2ffc5743ad6c6390a2a09e1162fdea6e271619d7d9f5aa12c88f54a9d49427f2b20c32a3e5a66e22586010e998d29aeddacd60f7e627ec4c40e459ee78eef988ff79055f68662c322c7ab5dc75bb19c4d5b3b5a84a5", @generic="3d97ab3f9e6981b5477558298487db68564ab6e99097abd36775c91ec9c8206133ac6dd5cfe313aca9e31b1214061b14ea43e3d67813f36b0fedcf73dbd0169ed3f0f4837fad7762ff1a9c6402fe297fd01369", @typed={0xc, 0x85, @fd=r0}, @generic="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"]}, @generic="2146c11d8a55"]}, 0x18f8}, {&(0x7f000016f000)={0x30, 0x3a, 0x30, 0x1, 0x0, "", [@generic="768e797c65fc3b5512d2b843898301cd93f76b7196b3ce3fe06d72a25cd556e5"]}, 0x30}, {&(0x7f00004be000-0x1010)={0x1010, 0x21, 0x100, 0x1, 0x2, "", [@generic="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"]}, 0x1010}, {&(0x7f0000a33000)={0x2dc, 0x7fffffff, 0x100, 0x6, 0x1, "", [@nested={0x208, 0x81, [@typed={0xc, 0x15, @pid=r8}, @typed={0xc, 0x4b, @uid=r2}, @typed={0x14, 0x88, @str='/dev/rtc\x00'}, @typed={0x30, 0x52, @binary="b4db16201c28b9cb4b30bd380fa8e3867f70f6eb5b7e87edc054a312b166f7eb578d29cc7d7c"}, @generic="cc5f5ebbf31f67e39dac0ec86b00c443b12a02d8eb0752670401d12f4e0ac256bda6f719160ce951ddd2c9be74a68c77629d52f4f76ad2a2bee245195b6112bbdc3c275a3079ac416e37d8e765a6375804f71d617ef209ac520968b142607af24c5d24d7dafc6cd265807523cc9d36969c27641e4e37beb4fc90a933b63884eeb144fd7365adaad7bfa1ad20ad021488c18d5f484055c7bff4fb12501f01c660d94053e519a88fb89238da096bc913b8d2ed059d2b0f363c6f3e68", @typed={0x2c, 0x38, @str='cpuset%nodev/eth0]-posix_acl_access\x00'}, @typed={0xa8, 0x7b, @binary="d4100823c1e9534e3175ea3a363923e1b2e75c04502216d84cfeee8b9e86e161f79f7cfb23e65d95db7771d2a8ef9f828f09cb7516406e8f163c1ec4e82f7b698c2e3cd55d273eb22ff904a482d99236656a698e2476258ea7fb5949e1d33d84d7adb941aca06ca4090f9c09348d3ed85f2a64819cc6dfe80e2883ba8169d8ee2282479a6a2ebe802115b9f5a73fb53b73172ce4016538a1ef988d138b"}, @typed={0x18, 0x45, @ipv6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}}]}, @generic="d453b1f55d3dcf2edea9c0ef1975c7da2ffcaa3ebdaddb6555b6704fd32ffea220e2f19f7b860e4a08908ce99eba74ca410c58b4ae422d7c60c2426f34d55a0cb8257ab9d3f851f63b2c3bdc41c2f1d1c9330344577ac6eb67702407e012554535a98accca809575eea6b4eaa17b882e0938bebfc936ced667b21fc97df0207e4aee44b397b193bee8fbcf39f888395e7796f569a2cd45e756320cc79444f2533fe111e846b4bdeb75e5060ac531a0f0ef0000607ff7b90d7c408a6d10e5342525c65d"]}, 0x2dc}, {&(0x7f000011a000-0x10e8)={0x10e8, 0x3c, 0x331, 0x7, 0x3, "", [@typed={0xb0, 0xc, @binary="d1fee782b41be641b2d6b57ed8f9d00b44ad7ad32de710668512fce391606408a931dc9bbcb8572cb542c74b4027b3f8c5c7d043e13f0ab8affa38892c916cbca5947f1744af8ed6122236af26dfc4a852b7057474c391389cf4717ad428f01a0b95fcbad9d37dcd5cbade56846d90a401b6ede31a53050bb853063f4c89cd9798a48d1f3f1454e08252837b8bd2c320deebc6963b933cc8e4f8073813c3bbe6828e8a7e1bd775"}, @typed={0xc, 0x13, @fd=r0}, @typed={0xc, 0x61, @uid=r2}, @typed={0x8, 0x36, @void=""}, @generic="2924e1136753be5d9f5662b90fd4c0c3aba8bfdae6bc9f31fe59359c4bf979649a71211d0ce7866ba8c917e46e6ed71284653900c981b68666f23369a0d5a3695b47524bab1c64d9f5fd8777069df65ca66b6be8143f53a884fd056e18463a1029fa91b7571ac363121f0fc221498152acba2d2d3bf794a3b8eb118ed15e8a2657f9ea02ed3f0638155e80b340e0ca9023c88ec7f9582ba2653190b2bfcf6a4f6bce30ba9d8a9988167486066bdce6ea8e5910b2e61da9bdaf9c5dfd953ac57010df90daefcd5a140875707e95a82cd3eef0427ff56158ca7b82f891418e47b0f9d4ab6dedfd98eff7eeb2140acd4d62e2f196e0dfeaf7b2073ee1df6f4ef28f59b9192f52ccac876149dad0c4692512e5e9ed18e13ebb717c68d452da8e1fae085e3f706ea4a59a013852bed5a971105a0314ef62f43db9776f5e5cd7c2adb8246daceebeb5f69b8c70b7650990c5a46abcc74905b898a563620e6dac2cc2bdba8ab1ab8c2158504844d18d15d5f10cafb7feadc8ab821eebe0525fd54b9f6b222055720e65364824f292e28cb9e13f423d3b9dd8a3bedf31e569c461bbb3f877342e14daf63bbc03c93a3ae49b6b2608c3fae6fd65d6d9b0ca6d4ccd3b1fc7299911c0ac1fa7d54f1c5802921552091f9fb5a3fc257d80f3cc1dc2359a1ca1967f29de7367db2df36c9d04263d48208376a20728cc531d5d8792b4cbf7b067b6e7fc4f34e629433cd5d57984fd6d32a4ad9a9c81d548385a256ab8bb8bff61a621b1d210e976cf34374e56e1640d3a867dfb47cd3160b70b53504d4105881e4fc11c127fa4d674ba448a6718bd919a08d32a03ac9f6355d4e1adf281e4b7eec84cd02e9dc41637fbc61c1d426cf06e65796597682b5357aa7ee01d878e398c7dd1d40a944e172ae703c5c1cdad5e24d15c211ff4c4eb9c3a585c32b830233c879489e6b93d7cb3dcb95d706257185963e31c42542e9fc0ba083752811eab9521997a5100c0c9e9f9c08d8e954f8ecc8157c74db741c25fc160aa2a601c3ba9030aa1a2e2035e92df73805ea2ff2b4069254722369e09405e841e5cd4908db4eeb3314092c1546a91e38efd90b1e13fc1c69ae36ddda4d9df99d26bb4496e7e1134888969dcea50adcaa3ff61e75eee51e8a0a73369b4f2522dc990e52815060f31eae844662158a5bd675a1b8f686b0fe5a2fcfd7757deb39c24f9b50b4cea5421027dcf5827c49faeb1725ba6f79dd8b564b26c583592a0cf18f6ac611bf8cda5ead33c0ec6548ffc3cb6c6f89e948f91c037fed1088f9a455f9d837b6682917d4bdfd4eb60780df1bd66c37dd48df94edd8e9f52e2e015ea27099d2415d2e3158fa864ac7ee8058b954d27722a5b4c1f4642fd83dfb4c94b1f62d935bbb1ecd7c9d5b2ed89e752534337e3415c7ee73ea77a45a0e28f774938e11956f8a37498392118725a0c0a98bf02f740b79577e99a2ea5689b0435fe305b39b0790bd9d286460214b3f3f5389c648007538d1dc6d884aee65ddd1dca8dd8997d89f56e7ac7140e0f96a75eef32f0cd2e48987cb13913b498837edf38713252ccf71e530c34d6e227ba94b38815a8f7233df098eebd8453189081e909666cfd5b089dbe8988749be3276acaee26fa5bb99ca175c8ecb7059dc5d1a7e04a7ebc4f16ed56aca440dcd546c3d424ad785a14166e56bb80f77e37413459bbe43e4a7b6b9cd9c97c7a53b589dda6310869768d937a4c48acf7d4b7032866e5a81ddb61fea82c212adb9115adc7b78f0ced1037598c0d0ef6bd9a9e8ac33fae86fb67077ee312702561b7c254bf49d4ba9a3931af5b8691da8e4fb832141442eb4021a3d5d82ff13a9bef6e5194c4c28dc6abc77cfb62a0203d88c47474539f62fd81bcb05798bf69bb880c783c519d2830d8c4bdf31bb59dfdb21750f52b7d4b06805be2374caef2cbd4080315626e3502e4340bb8e4edefa2b486009a2e85f3caf265a14f25207727603d683d4c8c09c7545c4959865f31bbdd4fd57997937f0b2270c0abd360b0311e27f56b8f0f3b650d24bb26d3f8a8a2b733b3f95ff81e6283a7fe6a8f5938504fa6fce0e20b2d3fe5411843523d7ce9d388482aadbf27b4cb91866020361ce9069b0c9325a39c6f157af68e39ed5828ad9aa4480c172c906876baea0959edcba9fa1798b5fc154a783c947832f0ffc5b399a269aa70dd58bf4e049370153a3f3acea037a0aa8f13b24bfe21f87634381ece231be0e32466fb667869d22b76d32b11acc7c897d6463fde3a98953f39af5c6a9cf086897e4286d067328b54d6b66f0d245a8eea80434638f05921e6dc9733700c391492ca6fb25d3fe48b6a34f1b6677af5d3cae974d146f3bf15fda5260dbd1a8508d965a245de52b7d44d733fcb74f73469c9834d396b093c5d0c7365caa2a5d5a301418d3104420e3208ce8bc971c8678275a11586c19797584ddd8c68e028e6ea49782b9beddfd7cddab217ccfbf31319d3b9836e6732fb280ded2186cb6cb4736f2159be2b684c3bde2d34fef35d786cba8f87a47ee410a68a516c02ea2e7153993b5fc6e4d96e42ae6a527b3d77499bb2da53e552c950db1d0d0ef63ef6061d49c76b75b1f32b422251c64dcc95dbabecd0349e54f38677c8e91072b6d5eb764e923e4dbdc14d08bba1f071b029e6c44124b874362beec366e3266ea222399d792ba1e61c101f4b5b81cb068504d1fba15875362e59a185aba8bcb62bdccd9536c76b30829d8b7e7eb82d3386fa6b23310a3d6703d16d6c714b25571b6922b2b5d004a81ca356eb50d8486dceb70843d90326c13dbc26fb22aa8212c90cf6ec753f947b2810bdb7d0743ec9d11e7472f311cd88e4476536fe969067a2758ba698dfdcf32e13055cd93f0c487b36fcc3aed52e7d79523c44e481e468b1edbc718b1d132ea3e97469dfdaa112ffca117c80d921a1df282bacbe973edbc3672408c267a5e56cb2ea86f70613a903d11ca9bab9dde56b402d199b4bfe60f114a2f2d87c39ab583efde06493920a894f8ae88b980b7ae236f43d088155891419d356a299e30678c99c04fda51df40edac2e32c8cdeede53d08958094a09a29a0e5b4200754dcaf982bcdfb7fd4cd62f2a4646c7c06496a1a33cbb72e1497d07781f5a273900dcf355cc24327ba337b76f70d32f8173d9876c43cc7e70bb97a07cb9b0d48b68401214791301461ea8cbfdfc0d6ea11da6fe726bb5cf782fbe357264dd89557abda9c1bb3aa3e61045ed7de552ae51947fd6b7112d03e0aaeee50dafd053c0633bf888445136f4a5630196f3113a1a3d5c63a42c1476b43813ae5b45af5ac740e80b6f6065ed66439cfd680f8c246d60d1768dbf774198ddf16b7448bca1377094eb87b0c46cf49f2bd6a815c825f21b88f69e58731d0967c39faa22424eb5ff0545078a2a75afc92005db48631f67f36cfc9a5ba120c9c5beb14f80cab97018fe111802ae746e16c30044bd18555a6a8cf360ff4b70cf18ba34e69f2f7abcac40bb823ef6ca89fc4c1b63bc2195ae8c639bef9c3a569965d55b4137138d4df334db8c220be93ee91bd4b026cf4827fe5dda2a7f33aeccb8dc65a551588411a9477fa66a574892a08f64f7a585715fd5a7d48098dfed0967d6d818993252f8d35eb5356c1ea19acd865f794b3012bfe43efe684a7ef968114632705e571a71ccbe583f212358534149fae58a76cc2345956e6edf59dee3d06ae5a7d18d89e3904201dc4b43680620916137bf361f990f15b8afd5f8d2b38fbdf79dc0c79958dc5a103d2c461d2e396474a7723fe458c3e1880fd373ae536c0fa256677eed6dbebe8b9509dc125b69f2d07beb2c5887d6dcf0e2b1b76e5a6d381d2f7234ebf00fee7cd1673884a167ada2d36f48b0226adfafff52b70c232b3de950dde5bfc606090d5c2f768c35ea43718983ffd16c1c571564e42b45f2d1731a3002374485f2e7d0970a3720fba2d806abec2928e8a85afabc61ed38821fa7f77441ccce822cd90da0b4db5b90311f3658fbc8c3d6c25abaf8f1ea9f6d227e03193a1fbb7b0ff653778b4bb51810ed442e7dccf83828cb30c3e4e09b781186bc6fc303dc36e0ff6729a9734fff29cdd8dafa8fef1e63670922f95f3402f515af010812f672c5079e0d011ced88268144fabefae1d6a5300e3c51a2fa5531e7bfba56ccf73540df40f865b0d9e1f05977b1e28bdc5e4f353c4b1c5b64e05cc57719389c63d92cc264a1b71ebbfd7643e022f798270779067cc5447441fc750747d525ae0eaf27afe73a29c866c543211931c3ed4da32302a358fd403041f49b9302544d7ffa6a2d7f181358896cb5e1c7d7486781af02f648cfe27af639b5d7ce95db66d5d52963dd29a33c6724de3b0bb3a5e77b4af5c8c8a9db0b64b1758c606d6c7906c70bade6dcf4eb197879073e29d87247b9d8da10d2bb2a186de47682958701dea17f98619b1b2d834c07867e61f54453b1eeb5800ff9867ca7c601e6621d5d88b27d18ac6531aaea0199448eea412ad2eab1c37fe87bfa750ece58f1a351d97cbe950d7f2f5fa9f64b9f3cdd3a3112e04cdaaf4e204234a4ba5cd5f1594f6c7f7ca04101878e74619571bdfd365f483572fed5723aaa99d23bab7dd1b0fa90e103618933a90b61928b50e9aeca050a06c280bfafbabdc82bc2d4f58770b0b15b0c51be97ad251fab9a34c5077e2eacc546d75b1020df71a2f6a4d3013a0c3457818d8fc7b008671c6dd758bb2dee8b8930b4d9532fe0af5f8262c79bd99955bd7153f314e81057414f04e705f45d4de5231e1112cb084aedfafb833740511cf84a91a9712b09dc25bb45eb227ecebfea870c7a54c38843bfa2e40efac03eb3c6809afc5634db5526adb6fc6ad23ad1245b1d3811ae5fd1081c7f9c5db90a0ca5d2d1154afb24211285ec12877f605a019579c5c1641ffb2217c25bac904e0d59d14c31c8e7938223de8835b0fbd92e8ad2e3a9740ad6c28756ab20bf054955cb0a7a9cd273579811f8ccf07890bbdc6796436fc5854c05b6d46300a3f5870c4f47a1d1a8157b87ba1c2c4ca769fc8d0f9a319df9b3f899fff86fbbee401a9285e2193c0cd74f8b7f293a84f608d2334bd0880a450c245a5381652f3de0dbed3ab0e09c137cf85774a2b37bf96fc6e708e083f74c1238509935ea97e95a31dd484f508d29362391b793dcb36a8fa7e2cc0b30ea795395f015db930480fdd5949513ead9a3f80fef789dedffb290b7aa0ecc495396214030169c3a2759d75b31982008f415168969497123adc6363b51b67eacf1e7f6253c9ef70c6eb81e714f0b813ddb60dc81a337299e40bd91e491cf3886cc31c27e1029f9d06ea7ce4961d0f7fb801ea5a5c0c4209b3a0b00301c307ccdea755e6dcc96d051ce93ca7a288afc93b29f153f42415611404ad518775919f6fff1fa5a104216f22d95e6c67c09afeb431588386a2f71a66ce23d88400574c78b76b76111b72a971c35f099b346ad69cbb3407dc6d5b46b03e932fad2bfcb608056c135242a49984afcaa1111f36a9f2ba46131e3fade0af216180707242faa60be08b7d6885c76edfd76c40f64598b08aa71bab26dfd345e326f895ed549fd4e0984975f71eb5579d95bf6652b52bf6e4bb678818f1b83401bb7154054b6411bcf1d51676435045afe2753339c58182e1cf1d24af7d4e22edd76ce6bd607fb82aee91041462b388910fc45bb225a34dd010d27a4cde0e64b40d2af6dbcfe300d2e6e76aded43bcf8f3150cd5ef019218e5998", @typed={0x8, 0x7e, @void=""}]}, 0x10e8}, {&(0x7f00003da000)={0x1f4, 0x34, 0x0, 0x6, 0x0, "", [@typed={0xfc, 0x65, @binary="5414efd595f4dfc5abfb0caa265723b93534a8011a9fece4f731a841b1fbce1dd01598a1d2f50ff5624ab48b51f09704f3a2a519d1895c258ff4046964fa4f93720ac34f898dfacfb21ec5a99e93220aa9ce93d6bb747fd8426ffb2d16ce6cfaa0fdffc53d004decc1e33c32c623f1e4cb41fb5e610bb01dc0bf235675ed99042ff45af5a0b80840711c769b37caa5d846d9fa5436a51f2af090b30f86eea960a1f3ecd328171a2f1e8269ae9632cb30b538fc0d19f7abed898ef241aeb29c89644777badcafe414d3e30f81840129c04479db5f24513b7d7c02f00f1732f2e66b3449bf37a1f0ad61e776ef19ae7bf432"}, @nested={0xa4, 0x3e, [@generic="46f4fc52aa1aacf618d9265b5a677cf38e46162d0e6493a7d67f4f3bd1ee05c04ad65a247c3c0187a86f86c9ae6537c42aeda271a67fded3cac448031977abc890fe421e7a84411519f02efe29b0632742c367b6530d087780e2108072aa392c77c26ca60b001b0b8d26ea91f4b4196df176d7082f0bd39c807107295a1c2aed705a539f0f", @generic="63cd1f02", @typed={0x14, 0x37, @str='/dev/rtc\x00'}]}, @generic="7f1ffc25bc994a154b88d3a15f17309c93755722ee5d5ae957e68c9d5dd033c555fd55ae91bc", @generic="09d7d0eeb24120e4a7434ade447202db1a726d9e97176d2dc59c43834072"]}, 0x1f4}, {&(0x7f0000a72000-0x122c)={0x122c, 0x35, 0x500, 0x1, 0x3, "", [@nested={0x1e8, 0x63, [@generic="1b62b1927f87e9f1c41f99872b371755b95704d0befac629aba0a73976e1a79b700d09de48947abd67ba19a529d44f7b2727836c55221502087ecfd69464580a30e92d86cc032535b54e19bbb1c6a6988d694303d9fd139348f6dd16552e58dab4bccb42e29e6c5fa7bc7c7f545f839b7ba1dbb30235ab7a0be2c39cf5ca68c093a71dc7ada69190676a740fa87bde085e4641b5e1c98ec0f3aef664cebda254d301b5e7b427d9abb67e4445c89bb9dfa4f3e3de5e8f15dfef720c8fa36ef05a58fbe756acc99eabbdf5a9912f1cd283a1f6a21a6838db9ecf02e008fdb9387849a1f636101226a6d88889a460d30d2819", @typed={0xc, 0x18, @ipv4=@multicast2=0xe0000002}, @typed={0x8, 0x80, @void=""}, @generic="97c58dcccba822d09aada0997f94de4ead8cc8dae9b3de1e9e7b8a9ba9ab3e7f84b7bbfae2d15cb586e43d6de5b53ae4bc0ab441064162935ccd2c8dc405b06a6645c6ad13d4fe62e9fc44cf363fb9dac6c740f8bba2ea3784effaf2d639efa35e5a09e3746e08c3205feab81dbb9b78aa813f9f36debff7dedc3baba53143b947fa6120b80a313927fc9b776ad99481e120d8397a2027d8cb83cbfbbabdbf1d5f5a8b1181090b270ebe5f350aea2c29297d72405d2585aff4ffeaecb60070e42626fc95e5c8638707bbf32d3ba6d41712d47fa0762522b1be9a1ecb06"]}, @typed={0xc, 0x47, @ipv4=@local={0xac, 0x14, 0x0, 0xaa}}, @typed={0x14, 0x68, @str='/dev/rtc\x00'}, @typed={0x14, 0x5b, @str='/dev/rtc\x00'}, @generic="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"]}, 0x122c}], 0xa, &(0x7f000036a000)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r9, r2, r3}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r10, r2, r1}, @cred={0x20, 0x1, 0x2, r11, r2, r3}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r12, r2, r3}], 0x120, 0x80}, 0x40000) syz_emit_ethernet(0x282, &(0x7f0000fe5000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff, 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "9249df", 0x24c, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[@routing={0x0, 0xc, 0x3, 0x5, 0x0, [@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}]}, @hopopts={0x62, 0x22, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}}, @pad1={0x0, 0x1, 0x0}, @generic={0x0, 0xed, "a0ea106f60dfe75c57e31da7351e667aa181b798120a0d09b5a63f53007287f2ddaa405e665b3d14e8f30f1d3275ddbcb568907fe2dc4eb6f482999846d5c499b985650d11b1147cf81a003903cd0ac9233a4198f16d376dcd59da250bd8877a27e4e60c51e33aa31cb02d303c5534dca580c2fb6179f96d8f30ceb537f382a37da04a82d085b8daede3e8eeb9056f8908cbd8a59c4d38656b6c1d36a8542ce12004bfc2c00a48bc37de0b4f48ac649e08365016914c02bbf0b03a4e878304bf3d0055030738436e6fa7c658f640927e61def88cb8ba56d032f5b855ded47b7535ff967dd75049f3697b361035"}, @pad1={0x0, 0x1, 0x0}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x7ff}]}, @fragment={0x32, 0x0, 0x3, 0x8, 0x0, 0x81, 0x1}, @fragment={0x6b, 0x0, 0x7, 0x100, 0x0, 0x6, 0x2}, @routing={0x6e, 0xc, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10}, @loopback={0x0, 0x1}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}]}, @routing={0x3f, 0x6, 0x3, 0x80000001, 0x0, [@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @broadcast=0xffffffff}, @loopback={0x0, 0x1}]}, @fragment={0x89, 0x0, 0x0, 0xffff, 0x0, 0xffffffff, 0x3}], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x880b, 0x0, 0x1, [0x7, 0x81b4], ""}}}}}}}, 0x0) [ 81.353692] binder: 13522:13525 Release 1 refcount change on invalid ref 2 ret -22 [ 81.353700] binder: 13522:13525 unknown command 0 [ 81.353710] binder: 13522:13525 ioctl c0306201 208fdfd0 returned -22 [ 81.360738] binder: 13529:13531 ioctl c0306201 20000000 returned -14 [ 81.361087] binder: 13529:13531 ioctl c018620b 202dd000 returned -14 [ 81.363416] binder: 13529:13531 ERROR: BC_REGISTER_LOOPER called without request [ 81.363427] binder: 13531 RLIMIT_NICE not set [ 81.393323] binder: 13531 RLIMIT_NICE not set [ 81.418913] binder: 13529:13542 got reply transaction with bad transaction stack, transaction 194 has target 13529:13531 [ 81.418925] binder: 13529:13542 transaction failed 29201/-71, size 0-0 line 2772 [ 81.426134] binder: 13544:13555 BC_ACQUIRE_DONE u0000000000000000 no match [ 81.426147] binder: 13544:13555 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 81.426157] binder: 13544:13555 BC_FREE_BUFFER u0000000000000000 no match [ 81.426167] binder: 13544:13555 BC_INCREFS_DONE u0000000000000000 no match [ 81.426180] binder: 13544:13555 Release 1 refcount change on invalid ref 2 ret -22 [ 81.426187] binder: 13544:13555 unknown command 0 [ 81.426196] binder: 13544:13555 ioctl c0306201 208fdfd0 returned -22 [ 81.440822] binder: 13532:13548 BC_ACQUIRE_DONE u0000000000000000 no match [ 81.440833] binder: 13532:13548 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 81.440846] binder: 13532:13548 BC_FREE_BUFFER u0000000000000000 no match [ 81.440858] binder: 13532:13548 BC_INCREFS_DONE u0000000000000000 no match [ 81.440871] binder: 13532:13548 Release 1 refcount change on invalid ref 2 ret -22 [ 81.440878] binder: 13532:13548 unknown command 0 [ 81.440889] binder: 13532:13548 ioctl c0306201 208fdfd0 returned -22 [ 81.443212] binder: 13548 RLIMIT_NICE not set [ 81.452196] binder: 13523:13553 BC_ACQUIRE_DONE u0000000000000000 no match [ 81.452209] binder: 13523:13553 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 81.452224] binder: 13523:13553 BC_FREE_BUFFER u0000000000000000 no match [ 81.452236] binder: 13523:13553 BC_INCREFS_DONE u0000000000000000 no match [ 81.452251] binder: 13523:13553 Release 1 refcount change on invalid ref 2 ret -22 [ 81.452259] binder: 13523:13553 unknown command 0 [ 81.452381] binder: 13523:13553 ioctl c0306201 208fdfd0 returned -22 [ 81.454071] binder: 13553 RLIMIT_NICE not set [ 81.457219] binder: 13529:13531 ioctl c018620b 202dd000 returned -14 [ 81.469968] binder: BINDER_SET_CONTEXT_MGR already set [ 81.469980] binder: 13529:13531 ioctl 40046207 0 returned -16 [ 81.470086] binder: 13529:13542 ERROR: BC_REGISTER_LOOPER called without request [ 81.470097] binder: 13542 RLIMIT_NICE not set [ 81.473466] binder: 13529:13542 unknown command 0 [ 81.473479] binder: 13529:13542 ioctl c0306201 20002fd0 returned -22 [ 81.711081] binder: 13532:13533 ioctl 40046207 0 returned -16 [ 81.711525] binder: release 13529:13531 transaction 194 in, still active [ 81.711533] binder: send failed reply for transaction 194 to 13529:13542 [ 81.711575] binder: undelivered TRANSACTION_COMPLETE [ 81.711583] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.711587] binder: undelivered TRANSACTION_ERROR: 29189 [ 81.716985] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/14 21:59:21 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) capset(&(0x7f0000011000)={0x0, 0x0}, &(0x7f0000001000-0x18)={0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f000039b000)=0x0, &(0x7f0000bda000)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f000064e000)='/dev/dsp\x00', 0x40000, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f00004bc000-0x28)={0x2, 0x0, [{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000499000-0x10)='/dev/sequencer2\x00', 0x208400, 0x0) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00009e1000)={0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x445, 0xc000000, 0x1, 0xef8, 0xff}) 2018/01/14 21:59:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x0, 0x0, &(0x7f0000004000-0x4d)=""}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="", 0x0) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:21 executing program 7: mmap(&(0x7f0000000000/0x47000)=nil, 0x47000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000f000)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000013000)='./bus\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000047000-0x6)='./bus\x00', 0x0) getdents64(r0, &(0x7f0000043000-0xef)=""/31, 0x1f) getdents64(r0, &(0x7f0000026000-0x10)=""/26, 0x1a) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000027000+0x5ad)={0x0, 0x9, 0x10001, 0x2, 0x6ef6, 0x2, 0xab, 0x0, {0x0, @in={{0x2, 0x1, @multicast1=0xe0000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x7fffffff, 0x6, 0x6002, 0xfffffffffffffff8, 0x3ff}}, &(0x7f000001e000-0x4)=0xb8) mmap(&(0x7f0000047000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000048000-0x6)={r1, 0x3ff}, 0x6) 2018/01/14 21:59:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000d000-0x8)='./file0\x00', 0x80040, 0x0) ftruncate(r0, 0x0) r1 = shmget(0x1, 0x3000, 0x14, &(0x7f0000264000/0x3000)=nil) ioctl$TUNSETNOCSUM(r0, 0x400454c8, &(0x7f0000b33000-0x4)=0x0) shmctl$SHM_LOCK(r1, 0xb) openat(r0, &(0x7f0000458000)='./file0\x00', 0x0, 0x10) 2018/01/14 21:59:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000d82000)='/dev/snd/pcmC#D#c\x00', 0x8, 0x202500) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000894000-0x20)={@generic="06fc405c9dca80d143b3a49543914937", @ifru_flags=0xb00}) bind$alg(r1, &(0x7f00008f4000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f000032f000)="3665a1ab415b7ac7", 0x8) r2 = semget(0x1, 0x2, 0x40) semop(r2, &(0x7f0000109000)=[{0x3, 0x0, 0x1800}, {0x3, 0x1b80000000000, 0x1800}, {0x3, 0x5, 0x800}, {0x2, 0x1, 0x1000}, {0x3, 0x6, 0x1800}, {0x7, 0x1000, 0x800}, {0x4, 0x1, 0x1800}, {0x3, 0x4, 0x800}], 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000478000)={{{@in6=@local={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, @in=@remote={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in=@broadcast=0x0, 0xffffffffffffffff, 0x0}, 0x0, @in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00003c0000)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000833000)={'vcan0\x00', r3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000e7f000)={0x0, @in={{0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x9, 0x90, 0x5, 0x800, 0x1}, &(0x7f0000569000-0x4)=0xa0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000ef000-0x8c)={r4, @in6={{0xa, 0x1, 0x9, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0xf19}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x8c) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000c98000)={@empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0, 0x0}) perf_event_open(&(0x7f0000002000-0x78)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100300, &(0x7f0000000000)="", &(0x7f0000000000)=0x0, &(0x7f0000010000-0x4)=0x0, &(0x7f0000b5f000)="") r5 = accept$alg(r1, 0x0, 0x0) readv(r5, &(0x7f00005d6000)=[{&(0x7f0000e23000-0xd2)=""/210, 0xfc}], 0x1a1) [ 81.717010] binder: 13523:13535 ioctl 40046207 0 returned -16 [ 81.718552] binder_alloc: 13522: binder_alloc_buf, no vma [ 81.718577] binder: 13532:13540 transaction failed 29189/-3, size 0-0 line 2957 [ 81.718733] binder_alloc: 13522: binder_alloc_buf, no vma [ 81.718754] binder: 13523:13546 transaction failed 29189/-3, size 0-0 line 2957 [ 81.725967] binder: undelivered TRANSACTION_ERROR: 29189 [ 81.800176] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/14 21:59:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba104", 0x8) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:21 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x3)='/dev/kvm\x00', 0x502ed115b2d9a5ae, 0x0) ftruncate(r0, 0x40102) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/rfkill\x00', 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) r2 = socket$kcm(0x29, 0x802, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002000)='/dev/cuse\x00', 0x2, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f000099b000)=0x0) dup3(r3, r2, 0x0) sendfile(r2, r0, &(0x7f0000b7a000)=0x0, 0x1fffffffe2) 2018/01/14 21:59:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00002ff000-0xb)='/dev/mixer\x00', 0x40000000000000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000586000-0x4)=0x3) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000331000-0x48)={0x4, 0x10001, [{0x0, 0x0, 0x1}, {0x32, 0x0, 0x792}, {0x2, 0x0, 0x2}, {0x3, 0x0, 0x9}]}) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f0000e44000-0x32)=""/50) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00004eb000-0x20)={@common='bridge0\x00', @ifru_addrs={0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x16}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000826000-0x4)=0x0) 2018/01/14 21:59:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000034c000)='/selinux/member\x00', 0x2, 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000557000-0x4)=0x6) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00004f8000-0xb)='/dev/audio\x00', 0x400000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000425000)={0x44f, 0x3ef, &(0x7f0000e02000)="ce8698f094b44210138a2b60886ae665fd22d12f7375c318166595a366d413fe54741ee0a2dfc1f9760e8ec0e6f298ca4bcf7852ea31a2924cb02e2512bab0135a322573288371049aba275bcf4233e32241cdd951954dc676ebc2901420b14288652dc28402c14306589e587d8408f0884321a423acb0710daa5d1720015de43dab59c3ae91f98ca84b5681c15496608ef530bf9f570242516d140502a9e139d9c9feee84f2", &(0x7f00005a4000)="8ceb47a3c38e3fedd37624d60a1be9fd28cfa765286ae8200c6513ff7c014ca48b5ec229056b6b0cc6aa8859b0f298377d5f5b9c14c14b64cba154d30ac912940dcd76eee1c3d22f5a4e24485397a5214300e809b6239ff55609ddfbabfbc22a983447bf4ece36ff048ba2204be8551e2e5c919ab03208aa821bed487fe0ad9f2740b56c7e8563d016f2ad2ab1202420", 0xa6, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) r3 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) r4 = epoll_create(0x4000000010011) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000337000-0xc)={0x2019, 0x0}) dup3(r2, r4, 0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000009000-0x30)={0x4, 0x0, &(0x7f000000a000)=[@register_looper={0x630b}], 0x0, 0x0, &(0x7f000000b000-0x4)=""}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) 2018/01/14 21:59:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba104", 0x8) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 81.829728] binder: 13574:13578 BC_ACQUIRE_DONE u0000000000000000 no match [ 81.832852] binder: BINDER_SET_CONTEXT_MGR already set 2018/01/14 21:59:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba104", 0x8) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x200000002, 0x0) sendto$inet6(r0, &(0x7f00005e2000)="", 0x0, 0x0, &(0x7f0000b71000-0x1c)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0}, 0x1c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00009e6000)='/dev/ppp\x00', 0x20041, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000a57000)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f00003bd000-0xc)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000176000-0x10)={r2, r3, 0x5}) 2018/01/14 21:59:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000547000-0x9)='/dev/kvm\x00', 0x220000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000139000-0x68)={0x7b, 0x0, [0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000632000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @irqchip={0x0, 0x0}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f000044e000)={0x0, 0x403}) 2018/01/14 21:59:21 executing program 6: mmap(&(0x7f0000000000/0xf85000)=nil, 0xf85000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt(r0, 0x0, 0x6, &(0x7f000008c000)="cbd8b401a7ebb3c79aa21a87179ffcb7e359f66cf0eb622871bb0794d6c0df93fed69a21484fbc17b2bf41573f858760c01785764be0d91605c9b1fd7bd547fa224a1771fa1f57b5b9b71f5a65685a8cf56339ae93b0228d5c358400ae9bcdcdec95456eac9be9c890eb2774cb08e5d651c7b2c9ab0cf65f3293be58e3098a178eed42e990f34318091f7660b0429a64d869d88c0303239efca338654e10dd528c67b8bef7e95bc47d3721a35a72c78e82cb18ab1eb2", 0xb6) write(r0, &(0x7f0000b59000-0x24)="24000000190025d0471c1f24fffffc0e0200000000100000000040ea0800060000002ae0", 0x24) 2018/01/14 21:59:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 81.832862] binder: 13575:13583 ioctl 40046207 0 returned -16 [ 81.843932] binder: 13577:13584 BC_ACQUIRE_DONE node 197 has no pending acquire request [ 81.843950] binder: 13577:13584 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 81.843963] binder: 13577:13584 BC_FREE_BUFFER u0000000000000000 no match [ 81.843974] binder: 13577:13584 BC_INCREFS_DONE node 197 has no pending increfs request [ 81.843993] binder: 13577:13584 Release 1 refcount change on invalid ref 2 ret -22 [ 81.844005] binder: 13577:13584 unknown command 0 [ 81.844044] binder: 13577:13584 ioctl c0306201 208fdfd0 returned -22 [ 81.850063] binder: 13575:13583 BC_ACQUIRE_DONE u0000000000000000 no match [ 81.850073] binder: 13575:13583 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 81.850088] binder: 13575:13583 BC_FREE_BUFFER u0000000000000000 no match [ 81.850099] binder: 13575:13583 BC_INCREFS_DONE u0000000000000000 no match [ 81.850157] binder: 13575:13583 Release 1 refcount change on invalid ref 2 ret -22 [ 81.850164] binder: 13575:13583 unknown command 0 [ 81.850239] binder: 13575:13583 ioctl c0306201 208fdfd0 returned -22 [ 81.915968] binder: 13600:13604 ERROR: BC_REGISTER_LOOPER called without request [ 81.935987] binder: release 13575:13583 transaction 199 out, still active [ 81.935993] binder: undelivered TRANSACTION_COMPLETE [ 81.938184] binder: release 13577:13584 transaction 198 out, still active [ 81.938191] binder: undelivered TRANSACTION_COMPLETE [ 81.938217] binder: send failed reply for transaction 198, target dead [ 81.938226] binder: send failed reply for transaction 199, target dead [ 81.953770] binder: BINDER_SET_CONTEXT_MGR already set [ 81.953782] binder: 13600:13604 ioctl 40046207 0 returned -16 [ 81.953821] binder: 13600:13613 ERROR: BC_REGISTER_LOOPER called without request [ 81.964670] binder: release 13600:13604 transaction 201 out, still active [ 81.964713] binder: undelivered TRANSACTION_COMPLETE [ 81.964838] binder: send failed reply for transaction 201, target dead [ 81.980133] binder: 13618:13620 BC_ACQUIRE_DONE node 202 has no pending acquire request [ 81.980152] binder: 13618:13620 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 81.980166] binder: 13618:13620 BC_FREE_BUFFER u0000000000000000 no match [ 81.980181] binder: 13618:13620 BC_INCREFS_DONE node 202 has no pending increfs request [ 81.980201] binder: 13618:13620 Release 1 refcount change on invalid ref 2 ret -22 [ 81.980209] binder: 13618:13620 unknown command 0 [ 81.980221] binder: 13618:13620 ioctl c0306201 208fdfd0 returned -22 [ 82.033452] binder: release 13618:13620 transaction 203 out, still active [ 82.033458] binder: undelivered TRANSACTION_COMPLETE 2018/01/14 21:59:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376", 0xc) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000992000-0x10)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000069000-0x4)=0x0, &(0x7f000098c000-0x4)=0x1c0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000028000-0x9)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000885000)='cgroup\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x772, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r5, 0x0) connect$unix(r4, &(0x7f000000e000)=@file={0x1, './file0\x00'}, 0xa) writev(r4, &(0x7f0000c74000-0x20)=[{&(0x7f0000ce1000-0x3b)="f0", 0x1}], 0x1) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f000065d000)={0x1, 0x0, [{0x48c, 0x0, 0xfffffffffffffffc}]}) r7 = getpgid(0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00006e6000-0x4)=0x0) kcmp$KCMP_EPOLL_TFD(r7, r8, 0x7, r0, &(0x7f0000b64000-0xc)={r3, r0, 0x6}) 2018/01/14 21:59:21 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000-0x20)={{&(0x7f0000be7000/0x4000)=nil, 0x4000}, 0x2, 0x0}) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000004000-0x10)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0xa, &(0x7f0000004000-0x4)=0x0, &(0x7f0000004000-0x4)=0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x0, 0x0}) socket$llc(0x1a, 0x1, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1, 0x0}) link(&(0x7f0000011000)='./file0\x00', &(0x7f0000002000)='./file0\x00') mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x2, 0x32, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000b26000)="", &(0x7f0000eaa000-0x4)=0x0, &(0x7f000039b000)=0x0, &(0x7f0000bda000)="") ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f00000c1000-0x10)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/01/14 21:59:21 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000de1000)='/dev/autofs\x00', 0x1, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00001e1000-0x8)={0x0, 0x0}) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x200000000000a, &(0x7f0000425000)=0x0, 0x4) 2018/01/14 21:59:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:21 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000bea000-0x8)='keyring\x00', &(0x7f0000660000-0x5)={0x73, 0x79, 0x7a, 0x1, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$dmmidi(&(0x7f000091a000)='/dev/dmmidi#\x00', 0x1, 0x800) syz_open_dev$binder(&(0x7f000077c000)='/dev/binder#\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f000047e000-0x8)={0x0, 0x0}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r3 = add_key$keyring(&(0x7f0000eac000)='keyring\x00', &(0x7f0000001000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x0, 0x0, r0) r4 = add_key$user(&(0x7f0000176000)='user\x00', &(0x7f00009d6000-0x5)={0x73, 0x79, 0x7a, 0x0, 0x0}, &(0x7f000003e000)="fa", 0x1, r3) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00009ec000-0xe8)={{{@in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, @in=@dev={0x0, 0x0, 0xffffffffffffffff, 0x0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, {{@in6=@mcast1={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0}, 0x0, @in6=@mcast2={0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, &(0x7f00000b4000)=0xe8) keyctl$get_persistent(0x16, r5, r0) r6 = add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000753000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f0000f29000-0x1000)="b33ab76079ebe0d94f729cd653e520c19ad7d97fe21769e7c4db44c249b544230ba287fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd640b336616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea52246bd3d32b1a91f944edb74b1f50ae08c5387ed8fd0598b600579f3af3f864e1c324f6928f6672f98f7e149be31bd78b506e8b", 0xc0, r3) keyctl$dh_compute(0x17, &(0x7f00004c9000-0xc)={r4, r6, r4}, &(0x7f00000fc000)=""/54, 0x36, &(0x7f000040c000-0x2c)={&(0x7f000024f000)={'crct10dif-generic\x00'}, &(0x7f00004e3000-0x40)="", 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/14 21:59:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000584000)={0x1, &(0x7f00004f5000-0x8)=[{0x6, 0x0, 0x0, 0x8}]}) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000a71000-0x10)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00006ed000-0x1a)={0xffffffffffffffff, 0x0, 0x9, 0x100000000, 0x9, 0x100, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 82.033484] binder: send failed reply for transaction 203, target dead [ 82.218369] binder: 13574:13578 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 82.225779] binder: 13574:13578 BC_FREE_BUFFER u0000000000000000 no match [ 82.232751] binder: 13574:13578 BC_INCREFS_DONE u0000000000000000 no match [ 82.239799] binder: 13574:13578 Release 1 refcount change on invalid ref 2 ret -22 [ 82.247536] binder: 13574:13578 unknown command 0 [ 82.252416] binder: 13574:13578 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376", 0xc) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376", 0xc) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 82.297330] binder: 13630:13635 BC_ACQUIRE_DONE node 204 has no pending acquire request [ 82.302086] binder: 13633:13637 BC_ACQUIRE_DONE u0000000000000000 no match [ 82.302097] binder: 13633:13637 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 82.302111] binder: 13633:13637 BC_FREE_BUFFER u0000000000000000 no match [ 82.302123] binder: 13633:13637 BC_INCREFS_DONE u0000000000000000 no match [ 82.302136] binder: 13633:13637 Release 1 refcount change on invalid ref 2 ret -22 [ 82.302143] binder: 13633:13637 unknown command 0 2018/01/14 21:59:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa", 0xe) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 82.302155] binder: 13633:13637 ioctl c0306201 208fdfd0 returned -22 [ 82.339633] binder: BINDER_SET_CONTEXT_MGR already set [ 82.339644] binder: 13646:13648 ioctl 40046207 0 returned -16 [ 82.347915] binder: 13646:13648 BC_ACQUIRE_DONE u0000000000000000 no match [ 82.347925] binder: 13646:13648 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 82.347939] binder: 13646:13648 BC_FREE_BUFFER u0000000000000000 no match [ 82.347951] binder: 13646:13648 BC_INCREFS_DONE u0000000000000000 no match 2018/01/14 21:59:21 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x12) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000219000-0x17)='/selinux/validatetrans\x00', 0x1, 0x0) r2 = getpid() openat$pfkey(0xffffffffffffff9c, &(0x7f0000c6f000)='/proc/self/net/pfkey\x00', 0x10082, 0x0) ptrace$getenv(0x4201, r2, 0x1, &(0x7f0000e75000)=0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00004f5000-0xa0)={0x0, @in={{0x2, 0x3, @remote={0xac, 0x14, 0x0, 0xbb}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x3, 0x0, 0x4, 0x800, 0x6}, &(0x7f00001a8000)=0xa0) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00001d6000)={r3, 0x80000000, 0x81, 0xfff}, &(0x7f000033d000)=0x10) syz_open_dev$sndseq(&(0x7f00008b4000-0xd)='/dev/snd/seq\x00', 0x0, 0x200000) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000eec000-0x4)=r2) writev(r0, &(0x7f000037d000)=[{&(0x7f000019a000-0x1f)="1f00000002031900000007000000068100ed3b8509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f0000cae000-0x10)=[{&(0x7f000052f000-0x1f)="1f000000020319000000070000000680e2ed3b85090002000000000302fe58", 0x1f}], 0x1) [ 82.347964] binder: 13646:13648 Release 1 refcount change on invalid ref 2 ret -22 [ 82.347972] binder: 13646:13648 unknown command 0 [ 82.347982] binder: 13646:13648 ioctl c0306201 208fdfd0 returned -22 [ 82.412326] binder: 13630:13635 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 82.413119] binder: BINDER_SET_CONTEXT_MGR already set [ 82.413128] binder: 13655:13657 ioctl 40046207 0 returned -16 [ 82.427104] binder: 13655:13657 BC_ACQUIRE_DONE u0000000000000000 no match [ 82.427116] binder: 13655:13657 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 82.427130] binder: 13655:13657 BC_FREE_BUFFER u0000000000000000 no match [ 82.427141] binder: 13655:13657 BC_INCREFS_DONE u0000000000000000 no match [ 82.427155] binder: 13655:13657 Release 1 refcount change on invalid ref 2 ret -22 [ 82.427161] binder: 13655:13657 unknown command 0 [ 82.427171] binder: 13655:13657 ioctl c0306201 208fdfd0 returned -22 [ 82.494297] binder: 13661 RLIMIT_NICE not set [ 82.498962] binder: 13661 RLIMIT_NICE not set [ 82.516107] binder: 13630:13635 BC_FREE_BUFFER u0000000000000000 no match [ 82.524408] binder: 13630:13635 BC_INCREFS_DONE node 204 has no pending increfs request [ 82.533110] binder: 13630:13635 Release 1 refcount change on invalid ref 2 ret -22 [ 82.541069] binder: 13630:13635 unknown command 0 2018/01/14 21:59:21 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a09000)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x800d) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000cfd000-0x20)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_flags=0x200}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c3c000-0xc)={0x0, 0x0}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000503000)=0x4062) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000fde000-0x1)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f00002dd000)={0x1ca, 0x8, 0x10000000, 0x2b1d, 0x1, 0x401, 0x1, 0x1, 0x6, 0x8f8, 0x6, 0xb9}) ioctl$TCFLSH(r2, 0x540b, 0x2) 2018/01/14 21:59:21 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3f, &(0x7f0000003000-0x1000)="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", 0x12d) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, {0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x5c) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000730000)={0x0, 0x0}) ioctl(r0, 0x9, &(0x7f0000115000-0x24)="c4dab577a02009ed66a537cd09d647e02a5b2446af26c719dbc6290746403ba5c184812d") setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x8, 0x0, 0x0}, 0x14) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x40, &(0x7f0000001000+0xfde)=0x0, 0x4) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000350000)='/dev/mixer\x00', 0x800, 0x0) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f00004db000)=0x7, 0x4) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000a1e000-0x8)={0x0, 0x0, 0x0, 0x0}, &(0x7f000098a000)=0xffffffd7) signalfd4(r3, &(0x7f0000c9c000)={0x4}, 0x8, 0x80800) 2018/01/14 21:59:21 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:21 executing program 3: r0 = syz_open_dev$audion(&(0x7f0000ae0000)='/dev/audio#\x00', 0x7, 0x4000) accept$ipx(r0, 0x0, &(0x7f0000bcb000-0x4)=0x0) shmat(0x0, &(0x7f0000d48000/0x1000)=nil, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) msync(&(0x7f000042c000/0x2000)=nil, 0x2000, 0x7) sigaltstack(&(0x7f0000ae9000/0x3000)=nil, 0x0) 2018/01/14 21:59:21 executing program 7: mmap(&(0x7f0000000000/0xca5000)=nil, 0xca5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000004000)={&(0x7f0000004000-0xc)={0x10, 0x0, 0x0, 0x0}, 0xc, &(0x7f0000005000-0x10)={&(0x7f0000003000-0x1238)=@newsa={0x154, 0x1a, 0x1, 0x0, 0x0, {{@in6=@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {@in6=@mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x0, 0x33}, @in=@multicast2=0xe0000002, {0x0, 0xffffffffffffff80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, 0x0, 0x0, 0xa, 0xfffffffffffffffe, 0x0, 0x0}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbb}}}, @algo_auth={0x48, 0x1, {{'digest_null\x00'}, 0x0, ""}}]}, 0x154}, 0x1, 0x0, 0x0, 0x0}, 0x0) 2018/01/14 21:59:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f000000e000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) write$sndseq(r0, &(0x7f000082d000-0xc0)=[], 0x2082cf40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000002c000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00007bc000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000623000)=[{r1, 0x57d9, 0x0}], 0x2000000000000263, 0x7ff) ioctl$int_in(r3, 0x5452, &(0x7f0000009000-0x8)=0x3f) recvfrom(r4, &(0x7f0000013000-0x8d)=""/0, 0x0, 0x0, &(0x7f0000013000-0x10)=@sco={0x1f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x8) fcntl$setown(r3, 0x8, r2) fcntl$setsig(r3, 0xa, 0x12) dup2(r1, r4) tkill(r2, 0x16) recvmmsg(r3, &(0x7f0000057000)=[{{&(0x7f0000513000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14, &(0x7f0000162000-0x10)=[{&(0x7f000065d000)=""/102, 0x66}], 0x1, &(0x7f0000b07000-0xe6)=""/230, 0xe6, 0x9}, 0x8}, {{&(0x7f0000cf9000-0x10)=@nfc={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f0000d36000-0x30)=[{&(0x7f0000bfe000)=""/195, 0xc3}, {&(0x7f0000edf000)=""/4096, 0x1000}, {&(0x7f0000013000)=""/158, 0x9e}], 0x3, &(0x7f00001c4000-0x95)=""/149, 0x95, 0xdb5}, 0x7}, {{&(0x7f0000042000-0x10)=@can={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f00003c7000)=[{&(0x7f0000ab3000-0xbf)=""/191, 0xbf}, {&(0x7f00006bd000)=""/4096, 0x1000}, {&(0x7f0000faf000-0xcf)=""/207, 0xcf}, {&(0x7f0000358000)=""/188, 0xbc}, {&(0x7f000089b000-0x51)=""/81, 0x51}, {&(0x7f0000154000-0x38)=""/56, 0x38}, {&(0x7f00001e3000-0x1000)=""/4096, 0x1000}, {&(0x7f0000566000-0xe2)=""/226, 0xe2}, {&(0x7f0000923000-0x2f)=""/47, 0x2f}], 0x9, 0x0, 0x0, 0x2}, 0x4}, {{&(0x7f000029c000-0xe)=@l2={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0}, 0xe, &(0x7f00002e4000-0x20)=[{&(0x7f0000b3d000-0x8f)=""/143, 0x8f}, {&(0x7f00004ef000-0xa0)=""/160, 0xa0}], 0x2, &(0x7f0000073000)=""/189, 0xbd, 0x33a}, 0x80000000}, {{&(0x7f00004a5000)=@generic={0x0, ""/126}, 0x80, &(0x7f0000ada000)=[{&(0x7f00006bd000)=""/13, 0xd}, {&(0x7f0000fbd000-0x79)=""/121, 0x79}, {&(0x7f0000589000)=""/229, 0xe5}, {&(0x7f000033e000)=""/143, 0x8f}, {&(0x7f0000432000)=""/140, 0x8c}], 0x5, &(0x7f0000b67000)=""/25, 0x19, 0x8}, 0x1000}, {{&(0x7f0000b41000-0x58)=@alg={0x0, ""/14, 0x0, 0x0, ""/64}, 0x58, &(0x7f0000189000)=[{&(0x7f000065a000)=""/0, 0x0}, {&(0x7f000012e000)=""/62, 0x3e}], 0x2, &(0x7f000063c000)=""/227, 0xe3, 0x800000}, 0x9}, {{&(0x7f00001fe000)=@ax25={0x0, {""/7}, 0x0}, 0x10, &(0x7f00002ab000)=[{&(0x7f00008f0000-0x28)=""/40, 0x28}, {&(0x7f0000142000-0x48)=""/72, 0x48}], 0x2, &(0x7f0000a23000-0x95)=""/149, 0x95, 0x3e3}, 0x2}, {{&(0x7f0000ae2000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={[0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0x0}, [0x0, 0x0]}, 0x10, &(0x7f000040c000-0x80)=[{&(0x7f0000bbb000-0xa1)=""/161, 0xa1}, {&(0x7f00001b9000-0xcc)=""/204, 0xcc}, {&(0x7f00001f5000-0xcd)=""/205, 0xcd}, {&(0x7f0000689000-0xc)=""/12, 0xc}, {&(0x7f0000f6e000-0xe5)=""/229, 0xe5}, {&(0x7f000003b000-0x43)=""/67, 0x43}, {&(0x7f000082d000-0xd9)=""/217, 0xd9}, {&(0x7f0000ee4000-0xe2)=""/226, 0xe2}], 0x8, &(0x7f00000b1000)=""/68, 0x44, 0x0}, 0x8}], 0x8, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000760000-0x48)={0xf, 0x7, &(0x7f0000056000-0x38)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, [@generic={0xffffffff, 0x9, 0x80000001, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0xffffffffffff0000}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c7a000-0x4)='GPL\x00', 0x101, 0xac, &(0x7f0000fa3000-0xac)=""/172, 0x41000, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], r5}, 0x48) 2018/01/14 21:59:21 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, &(0x7f000033a000)={0x3, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa", 0xe) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 82.546898] binder: 13630:13635 ioctl c0306201 208fdfd0 returned -22 [ 82.566193] binder: release 13630:13635 transaction 205 out, still active [ 82.573214] binder: undelivered TRANSACTION_COMPLETE [ 82.578368] binder: release 13630:13661 transaction 205 in, still active [ 82.585247] binder: send failed reply for transaction 205, target dead 2018/01/14 21:59:21 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa", 0xe) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000692000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x80000) syz_open_dev$mice(&(0x7f000009d000-0x10)='/dev/input/mice\x00', 0x0, 0x2000) r1 = syz_open_dev$loop(&(0x7f000059b000-0xb)='/dev/loop#\x00', 0x4, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000606000)=""/184) [ 82.623267] binder: 13674:13678 BC_ACQUIRE_DONE node 206 has no pending acquire request [ 82.631612] binder: 13674:13678 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 82.647609] binder: BINDER_SET_CONTEXT_MGR already set [ 82.648687] binder: 13674:13678 BC_FREE_BUFFER u0000000000000000 no match 2018/01/14 21:59:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000d84000)='/dev/sg#\x00', 0x6, 0x42) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000181000+0x567)={0x0, 0x0, 0x0, {0x0, 0x0}, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f00007f4000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/32, [0x0, 0x0], 0x0}) ioctl$sock_ifreq(r0, 0x8922, &(0x7f0000008000-0x17)={@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, @ifru_mtu=0xc2a}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00004e6000-0x4)=0x0) r2 = add_key(&(0x7f00007f6000-0x12)='.request_key_auth\x00', &(0x7f00002de000-0x5)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f00002ee000)="1c18f68591975a4e46c590c503f3170d7bfa57ac8bbdfc2f98c18f56e3b840437f80faea9556e0cf26099cb374a54a819cebe9a3cc64431761716daafb33b2df1914e9049b2308940ae15dd27e96e7cd7d0aece6e5247528eb112b72963ef426ea606b2443df1e11cd4a63da811bbd7f7b5c8cec0dde1021c38966ca83f5e93c06e14bb15738636185de3c904b86170949d7f7530114bdc59ee2f7354adc73f1eff1f20d4d5a99a903d2cf6309b524325617c2c67c0332e82d0cf58a6e2bc0faa0f59fd65510f845add9a708212951f96aa806ee426407f767ca91e6ce6829584b4bee93152d", 0xe6, 0xfffffffffffffffc) r3 = request_key(&(0x7f0000246000)="0300676f6e00ad3b528d8787a8e886e88812cfbaf9eeea9d81a782a8f126238b6f0b2f474e328fdf453b8877f9393c5f20815c5718", &(0x7f0000b5d000)={0x73, 0x79, 0x7a, 0x2, 0x0}, &(0x7f0000abe000-0x12)='.request_key_auth\x00', 0xfffffffffffffffb) r4 = add_key(&(0x7f0000d63000-0x5)='ceph\x00', &(0x7f0000f48000-0x5)={0x73, 0x79, 0x7a, 0x3, 0x0}, &(0x7f00003b3000-0x59)="b0bf13fffe720f4dcfd47b88a7961865979521a3971ae0a7562d2e0b125568ced99199ca98413cf95e0d680e586a1b3333be2b14543675910217512b9a414c3ff4f6fad28f05ad2bfb6669275cd74aa0f06a7a4f9cc6ba8e8c", 0x59, 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000c3c000-0xc)={&(0x7f00007b1000-0x14)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) keyctl$dh_compute(0x17, &(0x7f00008c5000)={r2, r3, r4}, &(0x7f0000fa7000)=""/207, 0xcf, &(0x7f0000a8a000)={&(0x7f0000287000)={'rmd128-generic\x00'}, &(0x7f0000ba7000-0xa5)="2028cd02edac33a21e18137771faca15749d90158365c96055100ca1080f90b297bf26a783ec3aa46b270b585612f099ceda005d8a738b8c391491795a60624b22563d975233259141915522fbdf87823196bc337fde2f93014920ecffea7c3ff6dfc664ad7dfe3f403654ccef1a16216a2b94c30ca004ee09e37ddbdb21acbf86521537b07ff4f4cc5f74cc0f2d0486d9ee299a551c8ff21bbfc71e69fed22b395dd88b6b", 0xa5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2018/01/14 21:59:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt(r0, 0x400000000114, 0x6, &(0x7f0000001000)="034b0007", 0x4) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dc000-0x4)=0x0, 0x4) bind$inet(r1, &(0x7f0000856000)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x34c) sendto$inet(r1, &(0x7f0000ea8000)="a5", 0x1, 0x0, &(0x7f0000dfd000-0x10)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) sendto$inet(r1, &(0x7f0000fc3000-0x1000)="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", 0x480, 0x0, &(0x7f000069b000-0x5)={0x2, 0x0, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) 2018/01/14 21:59:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000dde000-0x5)=""/5, &(0x7f00007fa000)=0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00009f7000-0x10)=@syzn={0x73, 0x79, 0x7a, 0x0, 0x0}, 0x10) setsockopt(r1, 0x54, 0x6, &(0x7f000024c000)="05a9af2fd70882f2caf38fc896bc9f6567fa240344829aaa2521f7b80e5aa4fa0c5c2f881df54f2e0b34151fecebeb9d8268ab3e8ad7766346261001935776cbbcef3038c0e168d8fcc0e15c3db2275fa6d936c7a2e753d029fdff1d2d9a244d602ad5fd6f4aec06e2a85cb9782f9b7bb2fa872561d17ce893bb596ad18b627185", 0x23b) setsockopt$inet_tcp_int(r2, 0x6, 0x13, &(0x7f00003a5000-0x4)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f000027c000+0x521)=0xffffffffffffffff, 0x4) shutdown(r2, 0x0) bind$inet(r2, &(0x7f0000517000-0x10)={0x2, 0x1, @multicast2=0xe0000002, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000440000-0x8)={0x0, 0x401}, &(0x7f0000620000)=0x8) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000a3e000-0xb)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f000087b000)={0x8000, 0x400, 0x8, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x81, 0x2, 0x997, 0x21, "6d26fceeec75d8a9ab484826c925064f", [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$EVIOCGLED(r4, 0x80404519, &(0x7f00003ba000)=""/0) ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000dc6000)={0x3, 0xb12}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000fbe000)={r3, 0x7}, &(0x7f000092f000+0x2d4)=0x8) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000d85000)={0x0, 0x0}) r5 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000aa0000-0xd)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000414000)={0x0, 0x9}, &(0x7f0000b6a000-0x4)=0x6) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f000043a000-0xc)=@sack_info={r6, 0xffffffffffffffe1, 0x0}, 0xc) pipe(&(0x7f000080d000)={0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000e8d000)={0x12, 0x2, 0x9, 0x1, 0x0}, &(0x7f00002aa000)=0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00004d9000-0x14)={r8, 0x0, 0x5, 0x7, 0x100, 0x7}, &(0x7f00001c4000-0x4)=0x14) sendto$inet(r2, &(0x7f0000589000-0x1)="", 0x0, 0x20020003, &(0x7f0000386000-0x10)={0x2, 0x1, @loopback=0x7f000001, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r4, 0x800443d2, &(0x7f000049b000)={0x1, &(0x7f00005ca000)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0x0}]}) sendto$inet(r2, &(0x7f0000728000-0xae)="38a6e18892977cbefcf729b291ec5a6f5af21b106cd37b516b9f1b4c0b445d113ce74ff8816d897fd9d79ffb80864a678d827cce332f4a08d6275a48f681f9423d2647749f79c08271a56c9892d7d8a78b96748cf077b46523b741751eb2d1f841837cc94e9218d23f92540b2ecc050f1f39d1bfe6f8808021c41b059a0ed0c0a4270caf566a7dca03a350cca55b1053c92653956a78be04435c5bbfcc45ca52f2d3e9f8739ffbea6ea5f54868ae", 0xae, 0x7d, &(0x7f0000bf7000)={0x2, 0x3, @local={0xac, 0x14, 0x0, 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00004e8000)={0x0, 0x20000000012c6, 0x10001, 0x0, 0x0}, 0x14) shutdown(r2, 0x1) 2018/01/14 21:59:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d", 0xf) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 82.648704] binder: 13674:13678 BC_INCREFS_DONE node 206 has no pending increfs request [ 82.648722] binder: 13674:13678 Release 1 refcount change on invalid ref 2 ret -22 [ 82.648730] binder: 13674:13678 unknown command 0 [ 82.648741] binder: 13674:13678 ioctl c0306201 208fdfd0 returned -22 [ 82.733673] binder: 13679:13705 BC_ACQUIRE_DONE u0000000000000000 no match 2018/01/14 21:59:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000975000)='/dev/vcs#\x00', 0x37c, 0x22240) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000de8000)=0x9bee, &(0x7f000046d000-0x8)=0x4) r1 = socket(0x5, 0x1000000802, 0x0) write(r1, &(0x7f00005f3000)="240000001a0025f0006bb40400000009020b00ff0010b500001000eb080002007fffe5b7", 0x24) 2018/01/14 21:59:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d", 0xf) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000e03000-0x8)='keyring\x00', &(0x7f000008a000-0x5)={0x73, 0x79, 0x7a, 0xffffffffffffffff, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000485000)='/selinux/access\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000c91000)={0x0, 0x0, 0x100000001}, &(0x7f0000e26000-0x4)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f000072d000)={r2, 0x8, 0x30}, &(0x7f0000d45000-0x4)=0xc) 2018/01/14 21:59:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000657000)='/selinux/user\x00', 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000cbe000)=0x0) connect$nfc_raw(r0, &(0x7f00008e6000-0x10)={0x27, 0x477, 0x3, 0x7}, 0x10) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x968, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00002ac000)={0x9, 0x0, 0x10000, 0x6}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000d8d000-0x20)={0xb28f, r1, 0x0, 0x81}) setrlimit(0x7, &(0x7f0000b2f000)={0x0, 0x0}) pipe(&(0x7f000086b000)={0x0, 0x0}) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000422000)='tls\x00', 0x4) connect$bt_l2cap(r0, &(0x7f0000d2c000)={0x1f, 0xa144, {0x39ab2415, 0x5, 0x2000000000000000, 0x95, 0x1, 0x2}, 0x20, 0x7}, 0xe) 2018/01/14 21:59:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d", 0xf) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 82.733685] binder: 13679:13705 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 82.733698] binder: 13679:13705 BC_FREE_BUFFER u0000000000000000 no match [ 82.733711] binder: 13679:13705 BC_INCREFS_DONE u0000000000000000 no match 2018/01/14 21:59:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000710000-0x1d)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x20) socket$netlink(0x10, 0x3, 0xd) sendto$inet6(r0, &(0x7f00009a1000-0x1)="", 0x0, 0x20000001, &(0x7f0000764000)={0xa, 0x0, 0x1f, @loopback={0x0, 0x1}, 0x5000}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f000047d000-0x4)=0x0, &(0x7f0000a45000-0x4)=0x4) 2018/01/14 21:59:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 82.733724] binder: 13679:13705 Release 1 refcount change on invalid ref 2 ret -22 [ 82.733732] binder: 13679:13705 unknown command 0 2018/01/14 21:59:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x10, &(0x7f0000ef1000-0xc0)="18000000020001000000be8c5ee18c883600003f0000000000000000988a3cdcc3f7b933c598055bf74852bb6a8807567f59dba67e1947b3550400000067a1e1e20067fc2163e000000000000003ff1f00000000000000c88ebbff060100000b00090000b121ec1474d733f542000700ec008bc5cfb7ebe7ec7ee87cccfffbba000000024f0298e9e9f55406aa0110ddfdff030100000000d791a2ffe3c5632c1adb8a335bd8b2d17fdea21b571068393d22b5affa00041ad0b4d2c23eef6795", 0xc0) getpeername$inet(r0, &(0x7f0000b49000-0x10)={0x0, 0xffffffffffffffff, @broadcast=0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000395000-0x4)=0x10) [ 82.733743] binder: 13679:13705 ioctl c0306201 208fdfd0 returned -22 [ 82.734983] binder: 13705 RLIMIT_NICE not set [ 82.790399] binder: 13707:13716 BC_ACQUIRE_DONE u0000000000000000 no match [ 82.790410] binder: 13707:13716 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 82.790421] binder: 13707:13716 BC_FREE_BUFFER u0000000000000000 no match [ 82.790430] binder: 13707:13716 BC_INCREFS_DONE u0000000000000000 no match [ 82.790443] binder: 13707:13716 Release 1 refcount change on invalid ref 2 ret -22 [ 82.790449] binder: 13707:13716 unknown command 0 [ 82.790459] binder: 13707:13716 ioctl c0306201 208fdfd0 returned -22 [ 82.927608] binder_alloc: 13674: binder_alloc_buf, no vma [ 82.933796] binder: 13679:13698 transaction failed 29189/-3, size 0-0 line 2957 [ 82.941346] binder: 13679:13682 ioctl 40046207 0 returned -16 2018/01/14 21:59:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:22 executing program 7: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000eaa000)='./bus\x00', 0x141052, 0x0) ftruncate(r0, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000eeb000-0xa)='/dev/ptmx\x00', 0x840000000000801, 0x0) sendfile(r1, r0, &(0x7f00000d1000-0x8)=0x0, 0x8000fffffffe) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000a9d000-0x4)=0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00004b9000)={0x100000000, 0x8, 0x9, 0x2, 0x10001, 0x4, 0x80000001, 0x9, 0x9, 0x9, 0x200, 0xfff}) 2018/01/14 21:59:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:22 executing program 6: mmap(&(0x7f0000000000/0xac4000)=nil, 0xac4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00005d5000-0x10)='coredump_filter\x00') readv(r0, &(0x7f0000232000-0x10)=[{&(0x7f0000ac6000-0x1)=""/1, 0x1}], 0x1) 2018/01/14 21:59:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000161000)={0x0, 0x1c, &(0x7f000051a000-0x58)=[@in6={0xa, 0xffffffffffffffff, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, 0x5}]}, &(0x7f0000f92000-0x4)=0xfffffffffffffd67) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000903000)={0x1, 0x5, &(0x7f000051a000-0x58)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, [@ldst={0x2, 0x0, 0xb, 0x7a, 0x0, 0xffffffb0, 0x0}], {0x95, 0x0, 0x0, 0x0}}, &(0x7f0000c43000)='syzkaller\x00', 0xfffffffffffffffa, 0x1000, &(0x7f00009ab000)=""/4096, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x48) r1 = socket(0x10, 0x3, 0x0) recvfrom$llc(r1, &(0x7f0000a32000-0xae)=""/174, 0xae, 0x60, &(0x7f00005b0000)={0x1a, 0xfe, 0x6, 0x5, 0x101, 0x1, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x10) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00009da000)=r0, 0x4) write(r1, &(0x7f0000fd3000)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) 2018/01/14 21:59:22 executing program 0: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000001000-0x8)='./file0\x00', 0x80, 0x20) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)=""/4096) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000d60000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000002000-0xc6)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r3 = accept$alg(r1, 0x0, 0x0) r4 = dup(r3) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000fd000-0x4)=0x0) syz_open_procfs(r5, &(0x7f00001c0000)='net/sctp\x00') sendto$packet(r4, &(0x7f0000749000)="c35d5afc8cf16fb70f9bbdc11aa2d0ad", 0x10, 0x20048800, &(0x7f0000b72000-0x14)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @empty=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0x0, 0x0]}, 0x14) sendmsg$alg(r3, &(0x7f0000e95000-0x38)={0x0, 0x0, &(0x7f00001c2000-0x10)=[], 0x0, &(0x7f0000885000-0xa8)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x0}, 0x0) recvmsg(r3, &(0x7f0000b2f000)={&(0x7f00008e8000)=@nfc={0x0, 0x0, 0x0, 0x0}, 0x10, &(0x7f0000031000-0x60)=[{&(0x7f0000589000-0x8d)=""/141, 0x8d}], 0x1, &(0x7f0000590000)=""/0, 0x0, 0x0}, 0x0) 2018/01/14 21:59:22 executing program 3: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000919000)=0x10000001) openat$rtc(0xffffffffffffff9c, &(0x7f00008c6000-0x9)='/dev/rtc\x00', 0x400000, 0x0) shutdown(r1, 0x80000000002) 2018/01/14 21:59:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x0, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 82.956210] binder: undelivered TRANSACTION_ERROR: 29189 2018/01/14 21:59:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0xffffffffffffffff, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000c22000)='/dev/loop#\x00', 0x0, 0x2) r1 = memfd_create(&(0x7f000000a000)="74756e08000000000000008000000000", 0x0) pwritev(r1, &(0x7f00008b0000)=[{&(0x7f0000c14000-0x200)="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", 0x1b7}], 0x1, 0x49) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000088c000-0x8)=0x0, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00005bc000)=0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f000014a000-0xe8)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/64, ""/64, ""/32, [0x0, 0x0]}) getpriority(0x0, 0x0) sendfile(r2, r0, &(0x7f0000f3f000)=0x0, 0x100000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) syz_open_dev$vcsn(&(0x7f0000a2d000-0xa)='/dev/vcs#\x00', 0x0, 0x0) eventfd(0x4) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000bd9000)=0x3ff, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000dc2000)=0x0, 0x4) ioctl$KDMKTONE(0xffffffffffffffff, 0x4b30, 0x0) 2018/01/14 21:59:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) pwrite64(r0, &(0x7f0000fab000)="8276f0ef0ce3fe6b54df1f4c94949eb279c01f87729183e80275341eddc0f8043ba4cfaaf872c7c8884e07e57cc03638415e2fee1e1a03d2b3889a6dd3d7eb7d7c6fa82b1cc6369d0764bdff4f2b01efd7e74656a35e2e8aba712098f7b32fd6879ce5ca21b4d811a0907d3d8306975984ffd615f33a8040fb3ef76649e8ddcc9f2f4e31f993f9a1789d57e59c28a0eb1551bf9f7fbcb1bf1d6dba27a874ae14c8aab558fad74182d7bf99914e2a85de563bd35591e294677f95e87fc90d06843a3794c290af94bed04ce8e29d78e4acdfb8cf22506ba64cfd6934489e6949a58e02dab4f03cdbe3e98a30606b03baa1d2efa09d5cccdf0263b9bf05dc78", 0xfe, 0x0) bind$inet6(r0, &(0x7f0000187000-0x1c)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x0}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x75, &(0x7f0000474000)={0x0, 0x4}, 0x8) sendto$inet6(r1, &(0x7f0000310000-0x2)="e1", 0x1, 0x0, &(0x7f0000341000-0x1c)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x0}, 0x1c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f00007d9000)={0x0, 0x0, 0x0, []}, 0x107) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000526000)={0x0, 0x9, 0x0, 0x1, 0x100000000000000}, &(0x7f0000e86000-0x4)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00005aa000)={r2, 0x9, 0x67, "de413041790574a5c8595f5d265fc0c0c746b9d2a4a95f70ac3b0b949a9fb308471e9afd69182ee903b6f0e4b897b2db456ad167902b2b10dac85a5f7b5617548e7cd39d3cb58fbb8c0100f303019d1029c68644db9c6c82fdaf77b2b38d1a23d2f9f49bc64b47"}, 0x6f) [ 82.999790] binder: 13756:13760 BC_ACQUIRE_DONE node 209 has no pending acquire request [ 83.008148] binder: 13756:13760 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 83.018690] binder: BINDER_SET_CONTEXT_MGR already set [ 83.027559] binder: 13758:13762 ioctl 40046207 0 returned -16 [ 83.027613] binder: 13756:13760 BC_FREE_BUFFER u0000000000000000 no match [ 83.027625] binder: 13756:13760 BC_INCREFS_DONE node 209 has no pending increfs request [ 83.027639] binder: 13756:13760 Release 1 refcount change on invalid ref 2 ret -22 [ 83.027645] binder: 13756:13760 unknown command 0 [ 83.027655] binder: 13756:13760 ioctl c0306201 208fdfd0 returned -22 [ 83.055724] binder: 13758:13774 transaction failed 29189/-22, size 0-0 line 2842 2018/01/14 21:59:22 executing program 3: mmap(&(0x7f0000000000/0xaca000)=nil, 0xaca000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) sendto$inet6(r0, &(0x7f0000ab8000-0x1000)="97", 0x1, 0x0, &(0x7f0000ab8000)={0xa, 0xffffffffffffffff, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x1}, 0x1c) recvfrom$inet6(r0, &(0x7f0000aba000)=""/15, 0xf, 0x0, &(0x7f0000ac0000-0x1c)={0xa, 0xffffffffffffffff, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xaa}, 0x0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000abb000)={0x0, 0x0, 0x0, 0x800000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000abd000)=0x47bc7b3a, 0x4) shutdown(r0, 0x1) 2018/01/14 21:59:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0xffffffffffffffff, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000a83000)='/dev/sg#\x00', 0x5, 0x8000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000c34000)=0x0) pipe2(&(0x7f0000f32000)={0x0, 0x0}, 0x0) prctl$intptr(0x24, 0x806) 2018/01/14 21:59:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00001a0000)='/dev/vga_arbiter\x00', 0x20000000200400, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00009fe000-0x8)={0x0, 0x0, 0x0, 0x0}) r1 = socket(0xa, 0x3, 0x8000000000000ff) sendto$unix(r1, &(0x7f0000161000-0x33)="e390517a0d692c0000000000000003705fb30a0002b3724c7d655f8c5c5bc9d8c342a601d9119177", 0x28, 0x20000000000, &(0x7f0000000000)=@file={0x0, "0000007f0022ff02200c000000bcbb5b340100000000"}, 0x18) 2018/01/14 21:59:22 executing program 1: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000006000-0x2c)=[@acquire_done={0x40486311, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000002000)=""}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000009000-0x30)={0x0, 0x0, &(0x7f0000008000)=[], 0x1, 0x0, &(0x7f0000004000-0x4d)="a4"}) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f000033a000)={0x0, 0x0, 0x8}) r3 = semget$private(0x0, 0x3, 0x10) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f000058c000)=""/4096) r4 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r4, &(0x7f0000797000-0x8)=0x3, r0, &(0x7f0000554000-0x8)=0x0, 0x35d0, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000c000-0x30)={0x4, 0x0, &(0x7f0000003000-0x4)=[@enter_looper={0x630c}], 0x48, 0x0, &(0x7f0000006000)="0b84a3288b095e8385e903cd3f204328df77adf423094c0745f4bc7875abe665b85eff39c3ba4151d466ab216e457a599050dedabb89b6a8290a93adb5416539117e028431206e86"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:22 executing program 7: mmap(&(0x7f0000000000/0xe5e000)=nil, 0xe5e000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00003a8000-0x8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) mmap(&(0x7f0000e5e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000e5e000)={0x0, @loopback=0x0, @multicast2=0x0}, &(0x7f0000397000-0x4)=0xc) mmap(&(0x7f0000e5e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e5e000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) sendmsg$can_raw(r2, &(0x7f00005f7000)={&(0x7f0000e5e000)={0x1d, r3, 0x0, 0x0}, 0x10, &(0x7f0000e5f000-0x10)={&(0x7f0000786000-0x48)=@canfd={{0x1, 0x5, 0xfffffffffffffffe, 0x7fff}, 0xb, 0x0, 0x0, 0x0, "f652453a77201e5cd3ad8f1243d7173da6dac15732ecc3f12bc0bd73cb30304249bae27010710ff2a813751d3d617be9c5af644cd70c74ea148e311be3878219"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r4 = dup3(r1, r2, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f00006a0000-0x4)=0x5, 0x4) recvmsg$netrom(r4, &(0x7f0000e55000)={&(0x7f0000e5a000-0x10)=@ax25={0x6, {"61ad643fe24db4"}, 0x0}, 0x10, &(0x7f0000e55000)=[], 0x0, &(0x7f000035a000)=[], 0x0, 0x0}, 0x0) 2018/01/14 21:59:22 executing program 6: r0 = socket$inet_sctp(0x2, 0x5, 0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0, 0x0}, &(0x7f0000001000-0x4)=0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001000-0x10)={0x1, 0xf930658fd1385833, 0x25c, 0x1d80000000, r1}, 0x10) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000002000-0x12)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) fcntl$getflags(r0, 0x40a) ioctl(r2, 0x4148, &(0x7f0000006000-0x1f5)="") 2018/01/14 21:59:22 executing program 5: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_dev$binder(&(0x7f0000009000-0xd)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f000081a000-0x10)='/selinux/member\x00', 0x2, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f000058c000)=""/4096) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00008fe000-0x30)={0xfffffe07, 0x0, &(0x7f0000bb7000)=[@acquire_done={0x40106309, 0x0, 0x0}, @dead_binder_done={0x40086310, 0x4}, @free_buffer={0x40086303, 0x0}, @increfs_done={0x40106308, 0x0, 0x0}, @release={0x40046306, 0x2}], 0x2d, 0x0, &(0x7f00003a1000-0x2d)="6eba64a20b09000000d598a7511161da0d32299ea007b2557fe7c76548913b3749448b01eec62f7c5d0ca63b85"}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/01/14 21:59:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0xffffffffffffffff, 0x804, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) [ 83.064368] binder: 13773:13778 BC_ACQUIRE_DONE node 211 has no pending acquire request [ 83.064379] binder: 13773:13778 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 83.064388] binder: 13773:13778 BC_FREE_BUFFER u0000000000000000 no match [ 83.064397] binder: 13773:13778 BC_INCREFS_DONE node 211 has no pending increfs request [ 83.064410] binder: 13773:13778 Release 1 refcount change on invalid ref 2 ret -22 [ 83.064416] binder: 13773:13778 unknown command 0 [ 83.064425] binder: 13773:13778 ioctl c0306201 208fdfd0 returned -22 2018/01/14 21:59:22 executing program 6: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x0, &(0x7f0000405000-0xf0)="") ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000d51000-0x24)={0x0, 0x8, 0x851, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800, 0xc5}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f00006fa000-0x10)={0x77359400, 0x0}, 0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00004bd000)=@assoc_id=0x0, &(0x7f000032e000)=0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000559000)={0x0, 0x0}, 0x8) getcwd(&(0x7f0000cf8000-0xba)=""/186, 0xba) r0 = syz_open_dev$dmmidi(&(0x7f00009fc000-0xd)='/dev/dmmidi#\x00', 0x84b, 0x200) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000591000)={0x80000001, 0xe, 0xffffffffffffc723}) 2018/01/14 21:59:22 executing program 2: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x5, 0x7, 0x9, &(0x7f0000e8e000)={0x0, 0x0}) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00006db000)=""/91) perf_event_open(&(0x7f000025c000)={0x3, 0x2c4, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x1000000041, &(0x7f00008e2000-0x31)="958e392937a186d6306a3615593baa57ff0502060000000000079ab4d5ed5cff03000000000000ffff8dffff080cf4eacc49d4df311e370043159379595d0000000000000093bffffffeffbd03ba89734f4e49fda5060255", 0x58) 2018/01/14 21:59:22 executing program 4: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:22 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000acc000-0xf)='/dev/sequencer\x00', 0x0, 0x0) r0 = memfd_create(&(0x7f0000835000-0x5)='eth0\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000e3e000)='/dev/snd/seq\x00', 0x0, 0x0) lremovexattr(&(0x7f0000a78000)='./file0\x00', &(0x7f0000015000-0xa)=@random={'trusted.\x00', '\x00'}) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f000024e000-0x8c)={0x0, 0x0, 0x0, 'queue0\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 83.187368] binder: 13790:13793 BC_ACQUIRE_DONE node 212 has no pending acquire request [ 83.195676] binder: 13790:13793 BC_DEAD_BINDER_DONE 0000000000000004 not found [ 83.203659] binder: BINDER_SET_CONTEXT_MGR already set [ 83.210044] binder: 13792:13797 ioctl 40046207 0 returned -16 [ 83.225116] binder_alloc: 13790: binder_alloc_buf, no vma 2018/01/14 21:59:22 executing program 4 (fault-call:3 fault-nth:0): mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3b, &(0x7f0000e72000)="6501d903427ba1047c6db376efaa5d50", 0x10) sendto$inet6(r0, &(0x7f00002eb000)="", 0x0, 0x0, &(0x7f0000e0b000-0x1c)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xffffffffffffffff, 0xbb}, 0x0}, 0x1c) 2018/01/14 21:59:22 executing program 7: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001000-0xc)='/dev/autofs\x00', 0x2840, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x1000000) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x3, 0x32, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x0}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @multicast1=0xe0000001, @dev={0xac, 0x14, 0xffffffffffffffff, 0x0}, {[]}}, @icmp=@info_reply={0x10, 0x0, 0x0, 0x0, 0x0}}}}}, &(0x7f0000002000-0x10)={0x1, 0x1, [0x0]}) 2018/01/14 21:59:22 executing program 2: mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000001000-0x1)='/dev/admmidi#\x00', 0x10001, 0x0) faccessat(r0, &(0x7f000060b000-0x8)='./file0\x00', 0xc0, 0x400) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000279000)='/dev/sg#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000)=0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000d8f000-0xd)='/dev/binder#\x00', 0x0, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000001000-0x9)='/dev/kvm\x00', 0x0, 0x0) uname(&(0x7f0000132000-0xf)=""/15) socket$inet(0x2, 0xfffffffffffffffc, 0x68) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$tun(&(0x7f0000a9e000-0xd)='/dev/net/tun\x00', 0x0, 0x6) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000f32000)={@common='eql\x00', @ifru_names=@generic="c15c9a8b74308b1b2c5d0ce63d9d8226"}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00008dd000-0x20)={@common='eql\x00', @ifru_flags=0x301}) write$tun(r4, &(0x7f00004bf000)=@pi={0x0, 0x88e7, @ipv6={0x1, 0x6, "a54b1c", 0xd8, 0x0, 0x92, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}, {[@routing={0x17, 0xa, 0x0, 0x1c7, 0x0, [@loopback={0x0, 0x1}, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [0xff, 0xff], @broadcast=0xffffffff}, @dev={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x3b, 0x0, 0x800, 0xffff, 0x0, 0x1f, 0x1}, @dstopts={0x2c, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0], [@calipso={0x7, 0x18, {0x7ff, 0x4, 0x6, 0x5, [0x1, 0xf5]}}, @enc_lim={0x4, 0x1, 0x1ff}, @hao={0xc9, 0x10, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xaa}}, @padn={0x1, 0x2, [0x0, 0x0]}]}], @udp={0x1, 0x1, 0x3d, 0x0, "859a5ae18ab13ca145861e4b71f7cbed0ddaede756ce20d7f96fb5fb52493eaca46085090d011329c5dc0b89d0aa17138176450aec"}}}}, 0x104) faccessat(0xffffffffffffffff, &(0x7f0000de2000)='./file0\x00', 0x40, 0x0) r5 = syz_open_dev$binder(&(0x7f0000006000-0xd)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004000)={0x14, 0x0, &(0x7f00001c2000-0x6c)=[@increfs_done={0x40106308, 0x0, 0x0}], 0x0, 0x0, &(0x7f0000c8c000-0x1)=""}) sendfile(r5, r2, &(0x7f0000cab000)=0x0, 0x800) [ 83.225142] binder: 13792:13806 transaction failed 29189/-3, size 0-0 line 2957 [ 83.231484] binder: 13790:13793 BC_FREE_BUFFER u0000000000000000 no match [ 83.231500] binder: 13790:13793 BC_INCREFS_DONE node 212 has no pending increfs request [ 83.231515] binder: 13790:13793 Release 1 refcount change on invalid ref 2 ret -22 [ 83.231521] binder: 13790:13793 unknown command 0 [ 83.231530] binder: 13790:13793 ioctl c0306201 208fdfd0 returned -22 [ 83.292983] FAULT_INJECTION: forcing a failure. [ 83.292983] name failslab, interval 1, probability 0, space 0, times 1 [ 83.292995] CPU: 1 PID: 13825 Comm: syz-executor4 Not tainted 4.15.0-rc7-next-20180112+ #96 [ 83.292999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.293007] Call Trace: [ 83.293023] dump_stack+0x194/0x257 [ 83.293044] ? arch_local_irq_restore+0x53/0x53 [ 83.293086] should_fail+0x8c0/0xa40 [ 83.293106] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 83.293130] ? trace_event_raw_event_lock+0x340/0x340 [ 83.293143] ? perf_trace_lock+0x900/0x900 [ 83.293168] ? find_held_lock+0x35/0x1d0 [ 83.293230] ? trace_event_raw_event_sched_switch+0x800/0x800 [ 83.293249] ? rcu_note_context_switch+0x710/0x710 [ 83.293257] ? ip6_dst_lookup_tail+0xd90/0x18b0 [ 83.293286] should_failslab+0xec/0x120 [ 83.293301] kmem_cache_alloc_trace+0x4b/0x750 [ 83.293309] ? perf_trace_lock_acquire+0xe3/0x980 [ 83.293317] ? rcu_pm_notify+0xc0/0xc0 [ 83.293328] ? __local_bh_enable_ip+0x121/0x230 [ 83.293360] ip6_setup_cork+0xfb6/0x1640 [ 83.293368] ? check_noncircular+0x20/0x20 [ 83.293377] ? ip6_dst_lookup_tail+0x3f8/0x18b0 [ 83.293401] ? ip6_dst_mtu_forward+0x3c0/0x3c0 [ 83.293439] ip6_make_skb+0x2b5/0x5a0 [ 83.293453] ? ip_reply_glue_bits+0xb0/0xb0 [ 83.293472] ? ip6_push_pending_frames+0xe0/0xe0 [ 83.293487] ? ip6_dst_hoplimit+0x26c/0x420 [ 83.293500] ? lock_downgrade+0x980/0x980 [ 83.293519] ? lock_release+0xa40/0xa40 [ 83.293539] ? __lock_is_held+0xb6/0x140 [ 83.293580] ? ip6_dst_hoplimit+0xc1/0x420 [ 83.293592] ? ip6_find_1stfragopt+0x260/0x260 [ 83.293624] udpv6_sendmsg+0x27fc/0x3400 [ 83.293642] ? ip_reply_glue_bits+0xb0/0xb0 [ 83.293687] ? udpv6_setsockopt+0x80/0x80 [ 83.293705] ? reacquire_held_locks+0x1f9/0x3e0 [ 83.293714] ? reacquire_held_locks+0x1f9/0x3e0 [ 83.293734] ? find_held_lock+0x35/0x1d0 [ 83.293765] ? release_sock+0x1d4/0x2a0 [ 83.293779] ? lock_downgrade+0x980/0x980 [ 83.293790] ? lock_downgrade+0x980/0x980 [ 83.293822] ? __local_bh_enable_ip+0x121/0x230 [ 83.293839] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 83.293848] ? release_sock+0x1d4/0x2a0 [ 83.293858] ? trace_hardirqs_on+0xd/0x10 [ 83.293868] ? __local_bh_enable_ip+0x121/0x230 [ 83.293883] ? _raw_spin_unlock_bh+0x30/0x40 [ 83.293895] ? release_sock+0x1d4/0x2a0 [ 83.293953] inet_sendmsg+0x11f/0x5e0 [ 83.293961] ? inet_sendmsg+0x11f/0x5e0 [ 83.293971] ? __might_sleep+0x95/0x190 [ 83.293994] ? inet_create+0xf50/0xf50 [ 83.294014] ? selinux_socket_sendmsg+0x36/0x40 [ 83.294028] ? security_socket_sendmsg+0x89/0xb0 [ 83.294039] ? inet_create+0xf50/0xf50 [ 83.294055] sock_sendmsg+0xca/0x110 [ 83.294073] SYSC_sendto+0x361/0x5c0 [ 83.294094] ? SYSC_connect+0x4a0/0x4a0 [ 83.294106] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 83.294119] ? vfs_write+0x374/0x510 [ 83.294132] ? wait_for_completion+0x770/0x770 [ 83.294215] ? fput+0xd2/0x140 [ 83.294228] ? SyS_write+0x184/0x220 [ 83.294241] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 83.294270] SyS_sendto+0x40/0x50 [ 83.294290] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 83.294297] RIP: 0033:0x452cf9 [ 83.294301] RSP: 002b:00007f625f07bc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 83.294310] RAX: ffffffffffffffda RBX: 00007f625f07baa0 RCX: 0000000000452cf9 [ 83.294315] RDX: 0000000000000000 RSI: 00000000202eb000 RDI: 0000000000000013 [ 83.294320] RBP: 00007f625f07ba90 R08: 0000000020e0afe4 R09: 000000000000001c [ 83.294324] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000004b798c [ 83.294329] R13: 00007f625f07bbc8 R14: 00000000004b798c R15: 0000000000000000 [ 83.294442] BUG: unable to handle kernel paging request at ffffffff00024bc6 [ 83.294456] IP: dst_release+0x1e/0x90 [ 83.294459] PGD 6825067 P4D 6825067 PUD 0 [ 83.294473] Oops: 0002 [#1] SMP KASAN [ 83.294479] Dumping ftrace buffer: [ 83.294483] (ftrace buffer empty) [ 83.294486] Modules linked in: [ 83.294496] CPU: 1 PID: 13825 Comm: syz-executor4 Not tainted 4.15.0-rc7-next-20180112+ #96 [ 83.294500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.294508] RIP: 0010:dst_release+0x1e/0x90 [ 83.294512] RSP: 0018:ffff8801cf137598 EFLAGS: 00010246 [ 83.294519] RAX: 0000000000010000 RBX: ffff8801cf137720 RCX: 00000000ffffffff [ 83.294524] RDX: 0000000000010000 RSI: ffffc900035b1000 RDI: ffffffff00024b86 [ 83.294529] RBP: ffff8801cf1375a8 R08: ffffffff86941e80 R09: 0000000000000000 [ 83.294533] R10: 0000000000000000 R11: 0000000000000000 R12: ffffffff00024b86 [ 83.294538] R13: ffffffff00024b86 R14: ffff8801cf137648 R15: ffff8801cf1377c8 [ 83.294544] FS: 00007f625f07c700(0000) GS:ffff8801db300000(0000) knlGS:0000000000000000 [ 83.294549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.294554] CR2: ffffffff00024bc6 CR3: 00000001bd7f4005 CR4: 00000000001606e0 [ 83.294562] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.294566] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.294569] Call Trace: [ 83.294582] ip6_cork_release.isra.43+0x1bb/0x2c0 [ 83.294594] ip6_make_skb+0x4f1/0x5a0 [ 83.294604] ? ip_reply_glue_bits+0xb0/0xb0 [ 83.294619] ? ip6_push_pending_frames+0xe0/0xe0 [ 83.294633] ? ip6_dst_hoplimit+0x26c/0x420 [ 83.294645] ? lock_downgrade+0x980/0x980 [ 83.294660] ? lock_release+0xa40/0xa40 [ 83.294675] ? __lock_is_held+0xb6/0x140 [ 83.294704] ? ip6_dst_hoplimit+0xc1/0x420 [ 83.294713] ? ip6_find_1stfragopt+0x260/0x260 [ 83.294735] udpv6_sendmsg+0x27fc/0x3400 [ 83.294748] ? ip_reply_glue_bits+0xb0/0xb0 [ 83.294776] ? udpv6_setsockopt+0x80/0x80 [ 83.294791] ? reacquire_held_locks+0x1f9/0x3e0 [ 83.294799] ? reacquire_held_locks+0x1f9/0x3e0 [ 83.294814] ? find_held_lock+0x35/0x1d0 [ 83.294837] ? release_sock+0x1d4/0x2a0 [ 83.294848] ? lock_downgrade+0x980/0x980 [ 83.294858] ? lock_downgrade+0x980/0x980 [ 83.294883] ? __local_bh_enable_ip+0x121/0x230 [ 83.294896] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 83.294904] ? release_sock+0x1d4/0x2a0 [ 83.294912] ? trace_hardirqs_on+0xd/0x10 [ 83.294921] ? __local_bh_enable_ip+0x121/0x230 [ 83.294932] ? _raw_spin_unlock_bh+0x30/0x40 [ 83.294942] ? release_sock+0x1d4/0x2a0 [ 83.294986] inet_sendmsg+0x11f/0x5e0 [ 83.294993] ? inet_sendmsg+0x11f/0x5e0 [ 83.295004] ? __might_sleep+0x95/0x190 [ 83.295015] ? inet_create+0xf50/0xf50 [ 83.295029] ? selinux_socket_sendmsg+0x36/0x40 [ 83.295039] ? security_socket_sendmsg+0x89/0xb0 [ 83.295047] ? inet_create+0xf50/0xf50 [ 83.295057] sock_sendmsg+0xca/0x110 [ 83.295069] SYSC_sendto+0x361/0x5c0 [ 83.295084] ? SYSC_connect+0x4a0/0x4a0 [ 83.295094] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 83.295104] ? vfs_write+0x374/0x510 [ 83.295114] ? wait_for_completion+0x770/0x770 [ 83.295164] ? fput+0xd2/0x140 [ 83.295174] ? SyS_write+0x184/0x220 [ 83.295184] ? entry_SYSCALL_64_fastpath+0x5/0xa0 [ 83.295204] SyS_sendto+0x40/0x50 [ 83.295220] entry_SYSCALL_64_fastpath+0x29/0xa0 [ 83.295225] RIP: 0033:0x452cf9 [ 83.295228] RSP: 002b:00007f625f07bc58 EFLAGS: 00000212 ORIG_RAX: 000000000000002c [ 83.295236] RAX: ffffffffffffffda RBX: 00007f625f07baa0 RCX: 0000000000452cf9 [ 83.295241] RDX: 0000000000000000 RSI: 00000000202eb000 RDI: 0000000000000013 [ 83.295245] RBP: 00007f625f07ba90 R08: 0000000020e0afe4 R09: 000000000000001c [ 83.295250] R10: 0000000000000000 R11: 0000000000000212 R12: 00000000004b798c [ 83.295254] R13: 00007f625f07bbc8 R14: 00000000004b798c R15: 0000000000000000 [ 83.295279] Code: f7 ff 31 c0 5b 5d c3 66 0f 1f 44 00 00 55 48 89 e5 41 54 53 49 89 fc e8 b1 74 30 fd 4d 85 e4 74 21 e8 a7 74 30 fd b9 ff ff ff ff 41 0f c1 4c 24 40 89 cb 83 eb 01 78 33 e8 8f 74 30 fd 85 db [ 83.295397] RIP: dst_release+0x1e/0x90 RSP: ffff8801cf137598 [ 83.295400] CR2: ffffffff00024bc6 [ 83.295411] ---[ end trace 55083e105cf9929d ]--- [ 83.295416] Kernel panic - not syncing: Fatal exception [ 83.295865] Dumping ftrace buffer: [ 83.295869] (ftrace buffer empty) [ 83.295872] Kernel Offset: disabled [ 84.077823] Rebooting in 86400 seconds..